Privacy Policy

[company name] ([registration no.]), [address], operates ZeeZoom (zeezoom.app) and is the database controller for the personal data collected through it. Contact us about privacy at [email protected].

This policy follows the Israeli Protection of Privacy Law, 5741-1981 (including Amendment 13) and its regulations, and — where applicable — the EU GDPR.

• Account details: email address, and with Google sign-in also your name and basic profile picture.
• Content you create and upload: prompts, scripts, drafts, video, audio and image files, voice recordings, reference images, and the videos and images generated.
• Settings: language preferences, default models, recipes, and provider API keys if you choose to connect them.
• Purchases: amount, package, transaction ID and payment status. Payment method details are collected and processed by Paddle and never reach us.
• Technical data: IP address, browser and device type, server and error logs, for operation, security and abuse prevention.
• Support: the content of your messages to us.

Some content may include special-category information — for example face images, voice recordings or sexual content created in 18+ mode. Such information is used only to provide the Service you requested and is kept under strict access controls.

You are under no legal obligation to provide data to us; you provide it voluntarily and with your consent. If you do not provide the data needed to open an account and create, we cannot provide the Service.

• To provide the Service: saving drafts, generating videos and images, showing your library and gallery, and enabling sharing.
• To charge credits, show cost estimates and handle purchases, refunds and requests.
• For security, fraud and abuse prevention, rate limits and enforcing the Acceptable Use Policy.
• To support you, send essential service messages and comply with the law.
• To improve the Service based on aggregate operational data.

We do not sell personal data, do not use it for targeted advertising, and do not use your content to train our own models. We will not send you marketing messages without your explicit prior consent, and every such message will include an unsubscribe option.

We share data only as needed to run the Service, with providers acting on our behalf:

• Supabase — user authentication and database.
• Google Cloud — running our servers (Israel region).
• Cloudflare R2 — storage of files, videos and images.
• Vercel — hosting the website interface.
• Paddle — payment processing, invoicing and taxes.
• AI providers you choose for each creation (e.g. OpenRouter, Google Gemini, fal, Runway, RunPod, ElevenLabs, Microsoft Azure and Together) — receive the prompt and files the creation needs, and may retain them for a limited period under their own policies.
• Pexels and Pixabay — receive only search terms for stock footage.

Beyond that we disclose data only when required by law or court order, or to protect rights, safety or the Service.

Some of our providers operate outside Israel (for example in the US and EU), so data may be transferred and processed there. Transfers follow the Israeli Privacy Protection (Transfer of Data to Databases Abroad) Regulations, 5761-2001, and are covered by data processing agreements and data protection undertakings.

We keep data while your account is active or as needed for the Service. After a deletion request we delete your data and files within a reasonable time, except records we must keep by law (such as transaction records) and backups that are deleted on their regular cycle.

We use reasonable, customary measures to protect data, including encryption in transit, per-owner access control for every file and token-based share links. Your API keys are stored securely and used only for requests to the provider you chose.

No system is perfectly secure. If we learn of a serious security incident we will act to contain it, report it to the Privacy Protection Authority as required by the Privacy Protection (Data Security) Regulations, 5777-2017, and inform you where required.

You may access the data we hold about you, ask to correct inaccurate data and ask to delete your data and account. Where the GDPR applies to you, you also have additional rights (such as data portability and restriction of processing).

Send requests to [email protected]. We will answer access requests within 30 days, as required by law (sections 13–14 of the Law). If you are not satisfied, you may contact the Privacy Protection Authority.

We use only the cookies and local storage needed to run the Service:

• Sign-in cookies — to keep you securely signed in.
• Language preference — to show the site in the language you chose.
• Interface preferences (such as theme and view settings) — stored in your browser.

The site has no advertising cookies or third-party analytics tools. If we add any, we will update this policy and ask for your consent as required.

The Service is intended for people aged 18 and over. We do not knowingly collect data about minors; if you learn of such a case, contact us and we will delete it.

We will update this policy from time to time and announce material changes on the site or by email. The date at the top of the page shows the last update.