Privacy Policy
Last updated 13 October 2026
The short version. We keep only what we need to make and publish your videos. Generated videos, images, audio and uploads are deleted from our servers within 4 days, so download and back up anything you want to keep. We never sell your data.
1. Who we are
MovieMaker is operated by PT AVIONETTA TEKNOLOGI INDONESIA, Archade Business Center 6th Floor unit 6-03, Jl. Pantai Indah Utara 2 Kav. C1, PIK, Kec. Penjaringan, Jakarta Utara 14460, Indonesia ("we", "us"), telephone +62 21 5890 5002. We are the controller (Pengendali Data Pribadi) of the personal data described here, and this policy follows Indonesian Law No. 27 of 2022 on Personal Data Protection (UU PDP). Contact us at [email protected]. The company's general Kebijakan Privasi (Indonesian and English) also applies; if the two languages differ, the Indonesian version prevails.
2. What we collect
| Data | Why |
|---|---|
| Account details: email address, a hashed password, your time zone and settings | To create and secure your account and run your schedule |
| Content you create: topics, scripts, captions, titles, and the videos, images and audio generated for you | To produce and publish your videos |
| Connected social accounts: account names and IDs returned by our publishing service | To post where you tell us to and show you insights |
| API keys you choose to store for AI providers | To call those providers on your behalf. Keys are encrypted at rest and never shown back in full |
| Usage and technical data: sign-in times, IP address, error logs, what each video cost to make | Security, fraud prevention, troubleshooting and billing |
| Messages you send us | To answer you |
We do not collect payment card numbers ourselves; payments are handled by our payment provider.
3. How long we keep it
- Generated and uploaded media (videos, images, audio, covers): deleted from our servers within 4 days of being created or uploaded. Always keep your own backup.
- Account data and settings: while your account is open, then deleted within 30 days of closing it.
- Logs: kept up to 90 days, unless needed longer to investigate abuse.
- Billing records: kept as long as the law requires.
4. Who we share it with
Only the services needed to run MovieMaker, each for that purpose alone:
- AI providers you select (for example text, voice, image and video models) receive the prompts and material needed to generate your content.
- AvionettaShare, our social publishing service, receives your finished videos, captions and publishing choices, and holds the connections to your social accounts.
- Social platforms (YouTube, TikTok, Instagram, Facebook, Threads) receive what you publish there, under their own terms and privacy policies.
- Payment providers: Xendit and Stripe process payments; we never see or store your card number.
- Infrastructure: our hosting provider, Cloudflare (network security and delivery) and our email provider.
We do not sell personal data or share it for advertising.
5. Social platforms and Google
When you publish to YouTube, your use is also subject to the YouTube Terms of Service and the Google Privacy Policy. You can revoke access to your Google account at any time at myaccount.google.com/permissions; you can disconnect Facebook, Instagram, Threads and TikTok from their own settings pages. Disconnecting stops all further publishing to that account.
6. Cookies
We use one essential session cookie to keep you signed in. This website remembers your light or dark theme in your browser's local storage. We use no advertising or tracking cookies and no third-party analytics.
7. Security
Connections are encrypted (HTTPS). Passwords are hashed, stored API keys are encrypted, and each account can only reach its own files. No system is perfectly secure; tell us at once if you suspect a problem. If a personal data protection failure happens, we notify you and the competent authority within 3 x 24 hours (Article 46 UU PDP).
8. Your rights
Under UU PDP you have the right to information about how your data is processed; to access and get a copy of it; to correct it; to delete or destroy it; to withdraw consent; to object to decisions based solely on automated processing; to delay or restrict processing; and to sue and receive compensation for unlawful processing. Email [email protected]; we act within the time limits set by UU PDP. See Data Deletion for how deletion works.
9. Children
MovieMaker is not for anyone under 18, and we do not knowingly collect data from children.
10. International transfers
Our servers are in the European Union, and some providers process data in other countries outside Indonesia. These transfers are made with adequate protection as required by Article 56 UU PDP, and we stay responsible for protecting your data. Data may also be disclosed where the law or a competent authority requires it.
11. Changes
If we change this policy we will update the date above, and tell you by email for significant changes.