Enkio Privacy Policy

i. Account Information. When you create an account, we will collect information including your email address and password. This information aids in setting up and maintaining your account.

ii. Basic Profile Information. This includes your nickname, avatar, name, address, birthday, gender, all of which would be optional depending on your choice. If you refuse to provide such information, it will not affect your use of the basic features of the Services.

iii. Membership Information.Certain functions of the Services require a subscription fee or credit-based payment (“Subscription”). Therefore, we will collect your order information, membership information (including plan status, available credits, and entitlements), invoice portal, and download portal.

iv. Your Content.When you use our Services, especially our AI-powered generative and interactive functions, we may collect the audio tracks, songs, images, photos, text prompts, lyrics, and other materials you upload to the Services (“Inputs”), to enable you to create and edit music videos and related assets (“Outputs”, collectively with the Inputs, “Content”).

You hereby represent that all your Content belongs to you and that you have the right and authority to provide it to us and make use of it on or through the Services.

Additionally, such Content may be collected from your device's clipboard, with your permission. For example, if you choose to paste content from the clipboard onto the Services, we access this information stored in your clipboard in order to fulfill your request.

v. Metadata. We will also collect metadata from your Content, which refers to technical data associated with your Content or data that describes data. For example, metadata can describe the analysis results of facial features in photos, which are generated and tagged by the algorithm. When you use our Services, we will use such metadata to provide you with certain generation and editing features, such as to provide you with more suitable visual templates and better output effects.

vi. Biometric information. To enable the generation of music videos and related visual assets, we will collect some of your biometric information pursuant to your authorization. In particular, your facial features will be extracted from your uploaded images and utilized solely for generating and editing the visual content of your music video. When you use the relevant function, we will ask you to upload the original facial image. When uploading the aforementioned information, we might ask you to authorize the permission of your camera and file system. Please be assured that, except for the Content processing, we will not use the facial features for identifying a specific person, or share it with third parties, and we will delete the aforementioned information immediately upon completion of the generation, without retaining it.

vii. Feedback Information. This includes your feedback, communications with our customer service, problem description, email address, and pictures relating to the problem. We are dedicated to offering efficient responses and ensuring that your issues are promptly resolved. If you refuse to provide the Feedback Information, it will not affect your use of our Services.

i. Usage data relating to your use of the Services, which reveals your preferences, interests, or manner of use of the Services and the times of use, including your click, browsing, and generation activity. We would collect your usage data via cookies and similar technologies. For more information, please refer to Section 3 of this Policy.

ii. Device and network data that may be associated with your device or browser, including device identification information, network carrier, Wi-Fi (including time of connection), network connectivity status, device ID, model, language setting, country, and IP address.

i. Account Information. If you choose to register or log in through social media or other third-party services (such as Google, Apple, Facebook, and X), we will collect the corresponding account information based on your authorization. The profile information we receive may vary depending on the social media provider concerned, but will often include your email address and profile picture.

ii. Payment Information. We utilize third-party payment services (such as PayPal) to provide member services. For the completion of the transactions, we may collect some information related to your payment, such as payment records, third-party payment information, payment channels, and transaction status, as provided by third parties.

We will only use your personal data when the applicable laws allow us to. Our legal basis for collecting and using the personal data described in this Policy depends on the personal data we collect and the specific context in which we collect the information:

• We need to perform a contract with you;
• You have given us consent to do so;
• In specific jurisdictions, processing your personal data is in our legitimate interests, including:
  • providing and maintaining our Services;
  • detecting, preventing and enforcing violations of our Terms of Use, including misuse of Services, fraud, abuse, and other trust and safety protocols; and
  • protecting our legal rights and the rights of others.
• We need to comply with our legal obligations under the applicable laws.

If legitimate interest is not an available legal base in a particular jurisdiction, we will engage in the processing activities described above on a legal basis that is available in that particular jurisdiction.

The purposes for which we process personal data, subject to applicable laws, and the legal basis on which we perform such processing, are as follows:

Please note that we will not use your personal data to research, develop, train, and otherwise improve our AI models.

We may use both session cookies and persistent cookies. A session cookie disappears after you close your browser. A persistent cookie remains after you close your browser and may be used by your browser on subsequent visits to our Services. We or our third-party partners may place cookies under one of the following purposes:

• Function cookies: these cookies are essential for the core functionality of the site and related services. Without them, the site cannot function properly, so they cannot be disabled.
• Marketing cookies: these cookies allow us and our partners to deliver ads that are more relevant to your interests for marketing purposes. Without them, you will still see ads, but they may not be as tailored to your preferences.
• Measurement cookies:these cookies are used to analyze site usage, helping us measure and improve site performance. Without these cookies, we wouldn't be able to understand which content is most valued or track how often unique visitors return, making it difficult to enhance the information we provide to you.

At present, we only use function cookies. We do not currently use marketing cookies or measurement cookies.

We disclose the categories of personal data described above in Section 1 between and among our affiliates and related entities, for legitimate business purposes and the operation of the Services, in accordance with applicable laws.

