Privacy Policy
Last updated: January 2026
1. Introduction
MediaHub ("we", "our", or "Company"), a product operated by the z2lab studio (z2lab.dev), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our social media content generation service.
2. Information We Collect
We collect the following information:
- Account information: Name, email address, and profile picture when you sign up or log in via Google or Facebook.
- Generated content: The topics, scripts, captions, and hashtags you create using our service.
- Usage information: How you interact with our service, including pages visited and features used.
- Payment information: Securely processed by Stripe. We do not store credit card data.
3. Video Recording and Storage
When you use our video creation feature, we collect:
- Video and audio recordings you create
- Camera and microphone access (only when actively recording)
- Technical metadata (file size, duration, format)
Data Retention
- Recordings and media: kept while your account is active, within your plan's storage limit. We do not auto-delete your content.
- Final exported videos: kept while your account is active, within your plan's storage limit (Free: 1 GB, Starter: 5 GB, Pro: 20 GB). We do not auto-delete your content — you manage it and can delete it whenever you want.
Your Rights Over Videos
You can delete your videos at any time. When you delete your account in Settings, your account and all associated data (videos, images, scripts, recordings and history) are permanently removed immediately.
Consent
Before using the video feature, you must provide explicit consent. This consent is recorded with a timestamp and cannot be altered. You may withdraw consent at any time by contacting support.
4. How We Use Your Information
We use your information to:
- Provide and maintain our service
- Process your transactions
- Send service-related communications
- Improve our service
- Protect against fraudulent use
5. Information Sharing
We do not sell your personal information. We share data only with:
- Service providers: Supabase (database), Stripe (payments), Google Gemini and fal.ai (AI for content generation), Cloudflare R2 (video storage).
- Legal compliance: When required by law.
6. Data Security
We implement technical and organizational security measures to protect your information, including encryption of data in transit and at rest. In the event of a security incident that may pose a risk or relevant harm to your personal data, we will notify the competent supervisory authority (the ANPD in Brazil) and affected users without undue delay, as required by LGPD (art. 48) and GDPR (arts. 33–34).
7. Your Rights (GDPR/CCPA)
Depending on your location, you have the right to:
- Access your personal data
- Correct incomplete or outdated data
- Request deletion of your data
- Withdraw your consent
- Request data portability
- Lodge a complaint with a data protection authority (your local supervisory authority; ANPD in Brazil)
8. International Data Transfers
Some providers process data outside your country (for example, in the United States and the European Union). When we transfer data internationally, we require appropriate safeguards — such as Standard Contractual Clauses — to protect your information in line with GDPR and LGPD.
9. Subprocessors
We only share data with providers that help us operate the service:
- Supabase — authentication and database
- Cloudflare R2 — media storage
- Stripe — payments
- Google (Gemini) — AI script, caption and narration generation
- fal.ai — AI image and video generation
- ElevenLabs — voice cloning (only if you create a voice)
- Groq and OpenAI — audio transcription for caption sync
- Amazon Web Services — cloud video rendering
- Resend — sending your account emails
- PostHog — product analytics (loaded only with your consent)
- Sentry — error and performance monitoring
- Vercel — application hosting
10. Minimum Age
Our service is not intended for anyone under 16. We do not knowingly collect data from children below that age.
11. Data Deletion
You can request deletion of your account and all associated data at any time through your account settings or by contacting us at the email below.
12. Cookies
We use essential cookies to maintain your login session. With your consent, we also use PostHog for product analytics (to understand how features are used and improve the app) — analytics load only after you accept them in the cookie banner. We do not use advertising cookies.
13. Changes to This Policy
We may update this policy periodically. We will notify you of significant changes via email or through the service.