aisma1. Who we are
Aisma is operated by BEINTOUCH PTE. LTD, a company registered in Singapore (“BeInTouch”, “we”, “us”). Privacy questions can be sent to support@aisma.ai.
2. Data we process
We process your Aisma account identifier, sign-in details you choose to provide, wallet and credit records, purchase and refund event identifiers, source-video selection, creative brief, generation status, technical diagnostics, and generated video. We do not receive or store full payment-card details. To offer the introductory week once per customer, we keep one-way hashes of payment identifiers that Stripe provides, such as a card fingerprint, a digital wallet payer ID or the billing email, and compare them across accounts.
A source video is uploaded to private storage only after you choose it. Your complete source video, creative brief and optional photo references are processed to create your requested result. Visual scene analysis helps apply the request across the video. Edits keep the original audio. When you use a Template, the photos you add are processed together with a ready Aisma video in the same way. Temporary prepared clips are deleted automatically according to the configured retention period. Completed videos remain private in your Library subject to the retention information shown in the product. Recreation materials normally remain available for 72 hours after completion without a subscription, or during a valid subscription and at least 72 hours after it ends.
3. Why and how
We use this data to authenticate you, provide Semantic Magic Video, calculate and settle credits, process and restore eligible purchases, prevent abuse, investigate failures and payment disputes, secure the service, and comply with law.
4. Service providers
Supabase provides account, database, and private-storage infrastructure. Resend delivers account confirmation and sign-in emails, receiving your email address and the message needed to complete that action. Cloudflare delivers the web application. Aisma uses contracted processing services to analyze your video and reference photos and create your requested edits. These services receive the video, reference material and instructions needed for your edit. Before you add credits, a free preview may analyze your video, photos and request and ask you short questions; your answers are kept with the task. Stripe processes purchases made on aisma.ai and receives the payment and billing details you enter at checkout. RevenueCat coordinates purchase status for the mobile apps and for website subscriptions started before October 2026, which it bills with Stripe as its payment processor. Apple and Google process purchases made through their app stores under their own terms.
Aisma does not sell your videos or show third-party advertisements inside the product. Subject to regional consent requirements and your privacy settings, Google Analytics, Google Ads and PostHog receive permitted website interaction and purchase measurements to help us understand and improve our advertising. Advertising personalization is disabled. Website measurement is separate from the optional mobile measurement described below.
5. Optional website measurement
Cloudflare uses your approximate country and, where needed, region to select the measurement mode before Google tags load. In the EEA, UK, Switzerland, Turkey and Quebec, we wait for you to click OK; Reject on the same notice keeps measurement off. Everywhere else, including the US and when your location cannot be determined, measurement starts when the page loads and OK dismisses an informational notice. A saved refusal overrides automatic startup. Global Privacy Control disables advertising measurement. Advertising personalization is always disabled. We store your choice, notice acknowledgement and permitted campaign attribution for up to 90 days.
You can withdraw consent or opt out of measurement in this browser at any time: Clearing site data removes your saved choice and restores the regional default.
Measurement includes generalized page routes, campaign identifiers, browser information, interactions, purchase amounts, currency and a pseudonymous transaction identifier. We do not send your video, photo references, prompt, email, private file URLs or account ID to these tools. PostHog receives selected milestones from our server, with a pseudonymous visit identifier; it does not record your screen or automatically capture clicks. Referrer measurements retain only the referring hostname, never its private path or query. Essential technical diagnostics stay in our first-party error log; aggregate major-error counts contain no user or visit identifier. Payments remain recorded in our billing system even when you decline analytics. Learn how Google uses information from sites using its services.
6. Mobile advertising measurement
Our iOS and Android apps follow Apple’s and Google’s platform rules rather than the website’s regional notice, so they do not show an Aisma consent notice in any country. On iPhone and iPad, the only request is Apple’s App Tracking Transparency prompt, which appears when you first open the app, wherever you are. On Android there is no prompt: measurement starts when you open the app, and you can reset or delete your device’s advertising ID in Android settings. When measurement is on, AppsFlyer receives app activity, device and app identifiers, a pseudonymous Aisma account identifier, and purchase lifecycle information supplied by RevenueCat, including amounts, currency, renewals and refunds. We use this information with Meta, Google, TikTok and Apple advertising services to attribute installs, assess campaign performance and improve our advertising. We do not send videos, reference photos, prompts, email addresses or private media links for advertising.
On iOS, AppsFlyer stays off until you allow tracking in Apple’s prompt. Pending, denied or restricted permission also prevents anonymous AppsFlyer and SKAdNetwork collection. Aisma’s own product analytics, which we keep ourselves, run on both platforms without a prompt. Turning measurement off in the app stops AppsFlyer and these product analytics; essential diagnostics and billing records remain available. Native apps do not send events to PostHog or Ahrefs. In the EEA, UK, Switzerland, Turkey and Quebec, we tell AppsFlyer and its partners that you have not consented to the use of your data for advertising, to ad storage or to ad personalization. Purchases, credits and editing work regardless of your choice.
After you allow Apple’s tracking permission, and while measurement is on, we briefly store the iOS device’s network IP address with its current installation and vendor identifier to support purchase attribution through AppsFlyer and Meta. This observation stops being used after one hour. The next successful hourly cleanup deletes it, normally within a further hour; a changed measurement preference clears it when received by the server. We do not place it in website analytics or technical error reports. A later renewal without a matching fresh device observation can still be recorded as a purchase without this network context.
You can turn measurement off, or back on, at any time in Profile → Privacy & analytics, and your saved choice always wins. You can also manage iOS tracking permission in Settings → Privacy & Security → Tracking, and reset or delete your advertising ID in Android settings. Your preference is stored for this account on this device. Withdrawal stops future collection; updating server-side forwarding requires a network connection. Previously processed records are not automatically erased. Contact us to exercise your privacy rights. Learn more in the AppsFlyer Services Privacy Policy.
7. Security, retention, and rights
We use private storage, row-level access controls, short-lived signed links, encrypted transport, and server-side purchase verification. Account deletion removes account-linked source files, generated videos, generation records, wallet, and profile, subject to limited retention required for fraud prevention, refunds, disputes, accounting, or law.
Depending on your location, you may request access, correction, deletion, restriction, objection, or portability. You can delete the account in Aisma Settings or use the account deletion page.
8. Age and changes
Aisma is intended for users aged 13 or older, subject to any higher minimum age where they live. Users who have not reached the age of majority need a parent or legal guardian's permission, including consent to data processing where required. We do not knowingly collect personal data from children under 13. Contact us if you believe a child under 13 has provided personal data so we can investigate and remove it. We may update this policy when the service or law changes and will publish a new effective date.