Privacy Policy

Effective October 19, 2026 · Aro Tec Can Ltd.

SVGA Makers uses the information described below to provide its video and animation tools and optional ChatGPT connection. For support, privacy questions, access requests or deletion requests, email info@aroteccan.com.

Information we process

• Account information: your account identifier, email verification status, email address and the profile information supplied when you sign in, such as your name. Google or email sign-in is handled through Firebase Authentication.
• Creative inputs and outputs: descriptions, optional reference images or uploaded media, selected styles and languages, generated video and narration, conversion settings and results.
• Service records: project identifiers, creation/completion times, processing status, credit balance, credit reservations and settlement records, and support information you send us.
• Connection information: OAuth permissions, connection grants and hashed authorization/token records when you connect ChatGPT. Connection forms do not ask you to paste API keys or passwords into ChatGPT.
• Operational information: temporary request-rate counters and active-page information used to protect and operate the service. Hosting and authentication providers may also process connection and security logs under their own policies.

How information is used

We use this information to authenticate you, calculate and confirm generation costs, perform requested generation or conversion, show your projects, prevent duplicate submissions, protect private access, provide support and maintain service reliability. Optional email updates and offers require your separate choice; you can change that choice through the website's privacy controls.

Service providers and ChatGPT

We use Firebase for authentication and account/job records, Hostinger for application hosting, Cloudflare R2 for private media storage, and configured generation services including Replicate and Ollama Cloud. Requested speech may be generated through Replicate's xAI speech service. The relevant description, reference media or narration text is sent to the provider needed to perform your request. Payment processing on the website is handled by Stripe; payment-card details are not collected through the ChatGPT tools.

If you connect ChatGPT, OpenAI processes your conversation and plugin interactions under its own terms and privacy policy. In response to your requests, the connection can return your credit balance, project descriptions and processing results. It cannot access administrator tools, other users' accounts or initiate purchases. Third-party providers have their own processing and retention terms; our access limits do not describe or override their policies.

Private access and media retention

Other ordinary users cannot access your videos by signing in to another account. Your media is scoped to your account. After completion, video and file viewing/download access lasts twenty-four hours. Expired videos and files are removed from your account's project/file lists.

Authorized administrators have a separate access window of up to thirty days for support and security review. Media stored by SVGA Makers is scheduled for permanent removal after thirty days in storage. A background process removes expired objects in batches, so deletion is not necessarily instantaneous at the thirty-day boundary and operational interruptions can delay completion. Expired files remain inaccessible through normal owner and administrator routes while cleanup is pending.

A private preview/download link issued to ChatGPT is valid for five minutes and becomes invalid when its connection grant is revoked. Anyone holding that specific link can access that video during its validity; do not share private preview links. The link is delivered as widget metadata rather than ordinary model-readable output.

Other records and connection retention

Account information, project descriptions and service/credit history remain while needed to provide and support your account, until we process an applicable verified deletion request. These records are separate from the stored media files. Payment and external-provider records may be retained separately by the relevant provider.

OAuth authorization requests and quotes expire after ten minutes, authorization codes after five minutes, and access tokens after one hour. Connection grants and refresh access have a thirty-day limit. Expired temporary connection records, including reference images supplied in a draft quote, are removed in bounded cleanup batches after a one-day grace period; backlogs or interruptions may delay physical removal. Secrets used as authorization codes and tokens are hashed in server-side storage.

Your controls

You can review and revoke ChatGPT connections on the connection management page. Revocation stops further access under that grant, including its preview links. It does not undo completed generation or automatically delete existing account projects. You can request access, correction or deletion by contacting info@aroteccan.com. We may need to verify account ownership before fulfilling a request.

Cookies and local storage

The website uses browser storage for sign-in sessions, saved interface preferences and privacy choices. Firebase and other sign-in providers may use storage required for authentication. Optional email-marketing consent is a separate choice and is not required to generate a video.

Changes and contact

We may update this notice as the service changes and will show its effective date here. For questions about this notice or your information, contact Aro Tec Can Ltd. at info@aroteccan.com.