This policy describes what data Leoza collects and how we use it.
1. What we collect
- Account data: email, hashed password, display name.
- Generation data: prompts, generated scripts, MP4s, captions and metadata.
- Billing data: handled by Stripe; we store only the resulting subscription state, never card numbers.
- TikTok connection data: access and refresh tokens, your TikTok display name and avatar URL — used solely to upload videos you initiate.
2. How we use it
We use your data to operate the service: render videos, manage subscriptions, send transactional email and provide support.
3. Sharing
We share your data only with vendors we use to deliver the service: OpenAI, Google (Gemini), Unsplash, Pexels, Stripe, TikTok and our hosting provider. We do not sell personal data.
4. Retention
Account data is retained while your account is active. Generated videos are stored until you delete them or close your account.
5. Your rights
You may request export or deletion of your data at any time by emailing leoza.com@gmail.com.
6. TikTok-specific disclosure
When you connect TikTok we store the OAuth tokens issued by TikTok for your account so we can publish videos you choose. We never read other accounts and never post without an explicit action from you. Disconnecting your TikTok account from Leoza Settings revokes our local copy of the tokens immediately.