Merra – Privacy & Data Policy

Last updated: March 4, 2026

Merra ("we," "our," "us") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights.

1. Information We Collect

1.1 Information You Provide

  • Account Information: name, email, billing details.
  • Uploaded Content: videos, audio, images, text, fonts, brand assets.
  • Communications: if you contact us via email, support, or surveys.

1.2 Information We Collect Automatically

  • Usage Data: how you interact with the platform (features used, frequency, errors).
  • Device Information: IP address, browser, operating system, device type.
  • Cookies & Tracking: session cookies for login, analytics cookies (e.g. Google Analytics, Amplitude) to improve service.

1.3 Third-Party Sources

  • If you connect social media accounts, we may access limited profile/analytics data with your permission.

2. How We Use Information

  • To operate and deliver the Service (e.g. generating videos).
  • To personalize content and recommendations.
  • We may analyze anonymized and aggregated usage data to improve product functionality. We do not use user content to train our own machine learning models.
  • To send service notifications (account, billing, product updates).
  • To detect, prevent, and address technical issues or misuse.
  • To comply with legal obligations.

3. Legal Basis for Processing (GDPR)

We process personal data on these grounds:

  • Contract: to provide the Service you signed up for.
  • Consent: when you agree to optional uses (e.g. marketing emails, data for AI training).
  • Legitimate Interest: to improve our service and protect from abuse.
  • Legal Obligation: when required by law.

4. Data Ownership & Control

  • You own all content you upload (videos, images, text).
  • You grant us a limited license to process, store, and transform it solely for the purpose of providing the Service.
  • You may request deletion of your account and content at any time.

5. Data Sharing & Third Parties

We do not sell your personal data. We do not use user-submitted content for advertising profiling or behavioral tracking.

We may share data with:

  • Service Providers: cloud hosting (AWS, Vercel), AI model APIs, including OpenAI (GPT models), Google Gemini, and ElevenLabs for voice synthesis, payment processors (Stripe).
  • Analytics/Support Tools: Google Analytics, Amplitude, Intercom.
  • Legal Authorities: if required by law, regulation, or court order.

Third-party providers process data solely on our behalf and under contractual data protection obligations.

5a. AI Processing

To provide script generation, voice synthesis, and automated editing features, user-submitted content may be processed by third-party AI providers. This includes:

  • Text inputs processed by OpenAI or Google Gemini
  • Voice recordings processed by ElevenLabs
  • Video files processed on our infrastructure using FFmpeg

These providers act as data processors and process content solely for the purpose of generating the requested output. We do not sell user data and do not authorize third parties to use user content for independent commercial purposes. We may automatically analyze generated content to detect abuse, spam, or violations of our Terms of Service.

6. Data Storage & Security

  • Data is stored on secure servers located in the EU/US (depending on provider).
  • We use encryption in transit (HTTPS/TLS) and at rest where supported.
  • Access to personal data is restricted to authorized personnel only.
  • No system is 100% secure, but we take reasonable steps to protect your data.

7. Retention

  • We keep account data while your account is active.
  • We may retain minimal transaction/usage data for legal, tax, or auditing purposes after deletion.
  • Uploaded content is retained only as long as necessary to provide the Service. Users may delete content at any time, after which it is permanently removed from active systems within a reasonable timeframe.

8. User Rights

Depending on your location (e.g. GDPR, CCPA), you have rights to:

  • Access your personal data.
  • Correct inaccuracies.
  • Request deletion ("right to be forgotten").
  • Restrict or object to processing.
  • Data portability (receive your data in machine-readable format).
  • Withdraw consent at any time.

Requests can be made at hello@merra.ai.

9. Children's Privacy

Merra is not directed to individuals under 16. We do not knowingly collect their data. If you believe we have, contact us for deletion.

10. International Data Transfers

If data is transferred outside the EU/EEA, we ensure safeguards (e.g. Standard Contractual Clauses, adequacy decisions).

11. Cookies & Tracking

  • Necessary cookies: for login/session.
  • Analytics cookies: to understand usage patterns.
  • Marketing cookies: only with your consent.

You can manage cookies through your browser settings.

12. Changes to Policy

We may update this Privacy Policy from time to time. Material changes will be notified via email or dashboard.

13. Contact

If you have questions or requests:

📧 hello@merra.ai