Privacy Policy

1. Who We Are

MeetNour LLC ("MeetNour," "we," "us") operates meetnour.com, the MeetNour blog, and the MeetNour app (together, the "Service"). This policy explains what personal data we collect, why, who receives it, how long we keep it, and what you can do about it.

MeetNour creates images, video, voice, music, and captions by sending your requests to third-party AI providers. That is the most important thing to understand about how your data moves: what you type and upload leaves our servers and goes to the provider of the AI model that does the work.

MeetNour LLC is the controller of the personal data described here. Read this policy together with our Terms of Service, Cookie Policy, and GDPR page.

2. Personal Data We Collect

2.1 Waitlist and newsletter

Your name and email address when you join the waitlist, and your email address when you subscribe to the newsletter.

2.2 Account

• Name and email address
• Password — handled and hashed by Firebase Authentication; we never see it
• Google profile name and photo, if you sign in with Google
• Team membership, role, and invitations
• A record of the agreements you accepted: which one, which version, when, and the IP address and browser the request came from

2.3 What you create and upload

• Prompts, briefs, scripts, and other text you write
• Photos, videos, and audio you upload — these may show or record real people, including their faces and voices
• Talent you build in Casting Room, including portraits and identity sheets
• Brand settings: name, colors, voice, logo, product photos
• Everything generated for you: images, videos, voice, music, transcripts, captions

2.4 Usage and billing records

• A log of each generation: the prompt, the model, the settings, the result, the credits charged, and your account email
• Your plan, billing cycle, credit balance, and credit history
• Payment details are entered at a checkout run by Stripe, our payment provider, and its Link service. We do not receive or store your card number
• From Stripe we receive a record of each purchase: what you bought, the amount, the tax, and whether the payment went through, was refunded or was disputed

2.5 Connections and keys

If you create an API key or connect an AI assistant such as Claude, we store a hashed version of the key or token, the workspace it is linked to, and when it was last used. You can see each connected assistant and disconnect it in Settings → Account → Connected Assistants; disconnecting revokes its access.

2.6 Technical data

• IP address, browser and device type
• Server logs and error reports
• Pages viewed and actions taken, if you allow analytics cookies

2.7 Support

Your name, email address, and the content of messages you send us.

3. How AI Processing Works

• When you generate something, your prompt and any reference images, video, or audio are sent to the provider of the model that does the work.
• Prompt enhancement, "Nour picks" model selection, brand summaries, and Director Room scripts are produced by third-party language models. Your prompt, brief, and brand settings are sent to them.
• When you caption a video, its audio is sent to our speech-to-text provider.
• We do not send your name or email address with generation requests. Anything you write in a prompt or show in an upload is sent as it is, so avoid including personal details you do not want a provider to receive.
• Results are saved to your account.

We use our providers' paid developer services. Each provider handles the data it receives under its own terms and privacy policy. Many state that they do not use developer data to train their models, but we cannot verify or guarantee what any provider does. Some providers are aggregators that pass requests on to the company that operates the model.

5. Why We Use Your Data

We do not use your data for advertising, and we do not make decisions about you that have legal or similarly significant effects using automated processing alone. "Nour picks" chooses an AI model for a request; you can always choose the model yourself instead.

6. Who Receives Your Data

We do not sell your personal data. We share it only with the following.

6.1 AI providers

Your request goes to the company that runs the model you use. Which company that is depends on the model; the list changes as models change, and we do not publish it. Email [email protected] if you need to know which company processes requests for a given model. Choosing a model yourself, instead of letting Nour pick, gives you control over which model runs your request.

Some video and image models are made by companies based in mainland China or Hong Kong. Requests to those models may be processed there.

Some video models accept photos of people as references. The company running such a model may register those images in its own system before generating, keeps the files you provide and the videos it generates for a short period (up to seven days), and processes them under its own terms and privacy policy. Upload a photo or video of a real person only with that person's permission, as the Media & AI Processing Agreement requires. If you prefer that your photos are not used this way, choose a model that does not take reference images.

6.2 Infrastructure and service providers

Purchases are sold through Link, Stripe's checkout service, which acts as the merchant of record. Stripe handles the details you give at checkout and the records of your purchases under its own privacy policy, which covers Link: link.com/privacy. You can ask Link to delete the data it holds about your purchases; Stripe then also cancels any subscription you bought through Link.

6.3 AI assistants you connect

If you connect an assistant such as Claude, or use an API key, that assistant or application can act in the workspace you linked: generate content and spend credits, read your recent gallery items and their prompts, read and change brand settings, list and create talent, and caption videos. The assistant is operated by its own company under its own terms. You can revoke API keys in Settings → Account. To disconnect an assistant, remove MeetNour in the assistant's settings and email us to revoke its access on our side.

