Privacy policy

AIM WORLD ("we," "us," or "our") operates AIM Previz, an AI-powered cinematography and visual storytelling platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. We are committed to protecting your privacy, ensuring the security of your creative work, and complying with applicable data protection regulations including GDPR, CCPA, and the EU AI Act.

2.1 Information You Provide

• +Account Information: Email address and password when you create an account; profile information you choose to add
• +Payment Information: Billing address, subscription details, and payment method (processed securely by Stripe—we never store full card numbers)
• +User Content: Reference images you upload, prompts and director's notes you provide, generated frames, animated videos, and upscaled media
• +Project Data: Project names, settings, presets, shot sequences, lighting configurations, camera profiles, and art style selections
• +Collaboration Data: Team member invitations, client review feedback, annotations, and shared project access
• +Communications: Support tickets, feedback, and any messages you send to us
• +Referral Information: Referral codes shared and redeemed

2.2 Information Collected Automatically

• +Usage Analytics: Features used, generation parameters, session duration, and interaction patterns (collected via PostHog with your consent)
• +Error Monitoring: Application errors, stack traces, and performance metrics (collected via Sentry to improve stability)
• +Device Information: Browser type, operating system, screen resolution, and device identifiers
• +Log Data: IP address, access timestamps, pages visited, and referral URLs
• +Cookies: Essential cookies for authentication and optional analytics cookies (subject to your consent)

We use your information to:

• +Provide, maintain, and improve the Service including AI image generation, video animation, and upscaling
• +Process your creative requests through our AI generation pipeline
• +Handle payments, manage subscriptions, and process referral rewards
• +Enable team collaboration and client review workflows
• +Send transactional emails (generation complete, subscription updates, password resets)
• +Send marketing communications (with your consent, manageable via email preferences)
• +Provide customer support and respond to inquiries
• +Monitor application performance and fix bugs (via Sentry error tracking)
• +Analyze usage patterns to improve user experience (via PostHog, with consent)
• +Detect, prevent, and address security threats, fraud, and abuse
• +Comply with legal obligations and enforce our terms

We use the following categories of third-party services to operate the platform:

• +AI Generation: We use AI model providers (including Google Gemini and others) to process your image generation, animation, and upscaling requests. Your content is transmitted securely and processed per our data processing agreements.
• +Payment Processing: Stripe handles all payment transactions. We never see or store your full payment card details.
• +Analytics (with consent): PostHog provides product analytics to help us understand feature usage and improve the platform.
• +Error Monitoring: Sentry captures application errors to help us maintain stability and fix issues quickly.
• +Email Delivery: Resend powers our transactional and marketing emails.
• +Infrastructure: Our platform runs on Supabase (database, authentication, storage) with data centers in secure locations.

We use cookies and similar technologies as follows:

• +Essential Cookies: Required for authentication, session management, and security. Cannot be disabled.
• +Analytics Cookies: Help us understand how you use the Service. Only enabled with your consent.
• +Preference Cookies: Remember your settings and preferences.

On your first visit, you'll see a cookie consent banner. You can choose "Accept All" for full analytics or "Essential Only" for minimal tracking. You can change your preference by clearing your browser cookies.

The full detail — every cookie, who sets it, and how long it lasts — is in the Cookie Policy.

We may share your information with:

• +Service Providers: Third parties that help us operate the Service (AI processing, hosting, payment processing, analytics, email delivery)
• +Team Members: Other users you explicitly invite to collaborate on projects (they see only what you share)
• +Clients: External reviewers you share project links with (limited to shared frames and enabled feedback features)
• +Legal Requirements: When required by law, court order, or to protect our rights, safety, or property
• +Business Transfers: In connection with a merger, acquisition, or sale of assets (with notice to you)

We do not sell your personal information to third parties.

We implement industry-standard security measures:

• +TLS 1.3 encryption for all data in transit
• +AES-256 encryption for data at rest
• +Row-Level Security (RLS) ensuring users can only access their own data
• +Regular security audits and automated vulnerability scanning
• +Rate limiting and abuse prevention systems
• +Secure authentication with password hashing (bcrypt)
• +Admin access logging and audit trails
• +Secure data centers with physical security and redundancy

We retain your data as follows:

• +Account Data: Retained while your account is active and for 30 days after deletion request to allow recovery
• +Projects and Content: Retained until you delete them or close your account
• +Generated Media: Stored in your account indefinitely until deleted
• +Usage Logs: Retained for 90 days for security and debugging purposes
• +Payment Records: Retained for 7 years as required for tax and accounting purposes
• +Support Communications: Retained for 2 years after resolution

You can request account deletion from your Account Settings. Upon deletion, we permanently remove your personal data and content, except where retention is required by law.

Depending on your location (GDPR, CCPA, and other privacy laws), you have the following rights:

• +Access: Request a copy of your personal data
• +Correction: Request correction of inaccurate data
• +Deletion: Request deletion of your account and data (self-service available in Account Settings)
• +Portability: Request your data in a machine-readable format
• +Objection: Object to certain processing (e.g., marketing)
• +Restriction: Request we limit how we use your data
• +Withdraw Consent: Withdraw consent for optional processing (e.g., analytics cookies)
• +Opt-Out of Sale: California residents: We do not sell personal information, but you may opt out of any future sale
• +Non-Discrimination: We will not discriminate against you for exercising your privacy rights

To exercise these rights, email us at privacy@aimworld.ai. We respond within 30 days (or sooner where required by law).

We send the following types of emails:

• +Transactional: Account verification, password resets, generation notifications, subscription updates (cannot be disabled)
• +Marketing: Product updates, tips, and promotions (opt-in only, unsubscribe anytime)
• +Collaboration: Team invitations and client feedback notifications (configurable in settings)

Manage your email preferences in Account Settings → Email Preferences.

Your information may be transferred to and processed in countries other than your own, including the United States. We ensure appropriate safeguards are in place for such transfers, including Standard Contractual Clauses (SCCs) approved by the European Commission and compliance with the EU-US Data Privacy Framework where applicable.

The Service is not intended for users under 18 years of age (or the age of majority in your jurisdiction). We do not knowingly collect personal information from children. If you become aware that a child has provided us with personal information, please contact us immediately at privacy@aimworld.ai and we will delete such information.

We may update this Privacy Policy to reflect changes in our practices, legal requirements, or for other operational reasons. For material changes, we will notify you via email or through a prominent notice on the Service at least 30 days before the changes take effect. Your continued use after the effective date constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy, want to exercise your rights, or have concerns about our data practices:

• +Email: privacy@aimworld.ai
• +Data Protection Officer: dpo@aimworld.ai
• +AIM WORLD: www.aimworld.ai