Legal

Privacy policy

Last updated: 7 October 2026

1. Information we collect

• Account details. When you sign in with Google we receive your name, email address and profile photo. We never see your Google password.
• Brand and video content. Logos, colours, fonts, business name and contact details, product photos, prices and text you add to brand kits and videos, and the videos we render for you.
• Billing records. The packs you buy, amounts, order and payment ids and your credit history. Card, UPI and bank details are entered directly with Razorpay or PayPal; we do not receive or store them.
• Business API data. API keys (shown to you once), webhook URLs, batch and video requests including any external ids and metadata you send.
• Technical data. IP address, browser type, timestamps and error logs needed to run, secure and debug the service.
• Browser storage. We store a copy of the template catalogue and, before you sign in, a draft brand kit in your browser's local storage. We do not use advertising cookies.

2. How we use it

• To provide the service: sign you in, save your brand kits, preview and render your videos and deliver them to you or your webhook.
• To process payments, keep an accurate credit ledger and refund failed renders.
• To prevent abuse and fraud, enforce rate limits and keep accounts secure.
• To answer support requests and send essential service messages (for example about payments or changes to these policies).
• To understand and improve the product in aggregate.

We do not sell, rent or trade your personal information, and we do not use your brand content to advertise to others.

3. Service providers

We share data only with providers that help us run MsgVibe, and only what they need:

• Google Firebase: sign-in and identity verification.
• Amazon Web Services (United States): hosting, storage of brand assets and videos, databases and video rendering.
• Razorpay (India) and PayPal (international): payment processing.
• Brandfetch: only if you use “auto-fetch from website”, we send the website domain you enter to look up public brand assets.

We may also disclose information if required by law, or to protect the rights, safety and property of our users and MsgVibe.

4. Retention

We keep your account, brand kits and videos while your account is active. Billing records are kept as long as tax and accounting laws require. Logs are kept for a limited period for security and debugging. When you delete your account we delete or anonymise your personal data within 30 days, except where we must keep it by law.

5. Security

Data is encrypted in transit (HTTPS). Every API request is authenticated, and payment confirmations are verified with the payment provider on our servers. No system is perfectly secure, so please keep your Google account and API keys safe and tell us at once if you suspect misuse.

6. Your rights

You can access and update your brand kits in the app at any time. You can also ask us to provide a copy of your data, correct it, or delete your account and data by writing to team.msgvibe@gmail.com. Where the law of your country (including India's Digital Personal Data Protection Act, 2023 and the GDPR) gives you further rights, we will honour them. You may also complain to your local data protection authority.

7. Children

MsgVibe Studio is a business tool and is not intended for anyone under 18. We do not knowingly collect data from children.

8. International transfers

Our servers are in the United States. By using MsgVibe you understand that your information is processed there, with the safeguards described in this policy.

9. Changes and contact

If we make material changes we will update the date above and, where appropriate, notify you in the app or by email. Questions? Write to team.msgvibe@gmail.com.