Privacy Policy | UrlToVideo: Convert any URL into amazing videos with AI

Introduction

This Privacy Policy explains how we process your personal data when you use our website and our AI-powered "URL to Video" service. We adhere to the requirements of the General Data Protection Regulation (GDPR) of the European Union and other applicable data protection laws.

If you have questions about this Privacy Policy or the processing of your data, you can contact us via email at any time (see contact details below).

1. Controller

Responsible for the processing of your personal data is:

Name / Operator: https://urlto.video/
Address: 1st Floor, Room D, 43 Fanling Yuen Fung Street, North District, Hong Kong
Email: [email protected]

If legally required, we will supplement this information with an EU representative or further contact channels.

2. What Data We Process

2.1 Account and Communication Data

Basic Account Data (if you create an account): Name (if provided), email address, language/locale, registration date
Access Data: Login times, account status
Communication: Content of your inquiries to us (e.g., via email or form) and our responses

2.2 Image and Content Data

URL Input: The URL you provide is processed to extract content.
Generated Content: Scripts, storyboards, images, and videos generated from your URL input.
Processed Content:
- Firecrawl: Used to crawl and extract content from the provided URL.
- LLM: Large Language Models are used to generate storyboards and scripts from the extracted content.
- Replicate: Used to generate AI images and assets based on the storyboard.
- Shotstack: Used to compile and render the final video.
Metadata: File type, file size, upload time, technical processing information.

We process this data exclusively to provide you with the requested video features, display results, and enable downloads.

2.3 Payment and Billing Data

If you use paid features, payment data (e.g., card data) is processed by our payment service provider (e.g., Stripe). We only receive information necessary for invoicing, allocation, and support (e.g., name, email, billing address, last digits of the card, transaction ID).

2.4 Technical Data and Usage Data

Log Data: IP address, date and time of access, requested URLs, HTTP status codes, transferred data volume, referrer URL, user agent (browser & OS)
Device and Session Data: Device type, screen resolution, language settings, approximate region/location (derived from IP), session duration
Usage Behavior: Which pages and features you use, clicks, scroll behavior, error messages

This data typically arises during the technical operation of the website and is stored in log files.

2.5 Other Data Provided by You

In addition to the categories mentioned above, we may process other personal data that you voluntarily provide to us in connection with the use of our services. This may include in particular:

Content of feedback forms, support requests, or reviews
Information about your preferences and settings in the account or your profile
Other information you transmit during communication with us

We process this data only insofar as it is necessary to answer your inquiries, improve our services, or fulfill legal obligations.

3. Cookies and Similar Technologies

3.1 Only Necessary Cookies

We use exclusively necessary cookies (Essential Cookies) that are strictly required for the basic functionality of our website. These cookies cannot be disabled as they are necessary for the proper operation of the website.

We do not use analytics, tracking, or marketing cookies. We do not use cookies for usage analysis, advertising, or profiling.

Necessary Cookies Used:

Session Cookies: To maintain your login session and ensure functionality during your visit
Security Cookies: To protect against fraud and abuse
Language Cookies: To save your language setting (e.g., NEXT_LOCALE)
Theme Cookies: To save your theme setting (light/dark)

You can partially or fully disable cookies in your browser settings. In this case, however, some functions of the website may be restricted or unusable.

4. How We Process Your URL and Content

4.1 Processing Steps

URL Submission: You submit a URL to our service.
Content Extraction: We use Firecrawl to extract text and relevant information from the URL.
Script & Storyboard: An LLM analyzes the extracted content to create a video script and storyboard.
Asset Generation: Replicate generates visual assets (images) based on the storyboard.
Video Compilation: Shotstack renders the final video using the generated assets and script.
Result Delivery: The final video is stored and made available for you to download.

4.2 Storage Duration

Input Data: URLs and extracted content are processed temporarily.
Generated Assets: Intermediate assets (images, scripts) and final videos are kept for a limited period to allow for download and history viewing, after which they are regularly deleted.
Temporary Files at Service Providers: Data transmitted to third-party providers (Firecrawl, Replicate, Shotstack) is handled according to their respective data retention policies.

Storage of Images and Regular Deletion:

Uploaded images are only needed for processing and are deleted thereafter. We delete images regularly at scheduled intervals so that they are not stored longer than necessary. The exact deletion period may vary, but data is removed promptly.

