tweenzo

Privacy Policy

Last updated 2026-10-04

This policy explains what personal data Tweenzo collects, why, who receives it and what your rights are. The data controller is Tweenzo, Kuruköprü Mh., 01060 Seyhan, Adana, Türkiye, [email protected]. We process personal data under the Turkish Personal Data Protection Law No. 6698 (KVKK) and, for users in the European Economic Area and the United Kingdom, the GDPR.

What we collect

  • Account data: your name, email address, password (stored only as a hash), and two-factor or passkey settings if you turn them on.
  • Your content: the texts you write, storyboards, logos, images and colours you upload, custom theme briefs, and the videos we render for you.
  • Billing data: your plan, credit history and purchases. Card and bank details are entered on the checkout of Dodo Payments or Shopier and never reach us.
  • Phone check for the free credits: if you verify your phone number with our Telegram bot, Telegram gives us your phone number and Telegram account ID. We do not store them: we keep only a keyed hash of each, and of your email address, so the free credits go to each person once.
  • Support: the messages you send us in support tickets or by email.
  • Technical data: IP address, browser, request and error logs, and API keys and webhook addresses you create.

Why we use it

  • To provide the Service you signed up for: your account, video generation, rendering, downloads and support (performance of our contract with you).
  • To bill you and keep the records tax law requires (contract and legal obligation).
  • To keep the Service safe: preventing abuse, fraud and spam, checking requests against our content rules, and fixing errors (our legitimate interest).
  • To send emails about your account, your videos, purchases and support tickets. We do not send marketing emails without your consent.

We do not sell your data and we do not show ads.

Who receives it

We share data only with providers that help us run the Service, and only what they need:

  • Dodo Payments (United States and India): payments in US dollars, their invoices, tax and refunds, as our reseller and Merchant of Record. Dodo Payments processes your payment data as an independent controller under its own privacy notice.
  • Shopier (Türkiye): payments in Turkish lira and their refunds. Shopier processes your payment data under its own privacy notice.
  • Cloudflare (United States): content delivery, protection against attacks, and the bot check on sign-up and login.
  • Brevo (France): sending our emails.
  • Telegram (Telegram Messenger Inc., outside Türkiye and the EEA): the phone check for the free credits, if you use it. You share your number with our bot inside Telegram, which processes it as an independent controller under its own privacy policy.
  • DeepSeek (China): the AI models that write storyboards, review rendered frames and check requests against our content rules. They receive the text of your request and still frames of your video, not your account details.
  • ElevenLabs (United States): AI voice-over. It receives the narration text when you use a voice-over.
  • Our hosting provider: the servers that run the Service and store your data.

Some of these providers are outside Türkiye and the EEA. Where data is transferred abroad, we rely on the safeguards the applicable law provides, such as standard contractual clauses, or on your explicit consent where required. We also disclose data when the law requires it.

How long we keep it

  • Account data, your content and support tickets: as long as your account exists. When you delete the account, they are deleted; copies can remain in our backups for a limited time until those are replaced.
  • Rendered MP4 files: 7 days after rendering.
  • Purchase records: with your account, and as long as tax law requires; Dodo Payments, as the seller of record for payments in US dollars, keeps their invoices and payment records.
  • Server logs: for a limited time, to investigate errors and abuse.
  • The hashes of your email address, phone number and Telegram account from a free credit claim: also after you delete your account, for as long as we offer free credits, so the same person cannot claim them again with a new account. A hash cannot be turned back into the number or address.

Cookies

We use only cookies needed for the Service to work: your login session, protection against cross-site request forgery, "remember me", and display preferences such as light or dark mode. Cloudflare's bot check runs on sign-up and login, and the checkout of Dodo Payments or Shopier uses its own cookies when you pay. We use no analytics or advertising cookies.

Your rights

You can ask us to tell you what data we hold about you, to correct or delete it, to restrict or object to its processing, to receive it in a portable format, and to withdraw consent you gave. Under KVKK Article 11 you can also learn whether and why your data is processed and who received it. Many of these you can do yourself in your account settings; for the rest, write to [email protected]. We reply within 30 days. You can also complain to the Turkish Personal Data Protection Authority (KVKK) or to the data protection authority where you live.

Security

Data travels encrypted (HTTPS), passwords are hashed, access to servers is restricted, and payment details stay with our payment providers. No system is perfectly secure; if a breach affects you, we will tell you and the authorities as the law requires.

Children

The Service is not meant for anyone under 18 and we do not knowingly collect children's data.

Changes

We may update this policy. We will announce material changes by email or on the Service before they take effect.