We may share any personal data listed in Section 1 with our Service Providers. These parties help us provide the Services or perform business functions on our behalf. They include:

• Support and customer service vendors. We provide customer support primarily by email, and we may use third-party providers to help us manage and respond to your inquiries.
• AI Providers. We use externally provided models, in particular large generative models provided by third-party model providers (such as Google and OpenAI, as well as other third-party video generation model providers), to provide the functionality of our AI-related services.
• Payment processors. We use payment services provided by third-party payment processors (such as PayPal). Please check their terms of service and privacy policy for information on their use and storage of your personal data, as applicable.

We disclose personal data if we are legally required to do so, or if we have a good faith belief that such use is reasonably necessary to:

• comply with a legal obligation, process, or request;
• enforce our terms, policies, and standards, including investigation of any potential violation thereof;
• detect, prevent, or otherwise address security, fraud, or technical issues; or
• protect the rights, property, or safety of us, our users, a third party, or the public as required or permitted by applicable laws (including exchanging information with other companies and organizations for the purposes of fraud protection).

If we are involved in a merger, acquisition, bankruptcy, reorganization, partnership, asset sale, or other transaction, we may disclose your personal data as part of that transaction. Should one of these events occur, we will make reasonable efforts to notify you before your personal data becomes subject to different privacy and security policies and practices.

We have implemented appropriate technical and organizational security measures designed to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, unauthorized access, and other unlawful or unauthorized processing, in accordance with applicable laws.

Your account is protected by a password for your privacy and security. You must prevent unauthorized access to your account and personal data by selecting and protecting your password appropriately and limiting access to your computer or device and browser by signing off after you have finished accessing your account. If you have any concerns that your account or personal data has been put at risk, for example if someone could have found out your password, please contact us by using the contact details provided in Section 13.

While we use reasonable commercial efforts to protect the data, no technology, data transmission, or system can be guaranteed to be 100% secure. In the event of a breach of security leading to accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to your data, we will notify you according to the applicable laws.

We adhere to retention policies for the personal data we collect to ensure that it is not retained longer than necessary for the intended purpose.

Specifically, when you delete your account or request the deletion of your personal data, we will delete or anonymize your personal data without undue delay and in any event within 7 days, except in the following cases:

• Compliance with legal requirements regarding data retention according to the applicable laws. For example, transaction and billing records are retained for the period required by applicable tax and accounting laws.
• Extension of the period for financial, audit, dispute resolution, or other legitimate purposes.

Residual copies of your personal data may remain in our backup systems for a limited period. Such copies are isolated from active use, are not processed for any other purpose, and are purged within 30 days in accordance with our backup rotation cycle.

In addition, our access and system logs, which are used for security, troubleshooting, and service stability purposes, are retained for 90 days and are then deleted or anonymized.

When assessing how long your personal data is retained, we consider criteria such as: (i) the nature of the personal data and the activities involved; (ii) when and for how long you use the Services; and (iii) our legitimate interests and our legal obligations.

You may have the right to know what personal data we process about you, including the categories of personal data, the business or commercial purposes for collection, the categories of third parties to whom we disclose it, and other information according to the applicable law.

You may have the right to access and obtain a copy of your personal data in accordance with the applicable laws. Where applicable, we will provide the information in a portable, machine-readable, readily usable format.

You may have the right to request that we correct inaccurate personal data that we retain about you, subject to certain exceptions.

You have the right to delete your account and erase your personal data. Upon deleting your account, all your personal data will be deleted, except for any personal data that we are required or permitted to retain under applicable laws, in accordance with the retention periods described in Section 5.2. Additionally, you may also request deletion of the personal data you provide by contacting us. If some of your personal data cannot be deleted, we will inform you of the reasons for not taking action.

Please note that we reserve the right to retain some of your personal data where there are valid grounds for us to do so under applicable laws.

Where we process your personal data on the basis of your consent, you may withdraw your consent by contacting us. The withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.

Subject to applicable laws, you may object to the processing of your personal data based on our legitimate interests where there are grounds relating to your particular situation by contacting us. Please note that we may have an overriding legitimate interest to keep processing your personal data, but we will let you know where this is the case.

If you would like to restrict our processing of your personal data, you may contact us. You have the right to restrict the processing of your data where one of the following applies:

• the processing is unlawful and you oppose the erasure of relevant personal data;
• for the purpose of establishment, exercise, or defense of legal claims, you request us to retain your personal data that we were supposed to delete;
• your objection regarding the accuracy of your personal data is pending our verification;
• your request to object to the processing of your personal data is pending our verification.

Subject to applicable data protection laws, you may have the right to submit your complaint to the local data protection authority where you reside if you consider that the processing of your personal data infringes any applicable data protection laws.

Depending on your jurisdiction, you may be entitled to additional rights in relation to your personal data. If you would like to contact us to exercise one or more of these rights, to ask a question about these rights or any other provision of this Policy or about our processing of your personal data, or to file a complaint about how we process your personal data, you may use the contact details provided in Section 13 below.

When submitting a rights request, please specify the scope and basis of your request and provide us with the necessary information to verify your identity. We may contact you to confirm your identity in order to handle your request. We will respond to your request or complaint in due course under the applicable laws.

Nothing in this Policy limits any statutory rights available to you under applicable law.