Privacy Policy
Last Updated: February 27, 2026
This Privacy Policy describes how FluxNote ("FluxNote," "we," "us," or "our") collects, uses, shares, and protects your personal information when you use our website at https://fluxnote.io and our AI video generation platform (collectively, the "Service"). By accessing or using the Service, you agree to the practices described in this policy.
1. Introduction & Who We Are
FluxNote is an AI-powered video generation platform that enables creators, marketers, and businesses to produce high-quality short-form videos using artificial intelligence. The Service is operated by FluxNote.
This policy applies to all visitors of our website and registered users of the Service. If you are accessing FluxNote on behalf of an organisation, "you" refers to both you individually and the organisation you represent.
2. Information We Collect
We collect information that you provide directly to us, information we collect automatically when you use the Service, and information from third-party sources.
2.1 Account Information
When you create a FluxNote account, we collect your name, email address, and a hashed password. If you sign up via a third-party OAuth provider (e.g., Google), we receive your name and email address as permitted by your provider's privacy settings. You may optionally provide a profile picture or display name.
2.2 Payment Information
All payment transactions are processed by our third-party payment processors — Razorpay (for Indian customers) and Stripe (for international customers). We do not directly collect, store, or have access to your full credit or debit card numbers, CVV codes, bank account details, or UPI credentials. These processors are PCI-DSS compliant and governed by their own privacy policies. We do receive and store non-sensitive billing metadata such as your subscription plan, billing country, currency, transaction ID, and subscription status to manage your account.
2.3 Usage Data
We collect information about how you interact with the Service, including videos you create, scripts and prompts you enter, features you use (e.g., caption styles, motion effects, stock footage selections), export actions, and the frequency and duration of your sessions. This data helps us understand how users engage with the product and how we can improve it.
2.4 Technical Data
When you access the Service, we automatically collect certain technical information, including your IP address, browser type and version, operating system, device type, screen resolution, referring URLs, and timestamps of your requests. This information is used for security monitoring, debugging, abuse prevention, and service optimisation.
2.5 Cookies and Analytics
We use cookies and similar tracking technologies to operate the Service and understand user behaviour. Specifically, we use:
- Session cookies — required to keep you logged in during a session.
- Preference cookies — to remember your settings and preferences.
- Google Analytics — to collect anonymised aggregate data about website traffic, page views, and user flows. Google Analytics may set its own cookies. You can opt out via the Google Analytics Opt-out Browser Add-on.
See Section 7 for more detail on our cookies practices.
3. How We Use Your Information
We use the information we collect for the following purposes:
- →To provide and operate the Service. Your account information, usage data, and uploaded content are required to generate videos, store your projects, and serve your dashboard.
- →To improve and develop the Service. Aggregate and anonymised usage data helps us identify bugs, optimise performance, and prioritise new features.
- →To process payments. Billing metadata is used to manage subscriptions, handle failed payments, issue refunds, and maintain accurate financial records as required by law.
- →To send transactional emails. We send account-related communications such as welcome emails, password reset links, subscription confirmations, payment receipts, and important service notices. You cannot opt out of transactional emails while your account is active.
- →To send marketing emails. With your consent (or where permitted by applicable law for existing customers), we may send you newsletters, product updates, and promotional offers. You can opt out at any time by clicking "Unsubscribe" in any marketing email or by emailing support@fluxnote.io.
- →To ensure security and prevent fraud. Technical data and usage patterns are analysed to detect and block suspicious activity, abuse of the API, or violations of our Terms of Service.
- →To comply with legal obligations. We may process your data where required by applicable law, including the Indian Information Technology Act, 2000 and its Rules, and other regulations applicable to our business.
4. How We Share Your Information
We do not sell, rent, or trade your personal information to any third party for their own commercial purposes. We share your information only in the following limited circumstances:
4.1 Payment Processors
When you make a purchase, your billing information is shared directly with Razorpay and/or Stripe as necessary to complete the transaction. These processors operate under their own privacy policies and are independently responsible for the data they receive. We encourage you to review the Razorpay Privacy Policy and Stripe Privacy Policy.
4.2 Cloud Infrastructure Providers
The Service is hosted on cloud infrastructure provided by Amazon Web Services (AWS) and/or Google Cloud Platform (GCP). Your data, including videos and account information, is stored on servers managed by these providers. Both providers maintain robust security certifications and data processing agreements with us.
4.3 Analytics Providers
We share anonymised, aggregated website usage data with Google Analytics to help us understand how users interact with our website. This data does not directly identify individual users.
4.4 Legal Requirements
We may disclose your information if required to do so by law or in response to a valid legal request from a competent authority (such as a court order, government agency, or law enforcement body), provided such disclosure is consistent with applicable law. We will endeavour to notify you of such requests where legally permissible.
4.5 Business Transfers
In the event of a merger, acquisition, restructuring, sale of assets, or similar business transaction, your information may be transferred to the acquiring entity. We will notify you via email or a prominent notice on the Service before your data is subject to a different privacy policy.
We never sell your personal data.
FluxNote does not sell, rent, lease, or otherwise trade your personal information to third parties for money or other consideration.
5. Data Retention
We retain your personal information for as long as your account is active or as needed to provide you with the Service. Specifically:
- •
Account data is retained for the duration of your account and for up to 90 days after account deletion, to allow for recovery in case of accidental deletion and to comply with legal obligations.
- •
Video projects and generated content are retained while your account is active. Upon account deletion, your videos will be permanently deleted within 30 days unless we are legally required to retain them.
- •
Payment and billing records are retained for a minimum of 7 years as required by Indian financial regulations and tax laws.
