1. Introduction
This Privacy Policy explains how Cross Creative, Inc., doing business as Smart Video Reviews ("Smart Video Reviews," "we," "us," or "our"), collects, uses, shares, and protects information in connection with our website, web application, and related services at smartvideoreviews.com (the "Service"). It applies to our customers and website visitors and is incorporated into our Terms of Service. Because the Service can process voice recordings, we give that data particular attention (see Section 5).
Our roles. For account, billing, and general use of the Service, we are the business responsible for the information (a "controller"). For the content you bring into the Service — your customers' reviews, your brand assets, and voice samples ("Customer Content") — we act as a service provider/processor on your behalf and under your instructions, and you are responsible for the rights and consents required to provide it.
2. Information We Collect
Information you provide. Account credentials and profile details, brand assets (logos, colors, business names, and music), voice recordings and voice clones, and support communications.
Review and business-profile data. We retrieve reviews, ratings, reviewer names, dates, and business-profile information from Google Business Profile through a third-party retrieval provider.
Payment information. Payments are processed by Stripe. We retain only limited billing details (such as plan, amount, and the last four digits and brand of your card) and do not store full card numbers.
Usage and device information. We automatically collect log data, IP address, browser and device type, pages viewed, actions taken, and timestamps.
Cookies and similar technologies. We use cookies for authentication, preferences, security, and analytics, as described in Section 9.
3. How We Use Information
We use personal information to:
- provide, maintain, and secure the Service and generate branded videos;
- authenticate users and protect accounts;
- verify eligibility to use the Service, including using your IP address and payment-method billing country to confirm that your business is located in a country where we offer the Service (currently the United States and Canada);
- process payments and manage Subscriptions;
- communicate with you about your account, support, and — with your consent where required — marketing;
- monitor, improve, and develop the Service, including using de-identified and aggregated data;
- enforce our Terms, prevent fraud and abuse, and comply with legal obligations.
4. How Your Data Flows Through Our Service and AI Providers
To create your videos, Review Content and Brand Assets pass through third-party providers: a review-data retrieval provider, an AI text provider (captions and scripts), a voice-synthesis provider, and a video-rendering provider. See Section 7 for the current list.
AI accuracy. Because the Service uses artificial intelligence, generated captions and narration may contain inaccuracies; you are responsible for reviewing Output before publishing it.
5. Voice and Biometric Data
Voice recording and cloning. You must obtain all required consents before submitting voice samples. We retain voice data only as long as needed to provide the voice features you use and delete it upon valid request. We do not sell voice data.
Biometric-law compliance. Where biometric-privacy laws apply (for example, in Illinois, Texas, and Washington), we provide clear notice of the biometric data we collect, its purposes, and retention; obtain written or electronic consent before collection for commercial purposes; maintain a publicly available retention and deletion schedule; do not sell, lease, or otherwise profit from biometric data; and limit disclosure to service providers under confidentiality contracts. Where we act as a processor or service provider to our business customers, they are responsible for ensuring their collection and use of biometric data through the Service complies with their own legal obligations.
6. Information About Reviewers and Other Third Parties
Reviews may include reviewer names and statements. We process this information solely to provide the Service to the business customer. As the business using the Service, you are responsible for ensuring you have any rights or permissions required to use reviewer information in your videos and for honoring requests from reviewers regarding their information.
7. How We Share Information (Subprocessors)
We do not sell personal information. We share information only with the service providers below, and as described in this Section. Our contracts require them to keep information confidential, maintain appropriate security, and comply with data-protection laws. This list is current as of the Last Updated date and may change.
