Privacy Policy

Effective October 15, 2026 · Terms of Service

This policy explains what DV4 collects when you visit dv4.ai, join the waitlist, use the app or use DV4 from an AI assistant, why, who else handles it, how long we keep it, and how to have your data deleted.

Who we are

Deep Variance Inc., a Delaware corporation at 1311 Vine St, Cincinnati, OH 45202, USA, provides DV4 and is the controller of the personal data described here. Questions about this policy or your data: support@deepvariance.com, or by post to the address above.

The short version

• We do not sell personal data or share it for advertising.
• DV4 makes videos with AI. To do that, your prompt, your uploads and the video being made are sent to the AI providers listed below.
• Every prompt and upload is checked for safety before anything is made, and every video is checked again before you see it.
• We keep the prompts we send to AI models, and their answers, for 365 days to improve DV4.
• If you rate a video or send us feedback, we keep your answer, with which plan and models the video used, for 365 days to improve DV4. We also note a few things you do in the app, such as downloading a video, for the same reason. Feedback is always optional.
• Finished videos are deleted 30 days after they are made. Download any video you want to keep.
• Our websites load no third-party analytics and set no advertising or tracking cookies. dv4.ai counts its own visits without cookies and without storing IP addresses.

When you visit dv4.ai

Cloudflare hosts and delivers dv4.ai and stage.dv4.ai and processes the technical data every web request carries, such as your IP address, browser type and the page requested, to serve the sites and protect them from abuse. The pages load their fonts from Google Fonts, so Google receives your IP address and browser type. The sites load no third-party analytics.

dv4.ai counts its own visits, with no cookie. For each page view we store the page, the site or campaign link that sent you, your country, whether you use a phone, and a code that changes every day. The code is made from your IP address and browser in a way that can't be reversed or followed from one day to the next; the IP address itself is not stored. We keep these counts for 396 days and use them only to see how many people visit and where they come from.

The waitlist

When you join the waitlist, we store your email address, when you joined, where you came from (the campaign tag in the link you followed, or the site that linked to dv4.ai) and a code for your unsubscribe link, in our database at Supabase. We send a welcome email through Microsoft's Azure Communication Services, with open and click tracking turned off. Every email has an unsubscribe link; after you use it, we send you no more emails.

Your account

An account needs your name, an email address and a password. Supabase stores the account, checks your password and sends the emails that confirm your address or reset your password; we never store your password ourselves. With your account we keep your name, your email address and your plan.

Signing in sets cookies that only our servers can read: one holds your sign-in for up to an hour, one renews it, and one remembers whether you chose to stay signed in. If you choose to stay signed in, they last 30 days; otherwise they end when you close your browser. Signing out removes them.

Payments

DV4 does not take payments yet. Until it does, we set the plan on an account ourselves, and no payment details are collected.

Your videos

When you make a video, we store:

• your request: the prompt and the settings you chose (kind, shape, length, quality, music and text options);
• the plan our AI planner writes for it: the shots, any spoken lines and on-screen text, and the music description;
• the files: pictures and sound you upload, each filmed shot, frames taken from the shots for the checks, voice and music tracks, the finished video, its poster image and captions;
• the progress of each step, what it cost us, and why a video failed or was refused.

Files are kept in private storage at Microsoft Azure in the United States and are opened only through links that expire, after 15 minutes for the links you download from. Our logs never contain your prompts, scripts or files.

Safety checks

DV4 does not make sexual or adult content and refuses requests that break the rules in our Terms. To enforce them:

• OpenAI's moderation service checks your prompt, your uploaded pictures, what is said in uploaded sound, every shot's prompt and spoken lines, frames from every filmed shot and what is said in it. If a check can't run, nothing is made.
• Amazon Web Services' Rekognition checks each uploaded picture for a well-known person. A picture of a public figure is refused; a picture of anyone else can appear in your own video. Amazon is sent the picture only to compare faces against its list of well-known people; we keep only whether one was found and how sure the match was, never a name.
• Our own servers also check the shots: speech recognition, text recognition and face and frame checks.
• We record each verdict as categories and scores only, never the content itself.
• Files tied to a refused video are kept for review and for reports the law requires. Only staff with a reason may open them, and every access is logged.

