Privacy
Last updated 10 October 2026
This page explains what we collect when you use Kurgu, why we need it, which other companies handle it for us, and how to have it removed.
What we collect
When you join the waitlist, we keep your email address, the brief you wrote, the effort and notes settings you chose, the plan you picked if you picked one, and the time you joined. Files you attach on the home page are not sent.
When you have an account, we keep your email address and the date you joined. Sign-in is handled by Google's Firebase service. If you sign in with a password, the password goes to Firebase and never reaches our own servers.
When you make videos, we keep what you give us and what we make for you: your briefs, your messages, the logos, photos, footage, documents and audio you upload, and the scripts, narration, pictures and finished videos. We also keep working records of each production, including what was sent to the AI models and what came back, so we can see what went wrong when something does.
When you pay, your card details go to Stripe, our payment provider, and never reach us. We keep the record Stripe gives us: your customer number, your plan, its status and dates, and the amounts paid, refunded or disputed.
To stop abuse of the waitlist, we count how many sign-ups come from each network in an hour. We store that count against a scrambled form of your IP address, which cannot be turned back into the address.
Why we use it
- To make the videos you ask for, and to show you your productions.
- To let you in from the waitlist, and to bring your waitlist brief into your account when you sign in.
- To charge for your plan and for any use beyond it.
- To send the emails your account needs, such as confirming your address and resetting your password.
- To find and fix problems, and to keep the service safe from abuse.
We do not sell your information, we do not show you advertising, and we do not use your briefs, uploads or videos to train AI models.
Who else handles it
Making a video takes several services working together. Each one receives only the part it needs.
- Google Cloud and Firebase host the website, handle sign-in, send account emails, and store your account, productions and files.
- Modal provides the computers that work on and render each video. Each production runs in its own temporary machine, which is discarded afterwards.
- AI model providers receive the parts of a production their model works on. At present these are Meta, which writes and directs, and also makes pictures; OpenAI, which makes pictures and may see reference photos you uploaded; Google, which voices the narration and makes music; and ByteDance, which makes generated footage at the highest effort. Most of these requests pass through OpenRouter, a service that connects to many model providers.
- Brave Search receives search queries written from your brief, when your video needs research.
- Public libraries of images, icons and 3D models, such as Wikimedia Commons, Poly Haven, Sketchfab and Simple Icons, receive search terms when we look for material for a scene. When we read a website for research, that site sees a request from our servers, not from you.
- Stripe handles payments.
These services are mostly in the United States, so your information may be stored and processed there.
What your browser stores
The home page sets no cookies and runs no analytics or tracking. It remembers your light or dark choice in your browser's storage. It loads fonts from Google and a graphics library from Cloudflare, which means those companies see your IP address, as with any website that uses them.
Once you sign in, your browser also keeps your sign-in, a working copy of your productions so the app opens quickly, the brand you last used, and temporary links to your media. Signing out and clearing your browser's site data removes these.
How long we keep it
Files you upload are prepared for use, and the original upload is deleted once that is done; anything left unfinished is removed within a day. Everything else in your account is kept while your account is open, so your productions stay available to you. Waitlist entries are kept until you are let in or ask us to remove yours.
When you ask us to delete your account, we delete your account, productions, uploads, videos and working records within 30 days, except payment records, which the law requires us to keep for longer.
Your choices
You can ask us for a copy of your information, ask us to correct it, ask us to delete it, or object to how we use it. We will add an address for these requests here soon, and we will reply to each one within 30 days. If you are unhappy with our answer, you can complain to the data protection authority where you live.
Children
Kurgu is not meant for anyone under 13, and we do not knowingly collect information from them.
Changes to this page
When we change how we handle your information, we will update this page and its date. If a change matters to how your information is used, we will tell account holders by email before it takes effect.