Privacy Policy

We collect information in two ways — information you provide directly, and information collected automatically.

Information you provide:

• Account details: your email address and password (hashed) when you register.
• Generation inputs: prompts, video topics, style preferences, and tone selections you enter to generate thumbnails or titles.
• Feedback and communications: any messages you send us directly via email or in-app feedback.

Information collected automatically:

• Usage data: pages visited, features used, buttons clicked, and session duration.
• Device data: browser type, operating system, screen resolution, and approximate location (country level).
• Cookies and local storage: session tokens for authentication and preference storage.

We use the information we collect for the following purposes:

• To provide and operate the OpusCue service, including AI thumbnail and title generation.
• To manage your account, authenticate you, and maintain session security.
• To process your generation inputs and return AI-generated results.
• To improve the product: analyzing usage patterns helps us fix bugs and build better features.
• To communicate with you: sending important service updates, security alerts, and — if you opt in — occasional product news.
• To enforce our Terms of Service and prevent misuse or abuse of the platform.

We do not sell your personal data to third parties. We do not use your generation inputs to train AI models without your explicit consent.

To deliver the service, we share limited data with trusted third-party providers:

AI Generation:

• OpenAI (DALL-E 3, GPT-4o) — your generation prompts are sent to OpenAI's API to produce thumbnail concepts and title suggestions. OpenAI's data use policy applies to these interactions.
• Replicate — used as an alternative AI provider for image generation. Your prompts may be sent to Replicate's API.
• HuggingFace — used for additional AI model inference. Prompts may be processed via HuggingFace's hosted inference API.
• Groq — used for fast language model inference for title generation. Prompts may be processed via Groq's API.

Infrastructure & Storage:

• S3-Compatible Object Storage — generated thumbnail images are stored in secure cloud object storage (such as AWS S3 or equivalent S3-compatible providers). Files are stored privately and accessed via signed URLs.

We do not use any third-party authentication platforms (such as Auth0, Supabase, or Firebase). Your credentials never leave our infrastructure.

Each third-party provider is contractually bound to protect your data in accordance with applicable privacy laws. We choose providers with strong data protection practices.

We retain your data for as long as your account is active. Specifically:

• Your account data (email, settings) is kept for the lifetime of your account.
• Generated thumbnails and title history are retained to power your generation history dashboard.
• If you delete your account, we will delete your personal data within 30 days, except where we are legally required to retain it.

OpusCue uses minimal, functional cookies only:

• Session cookies: required to keep you logged in during your session.
• Preference cookies: to remember light/dark mode or language settings.

We do not use third-party advertising cookies or tracking pixels. You can clear cookies at any time through your browser settings, but this will log you out of your account.

Depending on your location, you may have the following rights under applicable data protection law (including GDPR and CCPA):

• Access: request a copy of the personal data we hold about you.
• Correction: ask us to correct inaccurate or incomplete data.
• Deletion: request that we delete your account and associated personal data.
• Data portability: receive your data in a structured, machine-readable format.
• Objection: object to or restrict certain processing of your data.

To exercise any of these rights, email us at privacy@opuscue.com. We will respond within 30 days.

We implement industry-standard security measures to protect your information:

• All data is encrypted in transit using TLS/HTTPS.
• Passwords are hashed using secure algorithms — we never store plain-text passwords.
• Access to production infrastructure is restricted to authenticated team members.

While we take security seriously, no method of internet transmission is 100% secure. In the event of a data breach that affects your rights, we will notify you as required by law.

OpusCue is not directed to children under 13 years of age (or 16 in the EU). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page and, for material changes, notify you via email or an in-app notification. Continued use of the service after changes constitutes your acceptance of the updated policy.

If you have any questions, concerns, or requests related to this Privacy Policy, please reach out: