Privacy Policy for Yuzu Labs, Updated June 11, 2025

Citron Labs Inc. dba Yuzu Labs ("Company," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI video generation platform and related services (the "Service").By using our Service, you consent to the data practices described in this Privacy Policy. If you do not agree with the practices described in this policy, please do not use our Service.

‍1. Information We Collect
‍1.1 Information You Provide Directly
‍Account Information: Name, email address, and contact informationUsername and passwordProfile information and preferences Payment information (processed by our payment processor, Stripe)Communications with our customer support team
‍Content and Media: Videos, images, audio files, and other media you uploadText prompts, descriptions, and instructions you provideGenerated content and output from our AI modelsProject files, settings, and configurations
1.2 Information We Collect Automatically
‍Usage Data: How you interact with our Service (features used, time spent, actions taken) Device information (type, operating system, browser, IP address)Log data (access times, pages viewed, errors encountered)Performance metrics and analytics data
‍Technical Information: Cookies and similar tracking technologiesSession data and authentication tokensAPI calls and system interactionsNetwork and connection information
1.3 Information from Third PartiesInformation from social media platforms if you connect your accountsData from our business partners and service providersPublicly available information that may enhance our services

‍2. How We Use Your Information
‍2.1 Service Provision and Improvement
‍Core Service Operations: Process your content through our AI models to generate videos Provide customer support and respond to your inquiriesMaintain and improve our Service functionalityDevelop new features and capabilities
‍AI Model Training and Enhancement: Improve our AI algorithms and model performanceTrain and fine-tune our video generation modelsEnhance content quality and generation speedDevelop new AI capabilities and features
‍Note: We may use your content and usage patterns to improve our AI models, but we implement privacy-preserving techniques and do not use your content in ways that would identify you personally.
2.2 Business OperationsProcess payments and manage subscriptionsSend service-related communications and updatesComply with legal obligations and enforce our Terms of ServicePrevent fraud, abuse, and security threatsConduct analytics and measure Service performance
2.3 Marketing and CommunicationsSend promotional materials about new features and services (with your consent)Provide personalized recommendations and contentConduct surveys and gather feedbackSend newsletters and product updates

‍3. Legal Bases for Processing (GDPR)If you are located in the European Economic Area (EEA), our legal bases for processing your personal information include:
‍Contract Performance: Processing necessary to provide our Service
‍Legitimate Interests: Improving our Service, fraud prevention, and business operations
‍Consent: Marketing communications and optional features
‍Legal Compliance: Meeting regulatory and legal requirements
‍
‍4. Information Sharing and Disclosure
‍4.1 We Do Not Sell Your Personal InformationWe do not sell, rent, or trade your personal information to third parties for their marketing purposes.
4.2 Service Providers and PartnersWe may share your information with trusted third-party service providers who assist us in operating our Service:
‍Technology Partners: Cloud hosting and infrastructure providers (e.g., AWS, Google Cloud) ,Content delivery networks and data storage services, AI and machine learning service providers, Analytics and performance monitoring tools
‍Business Service Providers: Payment processors (Stripe) Customer support platforms Email and communication services Security and fraud prevention services All service providers are contractually required to protect your information and use it only for specified purposes.
4.3 Legal Requirements We may disclose your information when required by law or to: Comply with legal processes, court orders, or government requestsProtect our rights, property, or safety, or that of our usersInvestigate and prevent fraud, security threats, or illegal activitiesEnforce our Terms of Service or other policies
4.4 Business TransfersIn the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction. We will notify you of any such change and any choices you may have.

