Privacy Policy

1Introduction

Welcome to Zazu. This Privacy Policy ("Policy") describes how Zazu, a brand and service operated by Farfetched Media Labs Pvt Ltd ("Farfetched Media Labs," "Zazu," "we," "us," or "our"), collects, uses, processes, shares, stores, and protects information about you when you access or use our website, web application, mobile application, browser extensions, and any related products, features, or services that link to this Policy (collectively, the "Services").

Zazu is an artificial intelligence platform that helps creators, marketers, educators, and businesses transform long-form videos into short, ready-to-share video clips. Our Services allow you to:

• Upload videos directly from your device
• Paste a video URL from supported platforms to import content
• Generate AI-powered short clips automatically from longer videos
• Edit and customize clips using a built-in editor
• Apply different styles, layouts, and visual presets to your clips
• Add custom prompts to guide AI clip generation according to your preferences
• Export and download finished clips for use on social media or elsewhere

By creating an account or otherwise using the Services, you confirm that you have read, understood, and agree to the practices described in this Policy. This Policy should be read together with our Terms of Service. If you do not agree with this Policy, please do not use the Services.

2Scope of This Policy

This Policy applies to all individuals who interact with the Services, including:

• Registered users who purchase access to the Services
• Visitors to our website
• Business customers and team members
• Recipients of our marketing or transactional communications
• Suppliers, vendors, and partners who interact with us

This Policy does not cover the privacy practices of third-party websites, applications, platforms, or services that may be linked to or integrated with the Services. Your use of those third parties is governed by their own privacy policies.

3Information We Collect

We collect information in three main ways: (a) information you provide directly to us, (b) information collected automatically when you use the Services, and (c) information we receive from third parties.

3.1 Information You Provide Directly

Account and Profile Information. When you create an account, we collect details such as your email address and password (stored in encrypted form).

Authentication Information. If you sign in using a third-party identity provider (such as Google, Apple, or Microsoft), we receive limited profile information from that provider based on the permissions you grant.

Uploaded and Imported Content. When you use the Services, you may upload, import, or generate the following (collectively, "User Content"):

• Source videos uploaded from your device
• Video URLs you paste from supported platforms and the video content fetched from those URLs
• Images, logos, and brand assets
• Subtitles, captions, transcripts, and translations
• Text prompts and instructions you provide to our AI features
• Custom styles, presets, templates, and project files

Payment and Billing Information. When you purchase access to the Services, our payment processors collect billing details including your name, billing address, payment method type, the last four digits of your card number, card expiration date, and transaction identifiers. Zazu does not store full payment card numbers on its own servers.

Communications. When you contact our support team, respond to a survey, participate in research, or otherwise communicate with us, we collect the content of those communications, including attachments.

Marketing and Research Information. If you participate in surveys, beta programs, webinars, contests, or research studies, we collect the information you choose to share.

3.2 Information We Collect Automatically

Device and Technical Information. When you access the Services, we automatically collect:

• IP address and approximate geographic location derived from it
• Device identifiers, advertising identifiers, and device fingerprint
• Hardware model, manufacturer, and operating system
• Browser type, version, and language settings
• Screen resolution and time zone
• Network type and mobile carrier (where applicable)

Usage Information. We collect information about how you interact with the Services, including:

• Features you use, buttons you click, and pages you view
• Duration, frequency, and timing of your sessions
• Editing actions, AI prompts submitted, styles selected, and export choices
• Number and length of videos uploaded or imported
• Number of clips generated, exported, and downloaded
• Referring and exit URLs
• Crash logs, error reports, and performance diagnostics

Content Analysis Information. To power our core features, we automatically analyze your uploaded and imported videos and audio in order to:

• Detect spoken words and generate transcripts and captions
• Identify scenes, shot changes, and key moments
• Recognize objects, text, and visual elements
• Locate faces and bodies (solely for framing, reframing, and effect placement)
• Determine speaker activity and audio levels
• Generate clip suggestions, summaries, and highlights

3.3 Information We Receive from Third Parties

We may receive information about you from:

• Single sign-on and social login providers when you authenticate through them
• Video platforms when you import content via URL (e.g., publicly available metadata and video data)
• Payment processors confirming transactions and flagging suspected fraud
• Analytics, attribution, and advertising partners sharing information about how you discovered or interact with the Services
• Referral and affiliate partners sharing referral attribution data
• Team administrators and workspace owners who invite you to a shared workspace
• Public sources when relevant for security or fraud prevention

3.4 Sensitive Categories of Data

Zazu does not request and does not intend to collect "special categories" of personal data under the GDPR — such as data revealing racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic or biometric data used for unique identification, health data, or data concerning sex life or sexual orientation. Please do not upload such content unless strictly necessary, and where you do, you confirm you have a lawful basis to do so.

