Privacy Policy
Last updated 7 August 2026
The short version
FSV AI is a business assistant. You give it your own API keys, it does work for you, and it stores what it needs to keep doing that. It does not sell your data, does not advertise, and does not train any model on your content.
Deleting your account deletes everything listed on this page. Not anonymised, not archived. Deleted.
Who we are
FSV AI is operated from the United Kingdom and is the data controller for the information described here. For anything in this policy, including a request to see or delete your data, contact fsvworldd@gmail.com.
What we store
| What | Why | How long |
|---|---|---|
| Email and password | To sign you in. The password is hashed, never stored readable. | Until you delete your account |
| Your API keys | So the assistant can run on your own accounts rather than ours. | Until you remove them or delete your account |
| What you tell the assistant about your business | So it does not ask you the same things every session. | Until you delete it or your account |
| Videos you upload | To cut them into clips or analyse them. | The original is deleted as soon as the job ends |
| Clips we produce | So you can come back for them. | 30 days, then deleted automatically |
| Video transcripts and measurements | So a second analysis is comparable to the first. | Until you delete the report or your account |
| Receipt and invoice details | Supplier, date, total and VAT, so your records are usable. | Until you delete them or your account |
| Social media access tokens | To post the clips you choose to post. | Until you disconnect or delete your account |
| Billing and credit history | To know what you have paid for and what you have used. | Until you delete your account |
| Anonymous page counts | To know how many people visit. No profiles, no cross-site tracking. | Aggregate only |
What we deliberately do not keep
- The videos themselves. An uploaded video is the largest thing you can send us and the least useful to store. Once the clips or the measurements are out, the original is deleted.
- Receipt and invoice images. The figures are extracted and the file is discarded.
- Your card details. We never see them. Payment is handled by Shopify, who take the payment directly.
Your API keys
FSV AI runs on keys you provide. That is the core of how it works and it changes how your data is handled, so it is worth being exact about.
- Keys are encrypted before they are written to disk, using a key that is not stored in the database. The database on its own is useless to a thief.
- No screen in the app can display a key back to you once saved. It shows only whether one is present.
- A key is never placed in a prompt sent to a language model.
- Your keys are used only for your own work. One customer's key is never reachable by another.
Who your data goes to
Only where it has to go to do the thing you asked for.
| Who | What they get | When |
|---|---|---|
| Your AI provider | The text of what you ask, on your own key and your own account. | Every time the assistant writes something |
| fal.ai | The text prompt for a video you asked to generate. | Only when you generate a video |
| TikTok, Instagram or YouTube | The single clip and caption you chose. | Only when you press post on that clip |
| Shopify | Your payment, taken directly by them. | When you subscribe or buy credits |
| Hetzner | Hosts the server. No access to decrypted keys. | Always |
We do not sell your data, share it with advertisers, or use your content to train any model.
Posting to your social accounts
When you connect TikTok, Instagram or YouTube, you are redirected to that platform, you approve the connection there, and it sends us a token. We never see your password for those accounts.
Nothing is ever posted automatically. A clip goes up only after you press the post button for that specific clip.
Those tokens are encrypted the same way your API keys are, and are scoped to your account alone. Disconnecting a platform deletes its token immediately.
Where your data is
On a server in Helsinki, Finland, inside the EU. Backups are encrypted and stored with Cloudflare R2. Because the backups are encrypted with a key held separately, a copy of a backup on its own cannot be read.
Your rights
Under UK GDPR you can ask us to show you what we hold, correct it, delete it, or send it to you in a portable form. Email fsvworldd@gmail.com and we will respond within 30 days.
You can delete your account yourself from the Keys and account screen at any time. That removes your sessions, keys, memories, clips, transcripts, receipts, social tokens, billing history and the files on disk. There is no hidden copy left behind, and no way for us to undo it afterwards.
If you think we have handled your data badly, you can complain to the Information Commissioner's Office at ico.org.uk.
Cookies
One cookie, which keeps you signed in. There is no advertising cookie and no third-party tracker on this site.
Changes
If this policy changes in a way that affects what we do with your data, the date at the top changes and you will be told before it takes effect.