Privacy Policy
Last updated 30 September 2026
This policy explains what Gridbits (“we”) collects when you use Quicky, why, who we share it with, and your choices. We collect only what we need to run the Service.
What we collect
- Account: your email address and sign-in details (a sign-in link, or your Google account’s name and email if you use Google).
- Your content: ideas, scripts and voiceovers you submit, and everything generated for you: scripts, images, narration, subtitles, videos and captions.
- Voice recordings: voiceovers may contain your voice or other people’s voices. Upload someone else’s voice only if they have agreed, and tell them we process it as described here.
- Credits and billing: your credit balance and history, your plan, and identifiers from our payment provider. We never see or store your full card details; Dodo Payments handles those.
- Technical data: basic logs such as IP address, browser and error reports, used to keep the Service secure and working.
Cookies
We use only the cookie needed to keep you signed in. We don’t use advertising or analytics cookies. If that changes, we’ll update this policy and ask for consent where the law requires it.
How we use it
- To make your videos and run your account, credits and payments.
- To prevent abuse, for example duplicate accounts made to collect free credits.
- To send you service emails (sign-in links, receipts, important changes). We don’t send marketing email without your consent.
- We don’t use your content to train AI models, and we don’t sell it.
Legal bases
We process your data to perform our contract with you (running your account and making your videos), for our legitimate interests (security and preventing abuse), to meet legal obligations (such as tax records), and with your consent where the law requires it.
Who processes your data
To make a video, your content passes through these providers. We send each one only what it needs for the task listed. Anthropic doesn’t train its models on API data by default. ElevenLabs (narration and voiceover transcription) and fal.ai (images) may use data sent to them to improve their services, as described in their own terms. Providers may also keep data for a limited time for security and abuse monitoring.
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Accounts, sign-in emails, database and file storage (your uploads and generated media) | India (Mumbai) |
| Sign-in, only if you choose “Continue with Google” | Global | |
| Vercel | Hosting the website | Global |
| Trigger.dev | Running background jobs that make your videos | USA / EU |
| Anthropic (Claude) | Writing scripts, planning scenes and writing captions from your idea or script | USA |
| ElevenLabs | Narration (text to speech) and transcribing uploaded voiceovers | USA / EU |
| fal.ai | Generating images from prompts and reference images | USA |
| Dodo Payments | Checkout, payments, taxes, invoices and the billing portal (merchant of record) | India / USA |
Some providers process data outside India. Where they do, we rely on their contractual safeguards for international transfers.
How long we keep it
- Your projects and media are kept while your account is open, so you can download or re-cut them.
- Server and job logs are kept for up to 30 days. Generated images also stay briefly on our image provider’s servers.
- When you delete your account, we delete your content and media within 30 days, except records we must keep by law (such as invoices, which Dodo Payments keeps as merchant of record).
Your rights
Depending on where you live, including under India’s Digital Personal Data Protection Act, 2023 and the EU/UK GDPR, you can ask to access, correct, download or delete your personal data, withdraw consent, or complain to a data protection authority. Email vaibhav@gridbits.in from your account’s email address and we’ll respond within 30 days.
Security
Data is encrypted in transit and at rest, your files are stored privately and shared only through short-lived links, and access is limited to what running the Service requires. No system is perfectly secure; we’ll notify you and the relevant authorities of a breach as the law requires.
Children
The Service is for people aged 18 and over. We don’t knowingly collect data from children.
Changes and contact
If we change this policy materially, we’ll tell you at least 14 days before it applies.
Grievance contact: Grievance Officer, Gridbits, Bengaluru, Karnataka, India, vaibhav@gridbits.in. We acknowledge complaints within 48 hours and resolve them within one month. If you are in India and unhappy with our response, you can complain to the Data Protection Board of India.