4How We Use Your Information

4.1 Providing and Operating the Services

• Creating, authenticating, and securing your account
• Processing your uploads and URL imports
• Generating AI-powered clips, captions, transcripts, and other outputs
• Applying styles, presets, and customizations based on your preferences and prompts
• Storing your projects and enabling editing tools
• Processing payments and managing customer purchases
• Responding to support requests
• Sending service-related notifications (account alerts, billing receipts, plan changes)

4.2 Improving and Developing the Services

• Measuring feature performance and reliability
• Identifying and fixing bugs and security issues
• Conducting research, A/B testing, and analytics
• Developing new features, styles, and integrations

4.3 AI Quality and Performance

We do not use your private User Content, including uploaded videos, imported content, generated clips, or prompts, to train AI models for third parties. Any processing of User Content is solely for the purpose of providing, operating, and improving the Services for you.

4.4 Personalization

• Remembering your style preferences, presets, and recent projects
• Suggesting templates, clip styles, and content recommendations
• Adapting the editor and recommendations to your usage patterns

4.5 Communications and Marketing

• Sending you product updates, newsletters, tips, and announcements (subject to your preferences and applicable law)
• Inviting you to participate in research or beta programs
• Measuring the effectiveness of marketing campaigns

You can opt out of marketing communications at any time using the unsubscribe link in our emails or by updating your notification preferences.

4.6 Security, Fraud Prevention, and Trust

• Detecting and preventing fraud, abuse, spam, and unauthorized access
• Enforcing our Terms of Service and Acceptable Use Policy
• Investigating suspected violations and protecting users, Zazu, and the public

4.7 Legal and Compliance

• Complying with applicable laws, regulations, and lawful government requests
• Establishing, exercising, or defending legal claims
• Managing audits, tax filings, and corporate transactions

5AI Processing and User Content

5.1 How AI Processing Works

When you upload a video, paste a URL, or invoke an AI feature, your content is processed by AI models hosted on infrastructure operated by Zazu and our trusted cloud and AI sub-processors. Processing typically happens in the cloud and may involve transmission across regions for performance and reliability.

When you provide a video URL, we fetch the video from the source platform solely to perform the processing you requested. We process only what is necessary to deliver the output (clips, captions, transcripts, etc.) and store the imported content under your account in line with our retention practices.

5.2 Ownership of Your Content

You retain all ownership rights in the User Content you upload, import, or generate using Zazu. We do not claim ownership of your videos, audio, prompts, or generated outputs. By using the Services, you grant Zazu a limited, worldwide, non-exclusive, royalty-free license to host, store, transmit, process, transcode, display, and modify your User Content solely for the purpose of providing and improving the Services to you, as further described in our Terms of Service.

5.3 Training of AI Models

Zazu does not use your private User Content (your uploaded videos, imported videos, generated clips, or prompts) to train foundation AI models for use by third parties. We may use:

• Aggregated and de-identified usage signals (such as which features are popular, processing times, error rates) to improve our Services
• Content you have explicitly designated for training or feedback purposes (for example, by opting in to a feedback program or contributing to a public template library)

5.4 Third-Party AI Sub-Processors

Some AI features may rely on third-party model providers operating under strict contractual obligations. These providers act as our sub-processors and are prohibited from using your content to train their own models, retaining your content beyond what is necessary to deliver the output, or using your content for any other purpose. A current list of our AI and infrastructure sub-processors is available upon request at [email protected].

5.5 Outputs and Accuracy

AI-generated outputs (such as captions, transcripts, clip suggestions, and summaries) are produced by probabilistic models and may contain inaccuracies, mistranslations, or other errors. You are responsible for reviewing and editing AI outputs before publishing or relying on them.

5.6 Content Moderation

To maintain the integrity of the Services and comply with applicable law, we may use automated tools and human review to detect content that violates our Terms of Service or Acceptable Use Policy.

