Security & Trust
Built so legal can say yes.
How Pitvi handles your data and the third parties that may process it.
Your content stays yours
We don't use customer content to train AI models. Briefs, generated videos, and brand assets belong to your account and aren't shared with anyone outside the subprocessors listed below.
Subprocessors
These are the third parties that may process customer data on our behalf. We'll notify customers when this list changes.
| Subprocessor | Purpose | Region |
|---|---|---|
| Hetzner | Primary VPS. Application server, PostgreSQL database, background jobs. | EU (Germany / Finland) |
| Cloudflare | DNS, CDN, TLS termination, edge proxy, DDoS protection. | Global edge |
| Cloudinary | Image asset hosting for brand kits, logos, and uploaded screenshots. | — |
| Polar | Subscription billing, payment processing, invoices. | — |
| Google (Gemini) | AI video generation (script, layout, typography). Customer content is not used to train models. | — |
| Google (OAuth) | Sign-in. We receive your email, name, and avatar. No Drive, Calendar, or Mail scopes. | — |
| PostHog | Product analytics. Anonymous usage metrics and error tracking. No video content. | — |
Security questions?
Vendor security review, vulnerability report, or general questions: email us.
[email protected]