Privacy Policy

Last updated: May 11, 2026

1. Information We Collect

We collect information you provide directly to us, such as when you create an account, upload photos, or contact us for support.

  • Account information (email address, name)
  • Photos and images you upload for video creation
  • Payment information (processed securely through third-party providers)
  • Communication preferences and support inquiries

2. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our video creation services
  • Process your photos to create animated videos
  • Send you technical notices and support messages
  • Process payments and send billing information
  • Respond to your comments and questions

We do not use your photos to train AI models. To generate your videos we send your photos to third-party AI providers (listed in Section 3). Those providers process your photos under their own terms; our agreements with them do not authorize training on your data, but their general policies are theirs to publish.

3. Who We Share Information With

We do not sell, rent, or trade your personal information. We share information only with the following categories of service providers, strictly for the purposes shown:

AI video generation — your photos are sent to one of the following providers at the time of generation, selected by us:

  • Runway ML (United States)
  • Atlas Cloud (United States)
  • Higgsfield (United States)
  • AIMLAPI / Kling V2 (United States; models developed by Kuaishou)
  • Hailuo 02 / MiniMax (China)

Payments — Freemius (Israel; with payment-card networks in their jurisdictions).

Email delivery — Resend (United States).

Analytics — PostHog (United States/EU), Google Tag Manager and Google Analytics (United States), Meta Pixel (United States).

Hosting and storage — Vercel (United States), Supabase (Singapore/EU depending on region), AWS (United States).

International transfers. Some processors are located outside Israel and the EEA, including the United States and China. By using Echoes, you consent to the international transfer of your data to these processors for the purposes described above.

Public sharing. If you choose to share a clip or video using the share button, we copy that file to a public storage bucket with a permanent URL. Anyone with that URL can view the content. Sharing is opt-in per clip; you can stop sharing by deleting the shared copy from your dashboard.

Other disclosures. We may share information to comply with legal obligations, to protect our rights and prevent fraud, or with your specific consent.

4. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.

5. Data Retention

We retain your personal information only for as long as necessary to provide our services and fulfill the purposes outlined in this privacy policy, unless a longer retention period is required by law.

6. Your Rights

You have the right to:

  • Access your personal information
  • Correct inaccurate information
  • Request deletion of your information
  • Object to processing of your information
  • Data portability

To exercise any of these rights, email contact@your-echoes.com from the email address on your account. We will respond within 30 days. EU and Israeli residents have the right to lodge a complaint with their supervisory authority (the Israeli Privacy Protection Authority for Israeli residents; your national DPA for EU residents).

7. Cookies and Tracking

We use cookies and similar tracking technologies to improve your experience, analyze usage patterns, and personalize content.

We also use a short-lived essential cookie, echoes_marketing_opt_in, to carry your marketing email preference across the Google sign-in redirect. It is set only when you submit the sign-in form, expires after 10 minutes, and is cleared once your preference is saved to your account.

Marketing emails. We send marketing emails only to users who explicitly opt in at sign-up. You can withdraw consent at any time through the in-app email preferences page, by clicking the unsubscribe link in any marketing email, or by emailing contact@your-echoes.com. Withdrawing marketing consent does not affect transactional emails (account, billing, generation status).

8. Children

Child users. Echoes is not intended for users under 16 in the EEA or under 13 elsewhere. We do not knowingly create accounts for children under those ages.

Photos of children. When you upload a photo of a child, you confirm that you have parental authority over that child or have permission from a person who does (see Terms section 3.1). If you become aware that someone else's child appears in your uploads without permission, you should remove that content.

9. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by posting the new policy on this page.

10. Contact Us

If you have any questions about this privacy policy, please contact us at:

Email: contact@your-echoes.com