Privacy Policy

• Your email address — collected and verified by Stripe when you buy a pack. We never see or store your card details.
• The photo you upload — held only for as long as it takes to generate your video.
• The video we generate, plus the flight path and settings you chose, and a short label if you gave one.
• Your shot balance and a list of your renders, keyed to your email.
• A signed cookie holding your email, so your browser can prove which account it is. It isn't a tracking cookie and it isn't shared with anyone.

We do not run advertising pixels, cross-site trackers, or anything that builds a profile of you. We do count anonymous, cookieless page views and a handful of product events (a checkout was started, a render was started) through Vercel Analytics, so we can tell whether the product is working. Those counts carry no identifier that can be tied back to you, and they are never joined to your email or your renders.

We use a small number of processors, each for one job:

• Stripe — payments and email verification. Your card details go to Stripe directly and never touch our servers.
• KIE.ai and Google's Veo model — the video generation itself. Your uploaded photo is sent to them in order to produce your clip. This is the one place your image leaves our infrastructure, so don't upload anything you wouldn't hand to a third-party AI provider.
• Vercel — hosting and file storage for finished videos.
• Resend — sending you the “your render is ready” email.

We do not sell your personal information, and we don't share it with anyone beyond the processors above except where the law requires it.

• Finished videos: 24 hours. Then they are permanently deleted from our storage by an automated job. This is not a soft delete and we cannot bring one back.
• Uploaded photos: kept only for the duration of the render.
• Render history (date, settings, status — no video): about 30 days, so your renders page is useful.
• Your email and shot balance: kept while you have an account, because it's what your unused shots are attached to.
• Payment records: retained by Stripe and by us for as long as tax and accounting law requires.

Email [email protected] from the address you bought with and we will, within 30 days: tell you what we hold about you, correct it, or delete it. Deleting your account forfeits any unused shots, so ask for a refund first if you have a balance and you're within the refund window.

If you're in the EU, UK, or California, you have these rights under the GDPR, UK GDPR, or CCPA respectively. We honour them regardless of where you live.

DroneShot isn't intended for anyone under 18 and we don't knowingly collect data from children.

Traffic is encrypted in transit, your session cookie is signed and httpOnly, and download links are unguessable and self-expiring. That said, no service can promise perfect security. Anyone holding a download link can retrieve that video while the link is live — treat it like a password, and don't forward it.