6.4 Your team

Members of your organization can see the workspaces, content, and activity of that organization.

6.5 The public, if you choose

If you make talent public, its portrait, identity sheet, description, and your display name are shown in the community gallery to everyone, after review by our team. Other users can then add it to their workspaces and use it in their own generations. You can make it private again at any time, and nobody new can add it after that. Users who already added it keep it in their workspaces, also after you delete the talent or your account, until they remove it (section 4).

6.6 Legal and business reasons

We may disclose data when the law requires it, to protect people's rights or safety, to enforce our Terms, or as part of a merger, acquisition, or sale of our business, in which case this policy continues to apply to your data.

7. How Your Files Are Stored

Uploaded and generated files are stored with Cloudflare and delivered from long, hard-to-guess web addresses. These addresses are not protected by a sign-in: anyone who has the exact address of a file can open it. We do not publish or list these addresses, but you should share them only with people you want to see the file. After a file is deleted, a cached copy may remain available at its address for a limited time.

8. International Transfers

MeetNour is based in the United States. Your data is processed in the United States and in other countries where our providers operate, which may include the European Union, the United Kingdom, Canada, Hong Kong, and mainland China. These countries may have data protection laws that differ from those where you live. Our GDPR page explains the safeguards we rely on for data from the EEA, the UK, and Switzerland.

9. How Long We Keep Data

Deleting your account (Settings → Account) erases your organization, workspaces, stored files, talent, cloned voices, credit history, API keys, and assistant connections right away. It does not go through the Recycle Bin and cannot be undone. The one exception is talent you made public that other users added to their workspaces: it stays with them, no longer linked to your account, until the last of them removes it (section 4). If you are a member of someone else's organization, deleting your account removes only your account; the team's content belongs to the organization and stays.

10. Security

We use technical and organizational measures designed to protect your data, including:

• Encrypted connections (HTTPS/TLS) between your browser, our servers, and our providers
• Sign-in and password handling by Firebase Authentication
• API keys and assistant tokens stored only as hashes
• Access to production systems limited to the people who need it
• Rate limits and automated monitoring for unusual activity
• Card payments handled entirely by Stripe

No online service can be completely secure, and we cannot promise that your data will never be accessed, disclosed, or lost. If a breach affects your personal data, we will notify you and the authorities as the law requires.

11. Emails From Us

We send service emails that you need in order to use your account, such as team invitations and notices about changes to these terms. We send newsletters and product emails only if you asked for them. Every marketing email includes an unsubscribe link, and you can also unsubscribe by emailing [email protected].

12. Your Rights

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal data, to restrict or object to how we use it, and to withdraw consent.

• In the app: edit your profile, delete any item, empty your Recycle Bin, revoke API keys, disconnect assistants, delete cloned voices, download a copy of your data (Settings → Account → "Download my data", a JSON file with your account data and links to your stored files), or delete your account in Settings.
• By email: for anything else, write to [email protected] from the email address on your account.

We may ask you to confirm your identity. We answer within the time the law allows: one month under the GDPR, 45 days under US state privacy laws. We will not treat you differently for using your rights. If we decline a request, we will tell you why, and you may appeal by replying to our decision.

12.1 EEA, UK, and Switzerland

See our GDPR page. You also have the right to complain to your local data protection authority.

12.2 California and other US states

In the past 12 months we collected the categories of personal information described in Section 2: identifiers; customer records; commercial information; internet activity; audio and visual information; and sensitive personal information (account sign-in details, and the contents of uploads that show faces or record voices). We collected them from you and from your use of the Service, for the purposes in Section 5, and disclosed them to the service providers in Section 6.

We do not sell personal information. We do not share it for cross-context behavioral advertising. We use sensitive personal information only to provide the Service. Because we do not sell or share personal information, there is nothing to opt out of, including through a Global Privacy Control signal. Analytics cookies are off unless you turn them on.

You may use an authorized agent to make a request. We do not share personal information with third parties for their own direct marketing (California Civil Code § 1798.83).

13. Children

MeetNour is for adults. You must be at least 18 years old to create an account. We do not knowingly collect personal data from anyone under 18. If you believe a minor has created an account, email [email protected] and we will delete it.

14. Changes to This Policy

When we change this policy we update the date at the top of the page. If a change is material, we will tell you by email or in the app before it takes effect, and ask for your agreement again where the law requires it.

15. Contact