Privacy Policy
1. Introduction / Who We Are
Lenera AI Inc. ("Lenera AI," "we," "us," or "our") is a Delaware corporation that operates an AI-powered video creation platform at www.lenera.ai (the "Service"). Our platform enables businesses and individuals to create professional AI-generated videos from scripts, documents, and brand assets.
This Privacy Policy explains what personal information we collect, how we use it, with whom we share it, and the rights you have with respect to your information. It applies to all users of the Service, including visitors, free trial users, and paying subscribers.
If you have questions or concerns about this Privacy Policy, please contact us at support@lenera.ai.
2. Information We Collect
2.1 Information You Provide to Us
When you create an account, subscribe to a plan, use the Service, or communicate with us, you may provide:
- Account information: Your name, email address, company name, and job title.
- Billing and payment information: Billing address and payment details. Payment card processing is handled entirely by Stripe, Inc. Lenera AI does not store full card numbers.
- Brand assets: Per-project brand logos uploaded for use in video creation. We do not collect or store personal profile photos.
- Customer Content: Scripts, documents, images, and audio files you upload or create in connection with generating AI videos ("Customer Content").
- Communications: Messages you send to our support team, feedback you submit, and responses to surveys.
- Onboarding and offboarding survey data: During account setup, we ask about your industry, intended use case, organization size, and evaluation intent. During account closure, we ask about cancellation reason. This information is used to personalize your experience and is synced to our marketing software (ActiveCampaign) as custom fields and tags.
- Referral email addresses: If you use our referral feature, you may submit email addresses of third parties you wish to invite. Those email addresses are stored and used solely to send a one-time invitation email. Please only submit email addresses of individuals who have given you permission to do so.
2.2 Information Collected Automatically
When you access or use the Service, we automatically collect certain information:
- Usage data: Features you use, videos you create, actions you take within the platform, session duration, and errors encountered.
- Device and browser information: Browser type, operating system, and referring URL.
- IP address: We collect your IP address for rate limiting and abuse prevention purposes.
- Log data: Server logs, access times, and error logs generated during your use of the Service.
- Audit logs: A per-user action history recording changes made within projects, including before-and-after data states, to support accountability and error recovery.
- Cookies and tracking technologies: We use cookies and similar technologies as described in Section 5 of this Policy.
2.3 Information from Third Parties
- OAuth providers (Google, Apple, Microsoft) via Clerk: If you choose to sign in using a third-party OAuth provider, we receive authentication information (name, email address, and OAuth profile data). We do not receive your Customer Content from those providers, and we do not store your OAuth credentials or passwords. Lenera AI does not store or hash passwords itself.
- Stripe (payment processor): We receive transaction confirmation and billing status from Stripe. We do not receive full payment card numbers.
- Analytics partners: Our analytics providers (see Section 5) may provide us with aggregated reports on how users interact with the Service.
What we do not collect: We do not collect profile photos (only per-project brand logos), biometric data, voiceprints, or face upload data. Our AI avatar feature uses synthetic stock D-ID avatars not based on real individuals.
3. How We Use Your Information
We use the information we collect for the following purposes:
- Provide and operate the Service: To create and manage your account, process your video generation requests, render AI Output from your Customer Content, and deliver the features you pay for.
- Account management: To administer your subscription, manage plan changes, and communicate with you about your account.
- Payment processing: To process subscription fees and other payments through our payment processor, Stripe.
- Transactional communications: To send render-complete notifications, billing receipts, and other Service-related messages. These are required as part of the Service and cannot be opted out of while you remain a subscriber.
- Marketing communications: With your consent, or as otherwise permitted by applicable law, to send promotional emails, product updates, and newsletters. You may opt out at any time by clicking "unsubscribe" in any marketing email.
- Customer support: To respond to your inquiries, troubleshoot issues, and improve our support resources.
- Analytics and improvement: To understand how users interact with the Service, identify bugs, measure performance, and develop new features.
- Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, unauthorized access, abuse, and other illegal activity. IP addresses are used for rate limiting and abuse prevention.
- Legal compliance: To comply with applicable laws, regulations, court orders, and lawful requests from governmental authorities.
Important limitations on use of Customer Content: We do not use your Customer Content (scripts, documents, images, or audio) to train general-purpose AI models that are shared with other customers or third parties. Customer Content is processed solely to render your requested AI video output.
No sale of personal data: We will not sell your personal information to third parties.
4. How We Share Your Information
4.1 Service Providers and Sub-processors
We share personal information with third-party service providers and sub-processors that help us deliver the Service. These providers are authorized to use your personal information only as necessary to provide services to us. A representative list includes:
For the complete and current list of sub-processors, including security certifications and data transfer information, please visit lenera.ai/legal/subprocessors.
4.2 Legal Requirements
We may disclose your information if we believe in good faith that such disclosure is necessary to: (a) comply with applicable law, regulation, legal process, or governmental request; (b) enforce our Terms of Service or other agreements; (c) protect the rights, property, or safety of Lenera AI, our users, or others; or (d) detect, prevent, or address fraud, security, or technical issues.
4.3 Business Transfers
If Lenera AI is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or a portion of our assets, your information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on the Service before your information is transferred and becomes subject to a different privacy policy.
4.4 With Your Consent
We may share your information with third parties when you have given us your explicit consent to do so.
4.5 Referral Program
When you submit a third party's email address through our referral feature, that email address is stored in our systems and used to send that individual a one-time invitation to try the Service. We do not use referred email addresses for any other purpose. If you are a non-user whose email was submitted by a referrer and you wish to have your email removed, please contact us at support@lenera.ai.
4.6 Enterprise Plan: Multi-user Projects
Enterprise plan subscribers may share projects within their organization. Members of an organization may see shared project data, including Customer Content within those shared projects. Administrators control what is shared within their organization.
5. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to operate the Service and understand how users interact with it. The types of cookies we use include:
- Essential cookies: Required for the Service to function. These include authentication session cookies and security tokens. You cannot opt out of essential cookies while using the Service.
- Analytics cookies: Used to measure how users interact with the Service, identify popular features, and detect performance issues. We use PostHog and Google Analytics 4 for this purpose. PostHog may collect page events, session recordings, feature flag evaluations, and IP addresses. Analytics cookies may track your IP address.
- Marketing cookies: Used to deliver targeted advertising and measure the effectiveness of our marketing campaigns. These may track your activity across websites.
How to opt out: You can control cookies through your browser settings. Most browsers allow you to block or delete cookies. Opting out of analytics or marketing cookies will not affect your ability to use the core Service, but may limit certain personalization features. You may also opt out of Google Analytics at https://tools.google.com/dlpage/gaoptout.
Global Privacy Control (GPC): We recognize and honor the Global Privacy Control (GPC) browser signal as an opt-out of the sale and sharing of personal information for targeted advertising purposes, where required by applicable law (including under the California Consumer Privacy Act and its amendments).
6. International Data Transfers
Lenera AI is headquartered in the United States, and your information is primarily processed in the United States on infrastructure operated by our service providers (including AWS and Supabase, both located in the US).
If you are located in the European Economic Area (EEA), the United Kingdom (UK), or another jurisdiction with data transfer restrictions, please be aware of the following:
- USA: The European Commission has not issued an adequacy decision for the United States. Where required, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission to govern transfers to our US-based sub-processors.
- Israel (D-ID Ltd.): Israel has received an EU adequacy decision, meaning transfers to D-ID Ltd. (located in Israel) are permitted without additional safeguards.
- China (DeepSeek): Script prompts and narration text submitted to DeepSeek for AI generation are processed in China. China has not received an EU adequacy decision. We rely on Standard Contractual Clauses where required, but note that the efficacy of SCCs for China transfers is legally unsettled. Lenera AI does not retain DeepSeek outputs beyond the processing session. Customers subject to GDPR or operating in regulated industries should review this prior to use and contact us at support@lenera.ai with questions.
