-20%

20% off your first order

Keplerbay
Back to home

Privacy Policy

Last updated: October 6, 2026

Keplerbay

This Privacy Policy explains how DT A I, trading as Keplerbay (“Keplerbay”, “we”, “us”) collects, uses, shares and protects personal information when you visit https://keplerbay.com or use our AI video service, including your account, video packs and subscriptions, and your projects (together, the “Service”). It describes the rights you have under US state privacy laws, including the California Consumer Privacy Act as amended by the California Privacy Rights Act (“CCPA”), and under the EU General Data Protection Regulation (“GDPR”).

1. Who we are

  • Company: DT A I, trading as Keplerbay - an AI video production company registered in Sofia, Bulgaria
  • Privacy and support contact: info@keplerbay.com

For the GDPR, Keplerbay is the controller of your personal information. For the CCPA, Keplerbay is the business responsible for it.

2. Personal information we collect

In the last 12 months we have collected the categories below. For each one we list where it comes from and what we use it for.

  • Identifiers and contact details: your name, email address and phone number, your account ID, and your IP address. These come from you (when you sign up, contact us or send a quote request), from Google or Microsoft if you use them to sign in (they share your name and email), and automatically from your browser.
  • Account records: when you signed up, how you sign in, and your confirmation that you accepted our Terms of Use, read this Privacy Policy and are at least 18 years old.
  • Commercial information: the packs and subscriptions you buy, your plan and its status, your balance of video seconds and how it changed, and your payment history. Payments are processed by Stripe. We never see or store your full card or bank account number. Stripe tells us whether a payment succeeded, and we keep the transaction reference and the plan you bought.
  • Content you give us: your project briefs and answers, the scripts, images, videos, audio and other files you upload, your comments and revision requests, and the videos and files we deliver to you.
  • Internet and device activity: pages visited, clicks and similar usage data, plus browser and device type. This is collected only with your consent, except for cookieless visit counts (see section 6) and the security logs our hosting provider keeps.
  • Approximate location: the country our hosting provider derives from your IP address. We use it only to show the site in the right language. We do not collect precise geolocation.

Sensitive personal information. We do not ask for sensitive personal information, such as government ID numbers, health data or precise location. We do not use any for inferring characteristics about you. Please do not put it in briefs or files unless your project needs it.

3. How we use it

  • To create and run your account and sign you in.
  • To sell you packs and subscriptions, take payment through Stripe, and add your video seconds once the payment is collected.
  • To produce, review and deliver your videos, and to manage your projects, revisions and comments.
  • To reply to your inquiries and give you support.
  • To send you service messages, such as order, project and account notices.
  • To keep the Service secure and to prevent fraud and abuse.
  • With your consent only: to understand how the site is used (analytics) and to measure our advertising (marketing).
  • To comply with the law, including tax and accounting rules, and to enforce our Terms.

AI and your materials. We use your briefs and files only to make your project. To produce your video, they may be processed by the AI tools we work with, on our instructions and only for that purpose. We do not use your materials to train AI models unless you agree to it in writing.

4. Who we share it with

We disclose personal information only to:

  • Service providers that work for us under contract and may use it only to provide their services to us:
    • Vercel: hosting, and cookieless visit counts.
    • Supabase: accounts, sign-in, our database, and private file storage for your projects and deliveries.
    • Stripe: payments and subscriptions.
    • Resend: email delivery.
    • Bunny Stream and YouTube: video hosting for our own portfolio.
    • The AI production tools we use to make your video.
    • Google and Microsoft: only if you choose them to sign in.
    • PostHog: analytics, EU servers, only with your consent.
  • Advertising partners, only with your consent: Google (Google Ads) and OpenAI receive information about your visit through their tags. This is used to measure whether our ads lead to inquiries and to build remarketing audiences.
  • Legal and safety: authorities or other parties when the law requires it, or when it is needed to protect our rights, our users or the public.
  • Business transfers:a buyer or successor if Keplerbay is involved in a merger, acquisition or sale of assets, under this policy’s protections.

“Sale” and “sharing”.We do not sell personal information for money and never have. Under California law, letting advertising partners’ tags collect information for cross-context behavioral advertising can count as “sharing”, or as a “sale” or “targeted advertising” under other states’ laws. On our site that happens only if you accept marketing cookies. In the last 12 months the information involved was identifiers (cookie IDs and IP address) and internet activity on our site. You can opt out at any time (see section 7). We do not knowingly sell or share the personal information of anyone under 16.

5. How long we keep it

  • Account, projects, files and comments: for as long as your account is open. They are deleted when you ask us to delete your account (see section 8).
  • Payment and tax records: for as long as tax and accounting law requires, even after your account is deleted.
  • Inquiries sent by form or email: for as long as we need them to answer you and follow up.
  • Cookies: for the durations listed in section 6.