6Cookies and Tracking Technologies

We use cookies and similar technologies to operate, secure, analyze, and (with your consent where required) advertise the Services. The categories of cookies we use include:

We honor Global Privacy Control (GPC) signals and similar universal opt-out mechanisms recognized under applicable law.

7How We Share Your Information

We do not sell your personal information for money. However, we share information in the following limited circumstances:

7.1 Service Providers and Sub-Processors

We engage trusted third-party vendors to provide services on our behalf, including: cloud hosting and content delivery, AI model providers and transcription services, payment processing, customer support tools, email delivery and marketing automation, product analytics and crash reporting, and identity verification and fraud prevention. These vendors are contractually required to safeguard your information and use it only for the purposes we instruct.

7.2 Integrations You Authorize

If you connect a third-party service to Zazu (such as a social media account, cloud storage provider, or video platform), we share information with that service as necessary to perform the integration you requested. Your use of those services is governed by their own privacy policies.

7.3 Team Members and Workspace Administrators

If you join a shared workspace or team, certain information (such as your name, email, profile photo, role, project activity, and content you contribute) will be visible to other members and administrators. Workspace administrators may have additional rights to manage accounts, access content, and configure settings.

7.4 Advertising and Analytics Partners

With your consent (where required), we share limited information with advertising and analytics partners to measure marketing effectiveness and deliver interest-based advertising. Certain disclosures through cookies and similar technologies may constitute a "sale" or "sharing" under U.S. state privacy laws — see Section 12 for your rights.

7.5 Legal Obligations and Protection of Rights

We may disclose information to law enforcement, regulators, courts, or other authorities when we believe in good faith that disclosure is necessary to: comply with a valid legal obligation or court order, enforce our Terms of Service or other agreements, detect, prevent, or address fraud or security issues, or protect the rights, property, safety, or vital interests of Zazu, our users, or the public.

7.6 Corporate Transactions

If Zazu is involved in a merger, acquisition, financing, reorganization, asset sale, or bankruptcy, your information may be transferred to the acquiring entity. We will notify you of any such change.

7.7 With Your Consent

We may share your information for any other purpose with your prior consent.

8Data Storage and Security

8.1 Where Your Data Is Stored

Zazu primarily stores user data on secure cloud infrastructure operated by leading providers in data centers located in the United States, the European Union, and other regions where our sub-processors operate.

8.2 Security Measures

We implement appropriate technical, organizational, and administrative safeguards designed to protect your information against unauthorized access, alteration, disclosure, loss, or destruction. These include:

• Encryption of data in transit (TLS) and at rest (AES-256 or equivalent)
• Role-based access controls and the principle of least privilege
• Multi-factor authentication for employees with access to production systems
• Regular vulnerability assessments and security audits
• Logging, monitoring, and incident response procedures
• Employee training on data protection and confidentiality

8.3 No Method Is 100% Secure

Despite our efforts, no method of transmission over the Internet or method of electronic storage is completely secure. You play an important role in keeping your account safe — please use a strong, unique password, enable multi-factor authentication where available, and notify us immediately at [email protected] if you suspect unauthorized access.

8.4 Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant supervisory authorities without undue delay, in accordance with applicable law.

9Data Retention

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, including providing the Services to you, complying with legal obligations, resolving disputes, and enforcing our agreements.

When we no longer have a legitimate need to process your information, we will delete or anonymize it. Where deletion is not immediately feasible (for example, because data is in encrypted backups), we will securely isolate it until deletion becomes possible.

10Account Deletion

You may delete your Zazu account at any time by:

1. Navigating to Settings → Privacy → Account Deletion in the application; or
2. Emailing us at [email protected] from the email address associated with your account.

When you delete your account:

• Your profile information and active projects will be deleted from our production systems within 30 days.
• Your uploaded videos, imported content, and generated clips will be permanently deleted from our production systems within the same period.
• Residual copies may remain in encrypted backups for up to 90 additional days before being overwritten.
• We may retain limited information as required to comply with legal obligations (e.g., billing records), resolve disputes, prevent abuse, or enforce our agreements.

11International Data Transfers

Zazu is a global service. When you use the Services, your information may be transferred to, stored in, and processed in countries other than your country of residence — including the United States — where data protection laws may differ from those in your jurisdiction.

