Privacy Policy

Trade name: AINARX

Chamber of Commerce (KvK) number: 42166709

Business address: Jacques Urlusplantsoen 132, 2324 LE Leiden, Netherlands

VAT ID: NL004861639B82

Contact: hello@ainarx.com

AINARX is an AI creative platform that turns your product and brief into ready-to-use creative content.

AINARX currently offers three creation tools: Social Posts (AI-generated social content), Video Ads (AI-generated cinematic multi-shot product advertisements) and Product UGC (short AI-generated UGC-style videos with AI-generated speech).

This policy applies to the AINARX platform as currently offered. If future tools materially change how personal data is processed, this policy will be updated accordingly.

Account and credit data: your email address and account identifier, your credit balance, whether your free starting credits have been granted, and credit events (credits spent or refunded) used to keep your balance correct. Passwords are handled by our authentication provider and are never visible to AINARX.

Purchase data: the credit pack purchased, credits granted, amount, currency, payment status, Stripe session and payment reference, and the immediate-start consent you gave at checkout (consent flag, timestamp, consent version and language).

Creation inputs: information you provide when creating content, such as product information, selected creative preferences, branding information, selected style (where applicable), format, duration, quality and language, and any other instructions or scripts you choose to provide. For Video Ads, you provide one product image, choose the duration and format, and select your preferred shot from three AI-generated options.

Uploaded media: the product images and logos you upload, processed to create your content.

Creator or person images (Product UGC): where you choose "Upload your own", the creator or person image you upload. Such an image may contain personal data and biometric-looking features; AINARX uses it solely to generate the video you requested and not to identify or recognise individuals.

Rights confirmation (Product UGC): whether you confirmed that you hold the required rights and permissions for an uploaded image of a person, together with the time and version of that confirmation. We do not store additional personal data about that person for this purpose.

Selected AINARX Creator: the identifier of the creator you select from the AINARX Creator Library.

Generated content: the designs, captions, hashtags, images and videos (including AI-generated speech) created for you, and records of the generation attempt such as status, credit cost and any refunds.

Browser storage: your language preference and, temporarily, a draft of your brief, including uploaded image data held in that draft.

Support, withdrawal and privacy requests: withdrawal requests (including the name, email address, an optional order or payment reference, an optional reason, the withdrawal reference and the exact submission time), support messages and privacy requests.

Limited technical and security data: technical information needed to operate and secure the service and diagnose faults. We do not intentionally log passwords, authentication tokens, full payment card details, API keys or uploaded image contents in our application logs.

To provide the service and perform our agreement with you: account creation and login, your credit balance, AI generation of your content, purchases and support.

Service emails: we may use the email address linked to your account to send service-related notifications, including when a Video Ad or Product UGC creation is ready. Your account's first completed creation may trigger one creation-ready email. After that, you can manage optional creation-ready email notifications in My Creations.

To comply with legal obligations: financial and tax administration, and handling statutory withdrawal and privacy requests.

For our legitimate interests: keeping the service secure, preventing abuse and fraud, and diagnosing technical faults.

To provide AINARX securely and reliably, we use external service providers for hosting, application infrastructure, data storage, AI processing, content generation, payment processing, authentication and communications.

To deliver our services, personal data and user-provided information, including account information, images, logos, generation instructions and other creative inputs, may be processed by the relevant service providers. The specific data processed depends on the functionality used.

Our service providers include Lovable, Supabase, OpenAI, Runway, fal.ai, Google and Stripe. Not every service provider receives the same data. We share data only to the extent necessary to provide the relevant services and in accordance with applicable privacy and contractual arrangements.

We use specialized payment service providers to process payments. AINARX does not receive or store your full payment card details.

Some service providers may process personal data outside the European Economic Area (EEA), including in the United States.

Where personal data is transferred outside the EEA, we rely on appropriate lawful transfer mechanisms where required, such as an applicable adequacy decision, the EU-U.S. Data Privacy Framework for certified organizations, or appropriate contractual safeguards, including Standard Contractual Clauses.