Improving DV4

We keep a record of every request we send to an AI model and its answer: your request, the planner's plan, shot prompts, spoken lines, the music description and on-screen text, and the answers, with what each call cost and how long it took. Pictures and sound themselves are not copied into it; it names the file instead. We use it to find and fix problems and to make DV4's videos better. Each record is deleted after 365 days, or earlier with its video or your account.

DV4 in AI assistants

You can use DV4 from ChatGPT, Claude, Perplexity and coding agents (see AI assistants). When you connect one, you sign in on DV4's page and approve that app; it then gets a key that lets it make, check, list and cancel your videos and read your plan's usage, with the same limits and checks as the app. What DV4 sends back to the assistant (your videos' status, links and details) is handled by that assistant's provider under its own privacy policy. To disconnect, remove DV4 in the assistant's settings.

Why we use personal data

• To provide DV4 and run your account, plan and videos (performance of a contract).
• To keep DV4 safe and secure, enforce our rules, prevent abuse and fix problems (our legitimate interests).
• To improve DV4, through the record of AI requests described above (our legitimate interests).
• To answer your messages and to keep and report what the law requires (legitimate interests and legal obligations).

Our safety checks refuse requests automatically. Repeated refusals suspend an account for a time, and a refusal involving minors locks the account until a person reviews it. If you think a check got it wrong, write to support@deepvariance.com and a person will look at it.

Who else handles it

OpenAI processes what we send to give us answers and does not use it to train its models. It keeps it for up to 30 days to monitor for abuse.

Where data is processed

Deep Variance is based in the United States. DV4's app, database and files are in Microsoft Azure's East US region, and our providers process data in the United States and other countries. Where the law requires a safeguard for data transferred out of the EU, UK or Switzerland, we and our providers use the EU standard contractual clauses (with the UK addendum) or the provider's certification under the EU-US Data Privacy Framework.

How long we keep it

• Account: until you ask us to delete it. Email support@deepvariance.com from your account's address and we will delete the account, its videos and their files, the files you uploaded and its record of AI requests, and email you when it is done. We keep a record of the categories of any requests our safety checks refused, and the evidence held for lawful review of those refusals, without your name or address; and the payment records Stripe must keep by law. While an account is locked for review, its deletion waits until the review is over.
• Finished videos, posters and captions: 30 days after they are made, then deleted automatically.
• Working files (filmed shots, frames, voice and music, drafts): 7 days.
• Pictures and sound you upload: kept with your account, so you can use them again.
• Files tied to a refused video: kept for review and for reports the law requires.
• The record of AI requests: 365 days.
• Safety verdicts (categories and scores): refusals for one year.
• Deleted files can be recovered by us for 7 days after deletion, then they are gone.

Your rights

Depending on where you live, you can ask to access, correct, delete or receive a copy of your personal data, object to or restrict how we use it, and withdraw consent. Email support@deepvariance.com from your account's address and we will respond within 30 days. For a copy, we email you a link to a file of your account's data (your account, videos and their requests, feedback, credits, voices and organisations), valid for 7 days. You can also complain to your data protection authority. California residents: we do not sell or share personal information as those terms are defined in California law.

Children

DV4 is not for anyone under 18, and we do not knowingly collect their personal data.

Security

Our sites and app are served only over HTTPS. Files sit in private storage with no public access and open only through links that expire. Keys and passwords for our systems are kept in a vault, never in code. Our staff access data only to provide, secure and support DV4.

Changes

If we change this policy in a way that matters, we will update the date above and tell account holders by email or in the app before the change takes effect.