6. Cookies, Global Privacy Control and Do Not Track

By itself the website stores only what it needs to work: your language and theme, your cookie choice (the dt_consent cookie, kept for six months) and, if you sign in, the session cookies that keep you signed in (sb-*, set by Supabase and removed when you sign out or the session expires). Everything else runs only after you agree in the cookie banner. You can change or withdraw your choice at any time from “Cookie settings” in the footer.

  • Analytics (PostHog, EU servers): how the site is used, including pages visited, clicks and session recordings, so we can improve it. Cookie ph_*, 1 year.
  • Marketing (Google Ads, OpenAI): whether our ads lead to inquiries, and audiences for remarketing. Cookies _gcl_au (90 days) and __obref (1 year).
  • Embedded videos:YouTube videos load in privacy-enhanced mode and set YouTube’s cookies only when you play them. Videos hosted on Bunny Stream set no advertising cookies.

We also use Vercel Analytics, which counts visits without cookies or personal identifiers. The Clutch review badge loads from clutch.co.

Global Privacy Control (GPC).If your browser sends the GPC signal, we treat it as a request to opt out of the sale and sharing of your personal information and of targeted advertising. Our marketing tags then do not load, even if you clicked “Accept all”. Do Not Track: there is no common standard for these browser signals, so we do not respond to them. We do honor GPC.

7. Your privacy rights

Residents of California and of other states with privacy laws, including Colorado, Connecticut, Virginia, Utah, Texas and Oregon, have the rights below. We extend them to all our users in the US, and GDPR gives similar rights to people in the EU and UK.

  • Right to know and access: the categories and the specific pieces of personal information we hold about you, where they came from, why we use them and who we disclose them to.
  • Right to delete: your personal information, subject to legal exceptions such as tax records.
  • Right to correct: information that is inaccurate.
  • Right to portability: a copy of your information in a usable format.
  • Right to opt outof the sale or sharing of personal information and of targeted advertising: decline or withdraw marketing cookies in “Cookie settings”, turn on GPC, or email us.
  • Right to limit the use of sensitive personal information. We do not use any beyond what the Service needs.
  • Right to non-discrimination: we will not deny you the Service, charge you a different price or give you a lower quality of service because you used any of these rights.
  • Under the GDPR, also: the right to restrict or object to processing, to withdraw consent at any time, and to complain to your data protection authority.

How to make a request. Email info@keplerbay.com and tell us which right you want to use. To protect your information, we verify that the request comes from you: we write back to the email address on your account, or ask for details only the account holder would know. You may use an authorized agent; we will ask for your signed permission and may still verify your identity with you. We respond within 45 days. If we need more time, we may extend that by another 45 days and will tell you why. Requests are free of charge.

Appeals.If we decline your request, you can appeal by replying to our answer with “Appeal”. We will give you a written decision, with our reasons, within 45 days (60 days in Colorado). If you are not satisfied, you can contact your state’s Attorney General.

8. Deleting your account

To delete your account, contact our support team at info@keplerbay.com or through the contact form, from the email address on your account. Support will take care of it:

  • Any active subscription is cancelled first, so you are not charged again.
  • Within 30 days we delete your account, your projects, the files you uploaded, the files we delivered and your comments, and we confirm by email.
  • Unused video seconds end with the account.
  • Copies in our providers’ backups are removed as those backups expire.
  • We keep only what the law requires us to keep, such as payment and tax records, and only for as long as it requires.

9. How we protect it

All traffic to the Service is encrypted (HTTPS). Your project files and delivered videos are stored privately, and you open them through links that expire within minutes or, to watch a video, an hour. Only you and our production team can access them; within Keplerbay, client data is open only to the team members who produce and support projects. No system is completely secure, but we work to protect your information and will notify you as the law requires if a breach affects it.

10. International transfers

Keplerbay is based in the European Union (Bulgaria), and our service providers may store and process information in the United States, the EU and other countries. When personal information of people in the EU or UK is transferred abroad, our providers protect it with recognized safeguards, such as the EU Standard Contractual Clauses or the EU-US Data Privacy Framework.

11. Children

The Service is for adults: you must be at least 18 years old to create an account. We do not knowingly collect personal information from children under 13, and we do not sell or share the information of anyone under 16. If you believe a child has given us personal information, contact us and we will delete it.

12. Emails

We send service emails about your account, orders and projects. We do not send marketing newsletters today. If we start, we will only send them to people who agreed to receive them, every one will have an unsubscribe link, and we will follow the CAN-SPAM Act.

13. California “Shine the Light”

We do not disclose personal information to third parties for their own direct marketing purposes.

14. Changes to this policy

When we change this policy, we update the “Last updated” date above. If a change is material, we will also tell account holders by email before it takes effect.

Contact

Questions about this policy or your information: info@keplerbay.com.

ExplorePricing