Privacy Policy

RandomAct (“we,” “us,” or “our”) operates the website at randomact.co and the web application at ai.randomact.co (collectively, the “Service”). We are committed to protecting your personal information and your right to privacy in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Canadian privacy legislation.

This Privacy Policy describes what information we collect, how we use it, and your rights regarding that information. By using our Service, you agree to the collection and use of information as described in this policy.

Account Information

When you create an account, we collect:

• Name and email address
• Password (stored in hashed form)
• Invite code (if applicable)

Payment Information

Payment processing is handled by Stripe. We do not directly store your credit card number, bank account details, or other financial account information. Stripe’s privacy policy governs the collection and use of your payment data.

Usage Data

We automatically collect certain information when you use the Service, including:

• Video generation requests and parameters
• Images and media you upload for video generation
• Credit usage and transaction history
• Device information, browser type, and IP address
• Pages visited and features used

Cookies and Tracking Technologies

We use essential cookies to maintain your session and authenticate your account. We do not use third-party advertising or tracking cookies.

We use the information we collect to:

• Provide, operate, and maintain the Service
• Process payments and manage your credit balance
• Generate AI-powered videos based on your inputs
• Send transactional emails (account verification, receipts)
• Respond to your inquiries and support requests
• Improve and develop new features for the Service
• Detect and prevent fraud or abuse

We process your personal information based on:

• Consent: You provide consent when you create an account and use the Service.
• Contract performance: Processing is necessary to provide the services you have requested.
• Legitimate interests: We may process data to improve the Service, prevent fraud, and ensure security.

We do not sell, rent, or trade your personal information. We share your data only with the following third-party service providers who process it on our behalf:

• Stripe — Payment processing
• Resend — Transactional email delivery
• Vercel — Application hosting and deployment
• Supabase — Database and authentication infrastructure
• AI providers — Video and image generation (your prompts and uploaded media are sent to these providers to generate content)

Each provider processes your data in accordance with their own privacy policies and our data processing agreements.

We retain your account information for as long as your account is active. Generated videos are stored for 30 days after creation and then automatically deleted. You may download any videos you wish to keep permanently during this period.

If you delete your account, we will remove your personal information within 30 days, except where we are required to retain it for legal or regulatory purposes.

Under Canadian privacy law, you have the right to:

• Access your personal information that we hold
• Correct any inaccurate or incomplete personal information
• Withdraw consent for the collection, use, or disclosure of your personal information (subject to legal or contractual obligations)
• Request deletion of your personal information

To exercise any of these rights, please contact us at our contact page or email us at hello@randomact.co.

If you are not satisfied with our response, you have the right to file a complaint with the Office of the Privacy Commissioner of Canada.

The Service is not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete that information promptly.

Your information may be transferred to and processed in countries other than Canada, including the United States, where our service providers operate. When we transfer your data internationally, we take reasonable steps to ensure it is protected in accordance with this Privacy Policy and applicable Canadian privacy laws.

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page and updating the “Last updated” date. Your continued use of the Service after any changes constitutes acceptance of the updated policy.

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

• Email: hello@randomact.co
• Contact form: randomact.co/landing/contact
• Phone: +1 604 359 3137