Privacy policy
Last updated: 30 October 2026
This policy explains how QikBuild, s. r. o., IČO 55100015, at Bottova 2A, 811 09 Bratislava, Slovakia, processes personal data in Animro. We are the controller for the website, waitlist and accounts. Contact us about privacy at hello@qikbuild.com.
1. Data we process
- Waitlist: email address, signup and confirmation times and method, confirmation token records and delivery attempts. For abuse prevention we store a keyed hash of the IP address used to request confirmation. If you confirm by replying “Ok”, Resend receives the reply and we record the confirmation, not your message body in our waitlist table.
- Free example video requests: the website address and email address you enter on our home page, when you agreed to show the video on our examples page, and a keyed hash of your IP address that limits how many requests one address can send.
- Account: email address, sign-in and security information, credit balance and history, and settings you choose.
- Projects: messages, prompts, uploads, generated video and audio, previews, exports and related processing status. Files can contain personal data about you or other people.
- Purchases: pack, amount, tax, payment status, transaction identifiers and refunds. Stripe handles payment card details; we do not store full card numbers.
- Technical and support data: IP address, device/browser details, request and error logs, bot-check results, and information you send us when asking for help.
- Usage data: pages you view, device and browser details, approximate location and cookie identifiers, collected by Google Analytics on the website and in the app.
- Product emails: for waitlist members and account holders, we keep your email address in Resend’s contact list with a few facts about your account: when you joined the waitlist or signed up, how many videos you have finished, whether you have bought credits, when you were last active, and which campaign link you signed up from. Resend tells us when an email is delivered, opened or clicked (through a small image and redirecting links in the email) and when you unsubscribe.
- Notifications: if you turn them on in a browser, the address that browser’s push service gives us, its encryption keys and the browser name. We delete them when you turn notifications off, sign out in that browser, or the push service tells us they expired.
2. Purposes and legal bases
- We use your email to confirm your waitlist place and send early access or launch updates after confirmation, based on your consent. You can withdraw that consent at any time by emailing us; withdrawal does not affect earlier lawful processing.
- We use the website and email address from a free example video request to make the video and send it to you, which is what you ask for. We show the finished video on our examples page only because you agree to it when you send the request, and you can withdraw that consent at any time by emailing us.
- We process account details and project material to provide the Service you request and administer purchased credits, based on performance of our contract with you.
- We keep transaction and tax records to meet legal obligations. We use limited technical data to secure the Service, prevent fraud, troubleshoot faults and answer support requests, based on our legitimate interests in running a safe, reliable service.
You need to provide an email address to join the waitlist or sign in, and project instructions and any necessary files to make a video. Without that information we cannot provide the corresponding feature. Other uploads are optional.
3. AI and service providers
To make a video, project instructions and relevant uploaded material may be sent to Anthropic for AI processing. When web research is on for a chat, your brief, search queries and the web addresses involved are sent to Firecrawl for web search and page scraping and to OpenRouter, which passes them to an OpenAI model; images and PDFs attached to that chat are sent through OpenRouter to that model to be read, and PDFs are converted to text by Cloudflare through OpenRouter. A website brand-kit import fetches the address you enter through Firecrawl and may send the page content through OpenRouter to an OpenAI model to draft the kit. Text requested for voice, music or effects is sent to ElevenLabs. When Realistic footage is on for a video, the prompt for each photo or clip (written from your brief) and any of your uploaded images chosen as a reference are sent to Higgsfield to make it. Higgsfield’s terms allow it to use these prompts, images and results to train its AI models, and it keeps the results on its own servers. Rendering providers may receive the files needed for an export. Notifications you turn on go through your browser’s push service (Google for Chrome and Android, Mozilla for Firefox, Apple for Safari, Microsoft for Edge), encrypted so that only your browser can read them; each one names your video and what is ready. Apart from Higgsfield as described above, these providers process data for the requested operation and may retain limited records under their service terms. We do not use your projects to train our own AI models. We do not sell personal data.
| Provider | Role |
|---|---|
| Supabase | Sign-in and application database |
| Vercel | Website hosting and, where used, video rendering |
| Cloudflare | File storage, video previews and bot protection; PDF text extraction for web research |
| Anthropic | AI model and agent processing of instructions and project material |
| OpenRouter | Routes web research and website brand-kit requests, with their attachments, to AI models |
| OpenAI | AI model (through OpenRouter) for web research and website brand-kit imports |
| Firecrawl | Web search and page scraping for web research and website brand-kit imports |
| ElevenLabs | Requested voiceover, music and sound effects |
| Higgsfield | Realistic photos and video clips, when Realistic footage is on for a video; may train its AI models on them |
| Modal | Video rendering when that processing option is used |
| Stripe | Checkout, payments, tax and fraud checks when purchases are enabled |
| Resend | Sign-in emails; waitlist and product emails, their contact list, and delivery, open and click reports; confirmation replies |
| Usage analytics for the website and app (Google Analytics) | |
| Browser push services | Deliver notifications you turn on: Google, Mozilla, Apple or Microsoft, depending on your browser |
Provider operations may involve access or transfers outside the European Economic Area, including the United States. Where required, transfers are subject to an adequacy decision or appropriate contractual safeguards. Ask us for information about the safeguards applicable to your data.
4. Retention and deletion
- Waitlist entries stay while the waitlist and early access communications operate, or until you withdraw or ask us to delete them. A confirmation link expires after seven days. IP hashes used for rate limits are cleared after the 24-hour window when the next waitlist request runs.
- Free example video requests stay while we make the video and while it is shown on our examples page, or until you withdraw your consent or ask us to delete them by email.
- Product email contacts stay while you are on the waitlist or have an account. If you unsubscribe, Resend keeps your address marked as unsubscribed so you get no more product emails.
- Account and project data stay while your account is active. You can delete a video in the app; its database records are removed and associated files and agent sessions are queued for cleanup. Photos and clips made with Higgsfield also stay on Higgsfield’s servers under its terms; deleting the video does not remove them there. Email us to request account deletion or a copy of your data.
- We retain payment, tax and dispute records for the period required by law and keep limited security or support records while needed for the relevant issue. Providers and backups may have separate, limited deletion cycles.
5. Cookies and security
The app uses cookies needed for sign-in, session security and related service functions. Cloudflare Turnstile may process technical signals to prevent automated abuse. We use Google Analytics on the website and in the app to count visits and see which pages are used. It sets cookies in your browser and sends Google the pages you view, your IP address, and your device and browser details. We do not use advertising cookies. We use access controls, encrypted connections and restricted file access to protect information, but no online service can guarantee absolute security.
6. Your choices and rights
Under applicable data-protection law you may request access, correction, deletion, restriction or portability of your data; object to processing based on legitimate interests; withdraw consent for waitlist emails; and unsubscribe from product emails with the link in any of them. Some requests are subject to legal exceptions, such as records we must retain. We do not make decisions solely by automated processing that produce legal or similarly significant effects about you. Send requests to hello@qikbuild.com. You can also complain to the Slovak Data Protection Officeor your local supervisory authority.
7. Changes
We will update this page when our processing changes and show the new date above. If a change materially affects your rights or choices, we will give additional notice where required.