For more information about our service providers and the processing of personal data, you can contact us using the contact details provided in this Privacy Policy.

AINARX never receives or stores your full card details; card data is handled by Stripe.

AINARX currently uses no analytics tools, no advertising pixels and no behavioural tracking or profiling.

AINARX does not use your uploaded media or generated content to train its own AI models.

AINARX does not clone the voice of a real person; speech in videos is AI-generated.

AINARX does not sell your personal data.

Supported generated content may be stored in your private My Creations area so that you can find and download your earlier creations.

This storage is private: files are linked to your account and are not shared publicly. Access is provided through temporary links issued for your account.

Creations in My Creations remain available until you delete them, until your account or data is deleted where applicable, or until storage is otherwise removed in line with this policy and applicable law.

You can delete creations yourself in My Creations, individually or in bulk. Deletion is intended to be permanent and cannot be undone.

Also download locally anything you definitely want to keep: AINARX does not guarantee unlimited storage availability.

AINARX uses only necessary and functional storage:

Authentication/session storage — keeps you signed in.

Language preference — remembers your NL/EN choice.

Draft storage — temporarily keeps the brief you were working on so it is not lost when you sign in or buy a pack.

Stripe checkout storage and cookies — set by Stripe to run and secure the payment.

Google sign-in storage and cookies — set by Google if you use Google sign-in.

Because we place no analytics, advertising or tracking technologies, no cookie consent banner is used.

Browser draft: automatically expires after a maximum of 24 hours, and you can clear it earlier by clearing your browser storage.

Language preference: kept until your browser storage is cleared.

Account information (including email, credit balance and credit events): kept while it is needed for your account and the service, subject to applicable legal requirements.

Financial and purchase administration, including purchase and consent records: kept for the periods required by law (in the Netherlands generally seven years for tax administration).

Temporary generation inputs: kept for as long as needed to run the requested generation and deliver the result.

My Creations: supported generated content may be stored in your private My Creations area until you delete it, until your account or data is deleted where applicable, or until storage is otherwise removed in line with this policy and applicable law.

Creator or person images you upload for Product UGC: kept for as long as needed to run the generation and deliver the related creation, and thereafter no longer than necessary for the purpose it was collected for or required by law.

Withdrawal and privacy requests: kept for as long as needed to handle the request and to demonstrate that it was handled correctly, subject to applicable statutory periods.

Withdrawal acknowledgement emails: AINARX records, as part of the withdrawal request, the status of the acknowledgement (pending, accepted by our email service or failed), the number of attempts and the times of the last attempt and of acceptance. These application records follow the retention of the withdrawal request. Separately, our email infrastructure provider keeps its own technical send logs under its own retention practices; AINARX does not set a fixed period for those logs.

Other personal data: kept only as long as reasonably necessary for the purpose it was collected for.

Some categories have no fixed period in days: for those, the criterion above applies, such as for as long as needed for the service, until you delete it, or for as long as required by law.

Under the GDPR you have the right to access, rectification, erasure, restriction of processing, objection and data portability, and the right to withdraw consent where processing is based on consent.

Signed-in users can submit an access or deletion request under Privacy & Data in their account; you can also email hello@ainarx.com.

A deletion request does not automatically delete records that AINARX is legally required to retain, such as certain financial administration.

You can lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

We apply reasonable technical and organisational measures: encrypted connections, server-side handling of all API keys, row-level access rules so you can only read your own records, server-side enforcement of the credit balance, and signature verification of payment webhooks.

No online service can be guaranteed to be completely secure, and we make no claims of formal certifications.

AINARX uses AI to generate content automatically from the inputs you provide. This content is created for you to review and use; you always decide yourself whether and how you publish or use it.

AINARX does not make decisions with legal or similarly significant effect about you based solely on automated processing.

Questions about this policy or your data: hello@ainarx.com.