| Provider | Purpose | Data |
|---|---|---|
| Anthropic (Claude API) | AI generation of captions/scripts | Review text, prompts |
| ElevenLabs | Voice synthesis and cloning | Voice samples, text |
| Creatomate | Video rendering / hosting | Review Content, Brand Assets, video |
| SerpAPI | Review / profile data retrieval | Business identifiers, reviews |
| Stripe | Payment processing | Billing and limited payment details |
| Supabase | Database, authentication, hosting | Account and application data |
| Cloudflare (R2) | File / object storage | Assets, generated files |
| Resend | Transactional and notification email | Email address, message content |
| Smartlead | Outbound marketing email | Email address, marketing content |
| Vercel | Application hosting | Usage / log data |
| Google (Analytics) | Website / product analytics | Usage and device data, identifiers |
| PostHog | Product analytics and session replay | Usage data, IP addresses, event data, recorded sessions |
| Slack | Internal operational alerts | Customer information contained in admin alerts (names, emails, events) |
Other sharing. We may disclose information to comply with law or lawful requests, to protect our rights, safety, and property or those of others, and in connection with a merger, acquisition, financing, or sale of assets.
8. Data Retention
We retain personal information while your Account is active. Generated videos are retained based on your plan — approximately 90 days (Starter), 180 days (Growth), and 365 days (Pro), with a shorter window for free trials — and you can download your MP4 files at any time and keep them permanently. On account closure or a valid deletion request, we will delete or de-identify personal information within a reasonable period, except where retention is required by law or for legitimate business purposes such as fraud prevention or tax records.
9. Cookies, Tracking, and Your Choices
Essential cookies. We use strictly necessary cookies for authentication, security, and preferences; these cannot be turned off without affecting how the Service works.
Non-essential cookies and consent. We use analytics and product-experience technologies from Google (Analytics) and PostHog (including session replay, which records interactions to help us improve the Service). These are non-essential. Because we serve customers in Canada, including Quebec, we present a cookie consent banner that lets you Accept All, Reject All, or Manage Preferences, and we do not load non-essential cookies until you consent. We do not use cookies for third-party advertising, we configure Google Analytics for analytics only (advertising features and Google Signals disabled), and we configure session replay to mask sensitive inputs.
Do Not Track and Global Privacy Control. Because there is no common industry standard for "Do Not Track" signals, we do not respond to them. Where required by law, we treat a recognized opt-out preference signal (such as Global Privacy Control) received through your browser as a valid request to opt out of any sale or sharing of personal information.
10. Data Security
Safeguards. We implement administrative, technical, and organizational safeguards, including access controls, row-level security, encryption in transit, and PCI-compliant payment processing through Stripe. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Data breach. If we become aware of a security incident that compromises your personal information, we will notify affected users and applicable regulators as required by law and take reasonable steps to investigate and address the incident.
11. Your Privacy Rights
General. Depending on your jurisdiction, you may have rights to access, correct, delete, and port your personal information, to object to or restrict certain processing, and to withdraw consent.
Categories of personal information. We collect the categories below from you, automatically, and from third-party providers (such as Google review data). We disclose each category to service providers as needed to operate the Service, and we do not sell or share any category for cross-context behavioral advertising.
| Category | Examples |
|---|---|
| Identifiers | Name, business name, email, login credentials, IP address |
| Commercial information | Subscription plan and billing status |
| Internet or network activity | Usage, device, and log data; session recordings |
| Audio / electronic information | Voice recordings and voice samples (treated as sensitive) |
| Approximate geolocation | Coarse location derived from IP address |
| Professional or business information | Business details you provide |
| Third-party content you supply | Review Content, including reviewer names and text |
Sensitive personal information. Voice recordings and voice samples may be considered sensitive or biometric personal information. We use them only to provide the voice features you request, do not use them to infer characteristics about any individual, and retain them only as described in Section 8.
California (CCPA/CPRA). If you are a California resident, you may request the categories and specific pieces of personal information we collect, the sources, business purposes, and categories of third parties that receive it; request deletion or correction; and opt out of any "sale" or "sharing" and limit the use of sensitive personal information. As of the Effective Date, we do not "sell" personal information or "share" it for cross-context behavioral advertising. We will not discriminate against you for exercising these rights.