‍5. AI-Specific Privacy Considerations
‍5.1 Content Processing and AI Training
‍How We Process Your Content:Your uploaded content is processed by our AI models to generate videosWe may temporarily store your content during processingGenerated content is associated with your account
‍AI Model Training:We may use aggregated, anonymized data patterns to improve our AI modelsWe implement privacy-preserving techniques such as differential privacyWe do not use your content to train models that would reproduce your specific content for other users5.2 Biometric InformationIf you upload content containing biometric information (faces, voices), we Process this information solely to provide our video generation servicesDo not create permanent biometric templates or identifiers Delete temporary biometric data after processing is complete Require you to have proper consent for any biometric data you upload5.3 Synthetic Media and Generated Content Generated videos are clearly marked as AI-created in our systemYou retain ownership of your generated contentWe may retain anonymized metadata about generation patterns for service improvement

‍6. Data Retention
‍6.1 Account DataWe retain your account information and settings as long as your account is active or as needed to provide services.
6.2 Content Data
‍User-uploaded content: Retained for the duration of your account plus 90 days after deletion
‍Generated content: Retained according to your account settings and storage plan
‍Processing data: Temporary data deleted within 30 days after processing
6.3 Usage DataAnalytics and usage data may be retained for up to 2 years for service improvement purposes.
6.4 Legal RequirementsWe may retain information longer when required by law or for legitimate business purposes such as fraud prevention.

‍7. Data Security
‍7.1 Security Measures We implement industry-standard security measures including: Encryption of data in transit and at rest Access controls and authentication systems, Regular security audits and vulnerability assessments, Employee training on data protection practicesIncident response and breach notification procedures
7.2 LimitationsWhile we strive to protect your information, no method of transmission or storage is 100% secure. We cannot guarantee absolute security of your information.

‍8. Your Privacy Rights and Choices
‍8.1 Account Management
‍Access: View and download your personal information
‍Correction: Update or correct your account information
‍Deletion: Delete your account and associated data
8.2 Content ControlDownload or export your generated content Delete specific projects or contentControl content sharing and privacy settings
8.3 Communication Preferences Opt out of promotional emails Manage notification settingsUpdate communication preferences
8.4 Specific Rights Under GDPR and CCPA
‍GDPR Rights (for EEA residents): Right to access, rectify, or erase personal data Right to restrict or object to processing Right to data portability Right to withdraw consent Right to lodge a complaint with supervisory authorities
‍CCPA Rights (for California residents): Right to know what personal information is collected Right to delete personal informationRight to opt-out of sale of personal information (we don't sell)Right to non-discrimination for exercising privacy rights
‍9. International Data Transfers 9.1 Cross-Border ProcessingOur Service operates globally, and your information may be processed in countries other than where you reside, including the United States.9.2 SafeguardsWe implement appropriate safeguards for international transfers, including:Standard contractual clauses approved by the European CommissionAdequacy decisions where availableOther legally recognized transfer mechanisms
‍10. Children's Privacy Our Service is not intended for children under 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected such information, we will delete it promptly.
‍11. Third-Party Links and Services Our Service may contain links to third-party websites or integrate with third-party services. This Privacy Policy does not apply to those third parties. We encourage you to review their privacy policies.
‍12. Changes to This Privacy Policy 12.1 UpdatesWe may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements.12.2 NotificationWe will notify you of material changes by:Posting the updated policy on our websiteSending email notifications to registered usersProviding in-app notifications12.3 AcceptanceYour continued use of the Service after changes take effect constitutes acceptance of the updated Privacy Policy.
‍13. Contact Information
‍13.1 General InquiriesFor questions about this Privacy Policy or our privacy practices: Email: privacy@yuzulabs.io Address: Citron Labs Inc. dba Yuzu Labs, 300 Grant Avenue, San Francisco CA 94108
13.2 Data Protection OfficerFor GDPR-related inquiries: Email: dpo@yuzulabs.io 13.3 Exercising Your RightsTo exercise your privacy rights or submit requests:
‍Email: privacy@yuzulabs.io
‍Subject Line: "Privacy Rights Request"Include your account email and specific request details
‍14. Jurisdiction-Specific Information
‍14.1 California ResidentsUnder the California Consumer Privacy Act (CCPA), you have specific rights regarding your personal information. We do not sell personal information and have not sold personal information in the past 12 months.
14.2 European Union ResidentsUnder the General Data Protection Regulation (GDPR), you have enhanced rights regarding your personal data processing. We serve as the data controller for your personal information.
14.3 Other Jurisdictions We comply with applicable privacy laws in all jurisdictions where we operate and will update this policy as needed to reflect local requirements.

‍This Privacy Policy is effective as of the date listed above and governs our collection, use, and disclosure of your information from that date forward.