Privacy Policy

Who we are

Charlore AI is a production tool for creators of short-form AI video series. The Service generates images, video, audio, and text using third-party AI model providers based on the inputs you provide, and helps you plan, edit, assemble, export, and stage that content for posting. Charlore AI is an independent tool and is not affiliated with those providers or platforms.

Information we collect

• Account information. When you sign in with Google or Apple, we receive your name, email address, and profile image.
• Email sign-in and waitlist. We collect your email address to send sign-in codes and links. If you join the waitlist, we store your email and any use case you provide to contact you about access.
• Content you create or upload. The series, scripts, prompts, scene boards, reference images you upload (which may include photographs of people), generated images, video, and audio, captions, and posting-queue items.
• Billing information. Your subscription plan, status, usage balance, and a log of usage events (what was generated and how much usage it took). Payments are processed by Stripe; we do not store your full card number.
• Connected accounts. If you connect TikTok, we store OAuth access and refresh tokens so we can upload drafts you initiate. We never receive your TikTok password.
• Usage and technical data. Basic logs, device and browser information, and actions taken in the Service, used to operate and secure it.

How AI generation uses your information

To generate output, we send the inputs you provide (such as prompts, scripts, and reference images) to third-party AI model providers, including fal.ai, OpenAI, and Anthropic. Those providers process your inputs to return generated content and handle it under their own privacy and data-use policies, which may differ from ours, including their own retention and model-training practices. We do not use your content to train our own models. You should not submit inputs that you do not have the rights to use, including another person's likeness or voice without their consent.

For automated content-safety checks, OpenAI also processes prompts, uploaded and generated images (including photographs of people), and sampled frames from uploaded and generated videos. Sampling does not inspect every video frame and automated checks can miss prohibited content.

How we use information

• To provide, maintain, and improve the Service, including generating, storing, and exporting your content.
• To authenticate you and manage your workspace and team members.
• To process subscriptions, usage, and plan limits, and to answer your questions about a specific deduction.
• To upload a finished video to your TikTok inbox as a draft, only when you explicitly initiate it. We never publish on your behalf.
• To communicate with you about the Service, and to detect, prevent, and address abuse, fraud, or technical issues, and to comply with law.

How we share information (service providers)

We do not sell or "share" your personal information for cross-context behavioral advertising. We disclose information to the service providers that help us run the Service:

• AI model providers: fal.ai, OpenAI, Anthropic (to generate content from your inputs).
• Content safety: OpenAI (to screen text, images, and sampled video frames).
• Hosting and infrastructure: Vercel (application), Neon (database), Cloudflare R2 (media storage), Upstash (job queue).
• Payments: Stripe.
• Authentication: Google, Apple.
• Email delivery: Resend (sign-in, usage, billing, and safety messages).
• Error reporting: Sentry, when enabled (technical error and performance information; credentials and request bodies are removed before transmission).
• Posting, at your request: TikTok (Content Posting API, drafts only).

We may also disclose information to comply with the law, respond to lawful requests, enforce our Terms, or protect the rights, safety, and security of users and the public, and in connection with a merger, acquisition, or sale of assets.

Your privacy rights

Depending on where you live, you may have rights over your personal information. To exercise any right, email [email protected]. We will not discriminate against you for exercising these rights.

• United States (including California/CCPA). You may request to know, access, correct, or delete the personal information we hold about you, and to opt out of any sale or sharing of personal information. We do not sell or share personal information.
• EEA and UK (GDPR). You may request access, rectification, erasure, restriction, portability, and object to certain processing. Our legal bases are performance of our contract with you, our legitimate interests in operating and securing the Service, your consent where required, and compliance with legal obligations. You may lodge a complaint with your local data-protection authority.

Data retention and deletion

We retain your information for as long as your account is active or as needed to provide the Service. You can delete workspace content in the app, disconnect TikTok at any time (which removes the stored tokens), and request deletion of your account and associated data by contacting us. Some records may be retained where required for legal, tax, security, or fraud-prevention reasons. Content-report evidence and review decisions may be retained for safety and legal handling after an account is deleted; we remove the account-linked reporter contact fields. Pending message bodies are cleared by scheduled cleanup after 30 days and after successful delivery; delivery identifiers and timestamps may be retained.

Security

We use reasonable technical and organizational measures to protect your information, including encrypted transport and access controls. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.

Cookies

We use strictly necessary cookies to keep you signed in and to remember your active workspace. We do not use advertising or cross-site tracking cookies.

Children

The Service is intended for adults and is not directed to anyone under 18. We do not knowingly collect information from anyone under 18. If you believe a minor has provided us information, contact us and we will delete it.

International users

Your information may be processed in countries other than your own, including the United States, where we and our providers operate. Where required, we rely on appropriate safeguards such as the Standard Contractual Clauses for international transfers.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the date above and, where appropriate, by notice in the app.

Contact

Questions about this policy or your data: [email protected].