Other U.S. state laws. Residents of other states with comprehensive privacy laws (such as Virginia, Colorado, Connecticut, Utah, and Texas) have similar rights to access, correct, delete, and opt out of targeted advertising, sale, and certain profiling, which we honor as applicable.
Appeals. If we decline a privacy request, you may appeal by contacting us. Where required by state law, we will inform you of our decision on appeal and how to contact the applicable attorney general if you disagree.
Authorized agents. You may use an authorized agent to submit requests where permitted by law; we may require verification of the agent's authority and your identity.
Canada (PIPEDA and CASL). If you are in Canada, you may request access to and correction of your personal information and may withdraw consent, subject to legal and contractual limits, consistent with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial law (including Quebec's Law 25). We obtain consent as required — including for non-essential cookies and tracking as described in Section 9 — and we honor unsubscribe requests for commercial electronic messages under Canada's Anti-Spam Legislation (CASL).
EEA / UK. The Service is offered only in the United States and Canada and is not directed to individuals in the European Economic Area or the United Kingdom. If we nonetheless process the personal data of individuals in those regions, we rely on appropriate safeguards, including Standard Contractual Clauses and the UK International Data Transfer Addendum where required.
How to exercise rights. Contact us using Section 17. We will verify your request as required and respond within the timeframes required by applicable law.
12. SMS and Mobile Data
Consent to messages. If you opt in to text messaging, you consent to receive recurring SMS or MMS messages related to the Service, such as review requests, notifications, account and billing alerts, and customer-care messages. Message frequency varies, and message and data rates may apply.
Opt-out and help. You can opt out at any time by replying STOP to any message, and you can reply HELP or contact us for assistance. Opting out of marketing messages will not stop essential transactional or Service messages.
How we handle mobile information. We do not sell your mobile phone number or SMS opt-in data, and we do not share mobile information with third parties or affiliates for their own marketing or promotional purposes. We share it only with service providers that help us deliver messaging (such as our telecommunications and messaging providers) and as otherwise described in this Policy.
Your responsibilities. If you use the Service to send messages to your own customers or reviewers, you are responsible for obtaining the required consents and complying with applicable law, as described in the Terms of Service.
13. Marketing and Publicity
Marketing communications. We may send you marketing communications about features and offers. You can opt out at any time using the unsubscribe link or by contacting us; transactional and Service messages will still be sent.
Use of your name and logo. We may identify you as a customer and use your business name and logo to describe the Service (for example, on our website or in marketing materials). If you prefer that we not do so, contact us and we will honor your request.
14. Children's Privacy
The Service is intended for businesses and is not directed to children. We do not knowingly collect personal information from anyone under 18; if you believe a minor has provided us information, contact us and we will take appropriate steps to delete it.
15. International Data Transfers and Geographic Scope
Processing location. We and our providers are primarily located in the United States, and information — including about Canadian customers — may be processed in the United States. Where a restricted transfer occurs, we rely on Standard Contractual Clauses and the UK International Data Transfer Addendum where required, with supplementary measures as appropriate.
Geographic scope. Smart Video Reviews is intended only for businesses located and operating in the United States and Canada. We use limited location signals — including your IP address and the billing country associated with your payment method — to verify eligibility and to decline or discontinue service to users outside those countries. We do not intend to offer the Service to, or actively solicit customers in, other jurisdictions.
16. Changes to This Policy
We may update this Policy from time to time and will revise the "Last Updated" date. For material changes, we will provide additional notice (for example, by email or through the Service). Your continued use of the Service after the changes take effect constitutes acceptance.
17. Contact Us and How to Exercise Rights
For questions or privacy requests, contact us at:
Cross Creative, Inc. (DBA Smart Video Reviews)
privacy@smartvideoreviews.com
9105 E. 56th Street, Ste J #2267, Indianapolis, IN 46216
Our mailing address is provided for formal correspondence, notices, and complaints, and appears in our commercial email footers as required by CAN-SPAM and applicable privacy laws.