Privacy Policy

Our commitment to protecting your privacy and personal data

2025/01/15

Introduction

Welcome to Sora2's Privacy Policy. At Sora2 ("we", "us", or "our"), we are committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI video generation platform at sora2.com.

Last updated: January 15, 2025

Information We Collect

Personal Information

When you register for a Sora2 account or use our services, we may collect:

  • Account Information: Name, email address, and password
  • Profile Information: Username, profile picture, and preferences
  • Payment Information: Billing details, payment method (processed securely through Stripe)
  • Contact Information: Email address for communications and support

Usage Data

We automatically collect information about how you interact with our platform:

  • Video Generation Data: Prompts, images uploaded, videos created, and generation settings
  • Platform Usage: Features used, time spent, pages visited, and navigation patterns
  • Performance Data: Video generation success rates, loading times, and error logs
  • Credit Usage: Credit balance, transactions, and subscription status

Device and Technical Information

  • Device Information: IP address, browser type, operating system, and device identifiers
  • Connection Data: Internet service provider, referring/exit pages, and clickstream data
  • Cookies and Tracking: Information collected through cookies and similar technologies (see our Cookie Policy)

User-Generated Content

  • Text Prompts: Text descriptions you provide for video generation
  • Uploaded Images: Images you upload for image-to-video conversion
  • Generated Videos: Videos created using our AI platform
  • Feedback and Support: Messages, bug reports, and feature requests

How We Use Your Information

We use your information for the following purposes:

Service Delivery

  • Provide and maintain the Sora2 AI video generation platform
  • Process your video generation requests using AI technology
  • Manage your account, credits, and subscription
  • Process payments and prevent fraud
  • Store and deliver your generated videos

Communication

  • Send transactional emails (account verification, password resets, receipts)
  • Provide customer support and respond to your inquiries
  • Notify you about changes to our services or policies
  • Send important service announcements and updates

Improvement and Analytics

  • Analyze usage patterns to improve our AI models and platform performance
  • Monitor and analyze trends to enhance user experience
  • Develop new features and services
  • Conduct research and development for better video generation quality

Security and Compliance

  • Detect, prevent, and address technical issues, fraud, and abuse
  • Enforce our Terms of Service and protect user safety
  • Comply with legal obligations and regulatory requirements
  • Protect our rights, privacy, safety, and property

How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

Service Providers

We work with third-party service providers who perform services on our behalf:

  • Payment Processing: Stripe for secure payment transactions
  • Cloud Storage: AWS S3 for storing generated videos and uploaded content
  • Email Services: Resend for transactional emails and notifications
  • Authentication: Google OAuth for social login functionality
  • AI Services: Third-party AI providers for video generation capabilities

We may disclose your information if required to do so by law or in response to:

  • Legal processes (subpoenas, court orders, or legal requirements)
  • Requests from government authorities or law enforcement
  • Protection of our rights, property, or safety
  • Investigation of potential violations of our Terms of Service

Business Transfers

If Sora2 is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.

We may share your information for any other purpose with your explicit consent.

Data Security

We implement appropriate technical and organizational security measures to protect your personal information:

  • Encryption: Data is encrypted in transit (HTTPS/TLS) and at rest
  • Access Controls: Strict access controls and authentication mechanisms
  • Secure Infrastructure: Industry-standard cloud infrastructure with regular security updates
  • Payment Security: PCI-DSS compliant payment processing through Stripe
  • Regular Audits: Periodic security assessments and vulnerability testing

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

Data Retention

We retain your information for as long as necessary to provide our services and fulfill the purposes described in this Privacy Policy:

  • Account Information: Retained while your account is active, plus 90 days after account deletion
  • Generated Videos: Stored according to your plan and deleted after the retention period
  • Usage Data: Anonymized and aggregated data may be retained indefinitely for analytics
  • Payment Records: Retained for 7 years to comply with tax and financial regulations

You can request deletion of your account and associated data at any time by contacting support@sora2.com.

Your Privacy Rights

Depending on your location, you may have the following rights:

Access and Portability

  • Request access to your personal information
  • Receive a copy of your data in a portable format
  • Request information about how we process your data

Correction and Deletion

  • Update or correct inaccurate information
  • Request deletion of your personal information (right to be forgotten)
  • Request restriction of processing in certain circumstances
  • Withdraw consent for processing based on consent
  • Object to processing based on legitimate interests
  • Opt-out of marketing communications (while still receiving essential service emails)

How to Exercise Your Rights

To exercise any of these rights, please contact us at support@sora2.com. We will respond to your request within 30 days.

International Data Transfers

Sora2 is based in the United States. If you access our services from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries.

We ensure that international transfers comply with applicable data protection laws through:

  • Standard contractual clauses approved by regulatory authorities
  • Adequacy decisions by relevant data protection authorities
  • Other lawful transfer mechanisms

Children's Privacy

Sora2 is not intended for use by children under the age of 13 (or 16 in the European Economic Area). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately at support@sora2.com, and we will delete such information.

Our platform may contain links to third-party websites, plugins, and applications. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies before providing any information.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by:

  • Posting the updated Privacy Policy on this page with a new "Last updated" date
  • Sending you an email notification (if you have an account)
  • Displaying a prominent notice on our platform

Continued use of Sora2 after changes become effective constitutes your acceptance of the revised Privacy Policy.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

For cookie-related questions, please see our Cookie Policy.

For terms of service, please see our Terms of Service.

Regulatory Compliance

GDPR (European Users)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR), including the right to lodge a complaint with your local supervisory authority.

CCPA (California Users)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect and how we use it, and the right to request deletion of your information.

Data Protection Officer

For privacy-related inquiries, you can contact our data protection team at support@sora2.com.