Customers in the education sector who are subject to the Family Educational Rights and Privacy Act (FERPA) should contact support@lenera.ai before submitting student education records.
7. Data Retention
We retain your personal information for as long as necessary to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. Our standard retention periods are:
You may request deletion of your personal data at any time by contacting us at support@lenera.ai. We will process your request in accordance with applicable law. Some data may be retained longer where required by law, for fraud prevention, or to resolve disputes.
8. Your Privacy Rights
8.1 Rights for EEA and UK Users (GDPR)
If you are located in the European Economic Area or the United Kingdom, you have the following rights under the General Data Protection Regulation (GDPR) or the UK GDPR:
Our lawful bases for processing are: (a) performance of a contract with you (operating the Service); (b) our legitimate interests (security, fraud prevention, analytics, improving the Service); and (c) your consent (marketing communications, non-essential cookies).
- Right of access: You have the right to request a copy of the personal data we hold about you.
- Right to rectification: You have the right to request that we correct inaccurate or incomplete personal data.
- Right to erasure: You have the right to request deletion of your personal data, subject to certain exceptions.
- Right to data portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format.
- Right to restriction: You have the right to request that we restrict the processing of your personal data in certain circumstances.
- Right to object: You have the right to object to processing based on our legitimate interests or for direct marketing purposes.
- Right to withdraw consent: Where we rely on your consent, you may withdraw it at any time without affecting the lawfulness of processing prior to withdrawal.
You also have the right to lodge a complaint with your local data protection supervisory authority.
8.2 Rights for California Residents (CCPA/CPRA)
If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):
- Right to Know: You have the right to know what personal information we collect, use, disclose, and share.
- Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions.
- Right to Correct: You have the right to request correction of inaccurate personal information.
- Right to Opt-Out of Sale/Sharing: Lenera AI does not "sell" your personal data as that term is defined under the CCPA. However, we may "share" personal data (such as identifiers and usage data) with analytics partners for cross-context behavioral advertising. You have the right to opt out of such sharing. We honor the Global Privacy Control (GPC) signal as an opt-out. You may also contact us at support@lenera.ai.
- Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.
8.3 How to Exercise Your Rights
To exercise any of the rights described in this Section, please contact us at support@lenera.ai. We will respond to GDPR rights requests within 30 days and to CCPA/CPRA rights requests within 45 days (with an extension of up to an additional 45 days where reasonably necessary). We may ask you to verify your identity before processing your request.
9. Children's Privacy
The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18 without verification of parental consent, we will take steps to delete that information promptly. If you believe we have inadvertently collected information from a child under 18, please contact us at support@lenera.ai.
10. Security
We implement commercially reasonable technical and organizational security measures designed to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption in transit and at rest, access controls, audit logging, and regular security assessments.
However, no method of transmission over the internet or method of electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee its absolute security. If you have reason to believe that your interaction with us is no longer secure, please contact us immediately at support@lenera.ai.
11. Third-Party Links
The Service may contain links to third-party websites, applications, and services that are not owned or controlled by Lenera AI. This Privacy Policy applies only to our Service. We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party sites or services. We encourage you to review the privacy policy of every website you visit.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email (using the email address associated with your account) and/or by posting a prominent notice on the Service at least 30 days before the changes take effect. For non-material changes, we will update the "Last Revised" date at the top of this Policy.
Your continued use of the Service after the effective date of the revised Privacy Policy constitutes your acceptance of the changes. If you do not agree to the revised Policy, you must stop using the Service and may request deletion of your account.
13. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
- Email: support@lenera.ai
- Website: www.lenera.ai
- Mailing Address: Lenera AI, Inc. | 28 Geary St STE 650 Suite #620, San Francisco, California 94108, United States
Last updated: August 2026