We process your personal data based on the following legal bases:

Art. 6 (1) lit. b GDPR – Contract Performance To provide the services requested by you (e.g., account, image processing, download, support).
Art. 6 (1) lit. f GDPR – Legitimate Interest To improve and develop our services, for error analysis, to prevent misuse, and for IT security (including log files for technical purposes).
Art. 6 (1) lit. a GDPR – Consent For certain optional processing, e.g., marketing emails, provided we explicitly ask you for this.

We only share your personal data with third parties to the extent permitted by law or if you have consented.

6.1 Processors (Service Providers)

Examples of service providers we use:

Cloud and Hosting Providers (e.g., for server operation, databases, storage)
AI Service Providers (e.g., Replicate for image processing)
Payment Service Providers (e.g., Stripe for payment processing)

These service providers process data exclusively on our behalf and based on a data processing agreement pursuant to Art. 28 GDPR.

6.2 Use of Third-Party Services

Replicate (AI Image Generation): Images and prompts are transmitted to Replicate to generate visual assets.

Shotstack (Video Rendering): Assets are transmitted to Shotstack to compile and render the final video.

Firecrawl (Web Crawling): URLs are submitted to Firecrawl to extract text and image content.

LLM Providers (Script Generation): Text content is processed by LLM providers to generate video scripts and storyboards.

Important Notes:

Replicate's servers may be located outside the European Union.
We cannot guarantee that the third-party provider outside the EU fully complies with the GDPR.
By uploading your images, you agree to the transmission of your data to the third-party provider Replicate.
Images are transmitted to Replicate only for the processing requested by you and are deleted according to our guidelines after processing.

6.3 Other Recipients

In individual cases, data may also be transmitted:

To authorities, courts, or legal advisors if required by law or necessary for the establishment, exercise, or defense of legal claims
In the context of a business transfer (e.g., sale, merger), to the extent legally permissible

We do not sell your personal data.

7. International Data Transfers

Your data may be processed in countries outside the EU/EEA (e.g., by our service providers). In these cases, we ensure that an adequate level of data protection is guaranteed, in particular through:

Adequacy Decisions of the EU Commission or
Standard Contractual Clauses (SCCs) pursuant to Art. 46 GDPR
And additional technical and organizational measures

8. Storage Periods

We store personal data only as long as necessary for the respective purposes:

Account Data: As long as your account exists and beyond that, insofar as legal retention obligations (e.g., tax and commercial law) require this.
Images and Processing Data: As described above, only for the period necessary for service provision and error analysis.
Log and Security Data: Typically up to 12 months, unless longer retention (e.g., for clarifying security incidents) is required.
Billing and Payment Data: According to statutory retention periods (usually 6–10 years).

Regarding your personal data, you have in particular the following rights:

Access (Art. 15 GDPR): You can request information about which personal data we process about you.
Rectification (Art. 16 GDPR): You can request the correction of incorrect or completion of incomplete data.
Erasure (Art. 17 GDPR): You can request the deletion of your data ("Right to be Forgotten"), provided no legal or contractual retention obligations oppose this.
Restriction of Processing (Art. 18 GDPR): You can request that we process your data only to a limited extent.
Data Portability (Art. 20 GDPR): You can request that we provide you with certain data in a structured, common, and machine-readable format.
Objection (Art. 21 GDPR): You can object to the processing of your data if it is based on Art. 6 (1) lit. f GDPR (legitimate interest).
Withdrawal of Consent (Art. 7 (3) GDPR): You can withdraw consent given to us at any time with effect for the future.

To exercise your rights, you can contact us via email at any time: [email protected]. You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the member state of your residence or workplace.

10. Privacy for Children

Our services are not directed at children under 13 years or under the applicable minimum age pursuant to GDPR (usually 16 years). We do not knowingly collect personal data from children. If we learn that personal data of a child is being processed, we will delete this data immediately.

11. Changes to This Privacy Policy

We may occasionally adapt this privacy policy, e.g., if we introduce new functions or legal requirements change. We will announce significant changes appropriately, e.g., by a notice on the website. The current version is always available on this page.

By using this website, you agree to this Privacy Policy and the applicable Terms of Service. If you believe that data is not processed properly or promptly, please contact us by email – we will examine the matter and seek a solution.

Last updated: December 02, 2025