- •
Log and technical data (e.g., IP address logs, server access logs) are retained for up to 12 months for security and debugging purposes, after which they are deleted or anonymised.
- •
Analytics data is retained in aggregated, anonymised form indefinitely and in identifiable form for up to 26 months per Google Analytics default settings.
After the applicable retention period, data is securely deleted or anonymised so that it can no longer be associated with you.
6. Your Rights
Depending on your location and applicable law, you may have certain rights regarding your personal data. We honour these rights for all users regardless of jurisdiction.
6.1 Rights Under GDPR (EEA/UK Users)
If you are located in the European Economic Area or the United Kingdom, you have the following rights under the General Data Protection Regulation (GDPR) and/or the UK GDPR:
- •
Right of Access — You may request a copy of the personal data we hold about you.
- •
Right to Rectification — You may request correction of inaccurate or incomplete personal data.
- •
Right to Erasure ("Right to Be Forgotten") — You may request deletion of your personal data, subject to our legal retention obligations.
- •
Right to Data Portability — You may request your data in a structured, commonly used, machine-readable format.
- •
Right to Restrict Processing — You may request that we restrict the processing of your data under certain circumstances.
- •
Right to Object — You may object to our processing of your data for direct marketing or where processing is based on legitimate interests.
- •
Right to Withdraw Consent — Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
6.2 Rights Under the Indian IT Act and DPDP Act
Under the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023 (where applicable), Indian residents have the right to:
- •
Review and correct your personal data held by us.
- •
Withdraw consent for the use of your sensitive personal data or information, provided that withdrawal of consent may affect your ability to use certain features of the Service.
- •
Raise a grievance with us regarding the handling of your personal data.
6.3 How to Exercise Your Rights
To exercise any of the rights described above, please contact us at support@fluxnote.io with the subject line "Privacy Request." We will respond to your request within 30 days. We may need to verify your identity before processing your request. There is no charge for making a request, though we may charge a reasonable fee for manifestly unfounded or excessive requests.
7. Cookies Policy
Cookies are small text files placed on your device by websites you visit. We use cookies to make our Service work correctly and to understand how it is used.
| Type | Purpose | Retention |
|---|---|---|
| Strictly Necessary | Authentication session tokens required to keep you logged in | Session / 30 days |
| Functional | Remembers your preferences (e.g., theme, editor settings) | 1 year |
| Analytics | Google Analytics — anonymised traffic and usage statistics | Up to 2 years |
| Payment | Razorpay/Stripe fraud prevention and checkout state | Session |
Most web browsers allow you to control cookies through their settings. You can set your browser to refuse cookies or delete specific cookies. However, if you disable strictly necessary cookies, some parts of the Service may not function correctly.
For detailed information on managing cookies, visit allaboutcookies.org.
8. Children's Privacy
The Service is not directed to children under the age of 13, and we do not knowingly collect personal information from anyone under 13 years of age. If you are under 13, please do not use the Service or provide any information through it.
If you are between the ages of 13 and 18, you may only use the Service with the involvement and consent of a parent or legal guardian.
If we become aware that we have inadvertently collected personal information from a child under 13, we will take steps to delete that information as quickly as possible. If you believe we may have collected information from a child, please contact us at support@fluxnote.io.
9. Security Practices
We take the security of your personal information seriously and implement commercially reasonable technical and organisational measures to protect it from unauthorised access, disclosure, alteration, or destruction. Our security measures include:
- •
Encryption in transit: All data transmitted between your browser and our servers is encrypted using TLS 1.2 or higher (HTTPS).
- •
Encryption at rest: Sensitive data stored in our databases is encrypted at rest using industry-standard encryption algorithms.
- •
Password hashing: Passwords are never stored in plain text; they are hashed using bcrypt with an appropriate cost factor.
- •
Access controls: Access to production systems and user data is restricted to authorised personnel only, following the principle of least privilege.
- •
Monitoring and alerting: We maintain automated monitoring for unusual access patterns, failed login attempts, and other anomalies that may indicate a security breach.
While we strive to protect your data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security. In the event of a data breach that affects your rights and freedoms, we will notify you and relevant authorities as required by applicable law, within the legally prescribed timeframes.
10. International Data Transfers
FluxNote is operated from India, and our servers may be located in various regions including the United States, Europe, and Asia-Pacific, depending on the cloud infrastructure provider's region configuration. By using the Service, you acknowledge and agree that your personal information may be transferred to and stored on servers located outside your country of residence.
For users in the EEA or UK, where we transfer personal data outside the EEA/UK, we ensure adequate safeguards are in place, such as:
- •
Standard Contractual Clauses (SCCs) approved by the European Commission.
- •
Transfers to countries or processors that have been deemed to provide an adequate level of protection by the European Commission.
You may request information about the safeguards we have in place for international data transfers by contacting us at support@fluxnote.io.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or for other operational reasons. When we make changes, we will:
- •
Update the "Last Updated" date at the top of this page.
- •
For material changes, notify you via email to your registered address and/or display a prominent notice in the Service at least 14 days before the changes take effect.
- •
For minor changes (such as clarifications or corrections), simply update the policy without separate notification.
Your continued use of the Service after any changes to this Privacy Policy will constitute your acceptance of the updated policy. We encourage you to review this policy periodically.
12. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or the way we handle your personal data, please do not hesitate to contact us. We are committed to resolving any issues promptly and transparently.
Privacy Contact
Company: FluxNote
Email: support@fluxnote.io
Website: https://fluxnote.io
We aim to respond to all privacy-related enquiries within 5 business days and no later than 30 days.