When we transfer personal data from the European Economic Area, the United Kingdom, or Switzerland to countries that have not been deemed to provide an adequate level of protection, we rely on appropriate safeguards such as:

• Standard Contractual Clauses (SCCs) adopted by the European Commission and, where applicable, the UK International Data Transfer Addendum or Swiss equivalent
• Adequacy decisions issued by the European Commission, the UK government, or the Swiss Federal Data Protection and Information Commissioner
• Supplementary technical and organizational measures, including encryption and strict access controls

You may request a copy of the safeguards we have in place by contacting us at [email protected].

12Your Rights and Choices

Depending on where you live, you may have certain rights with respect to your personal data. Subject to applicable law and any verification requirements, these rights may include:

12.1 How to Exercise Your Rights

To exercise any of these rights, please contact us at [email protected] or use the in-app privacy tools under Settings → Privacy & Data. We may need to verify your identity before fulfilling your request, and we will respond within the timeframe required by applicable law (typically 30–45 days). If we deny your request, you may appeal by emailing [email protected] with the subject line "Privacy Appeal."

12.2 Authorized Agents

In jurisdictions that allow it (such as California, Colorado, Connecticut, and other U.S. states with comprehensive privacy laws), you may authorize an agent to submit requests on your behalf. We may require proof of authorization and verify your identity.

12.3 Automated Decision-Making

Zazu does not use your personal data to make decisions based solely on automated processing that produce legal or similarly significant effects on you.

13Third-Party Services and Links

The Services may include links to or integrations with third-party websites, applications, or services (such as social media platforms, cloud storage providers, video platforms, and analytics tools). This Policy does not apply to those third parties, and we are not responsible for their privacy practices. We encourage you to review their privacy policies before interacting with them.

Important note on video URL imports. When you paste a video URL from a third-party platform (such as YouTube, Vimeo, or social media), your use of that platform is subject to its own terms and privacy policy. You are responsible for ensuring you have the right to use any content you import into Zazu.

14Children's Privacy

Zazu is not intended for and is not directed at children. We do not knowingly collect personal data from individuals under the age of 16 (or the higher minimum age required by your local law, where applicable). If you are under the minimum age in your country, please do not use Zazu or submit any personal information to us.

If you are a parent or legal guardian and believe a child under the applicable minimum age has provided personal data to Zazu, please contact us at [email protected] and we will take prompt steps to delete the information.

15Jurisdiction-Specific Disclosures

15.1 European Economic Area, United Kingdom, and Switzerland

If you are located in the EEA, UK, or Switzerland, Zazu acts as a data controller for personal data we collect about you. Our legal bases for processing your personal data include:

• Performance of a contract — to provide the Services you have requested
• Legitimate interests — to improve the Services, ensure security, prevent fraud, and conduct measured marketing
• Consent — for non-essential cookies, marketing communications (where required), and certain AI features
• Legal obligation — to comply with applicable laws

You have the right to lodge a complaint with your local data protection authority. A list of EEA authorities is available at edpb.europa.eu. In the UK, you may contact the Information Commissioner's Office (ICO). In Switzerland, you may contact the Federal Data Protection and Information Commissioner (FDPIC).

15.2 United States — State Privacy Rights

Residents of California, Colorado, Connecticut, Delaware, Iowa, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Texas, Utah, Virginia, and other U.S. states with comprehensive privacy laws have rights as described in Section 12. To exercise your rights, email [email protected].

California "Shine the Light" Disclosure. California residents may request information about the categories of personal information we have disclosed to third parties for their direct marketing purposes in the preceding calendar year.

15.3 Brazil

If you are located in Brazil, our processing is governed by the Lei Geral de Proteção de Dados (LGPD). You have rights of access, correction, anonymization, portability, deletion, information about sharing, withdrawal of consent, and review of automated decisions. To exercise these rights, contact us at [email protected].

15.4 Canada

If you are located in Canada, your information is processed in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws (including Quebec's Law 25). Contact us at [email protected] to exercise your rights.

15.5 Other Jurisdictions

We honor data protection rights granted to users in other jurisdictions, including Australia (Privacy Act), Japan (APPI), South Korea (PIPA), and Singapore (PDPA). Please contact us if you have specific questions about how we handle your data in your country.