Privacy Policy

Eyita is an AI-powered video generation platform. The data controller is Daysman Energies Limited(“Eyita”, “we”, “us”, or “our”), Lekki, Lagos, Nigeria. Questions or requests regarding this policy should be sent to ebunoluwa@daysmanenergies.com.

This Privacy Policy is written to comply with the Nigeria Data Protection Regulation (NDPR) 2019 and its Implementation Framework, the EU General Data Protection Regulation (GDPR), and applicable privacy laws for users in the United States. Where requirements conflict, the stricter standard applies.

We collect only what is necessary to provide the service:

• Account data — your email address and display name, collected when you sign up through Clerk authentication.
• Story ideas — the text you enter when creating a video. This content is processed by third-party AI APIs to generate scripts (see Section 5).
• Generated content — the video script JSON and rendered MP4 files produced from your story idea.
• Job metadata — timestamps (creation, start, completion), processing status, and video duration associated with each job.
• Technical and log data — IP address, browser user-agent, referrer URL, and access timestamps collected automatically by our hosting infrastructure (Vercel, Railway).
• Payment data — all payment processing is handled entirely by Flutterwave. Eyita never receives, stores, or has access to your card number, bank account details, or CVV. We receive only a transaction reference and status confirmation.

We do not collect sensitive personal data (health, biometric, religious, or political data).

• To create and manage your account and authenticate your sessions.
• To process your story idea through AI pipelines — script generation (Anthropic Claude), narration (Google Gemini TTS), and image generation (Cloudflare Workers AI) — and render your video.
• To store your rendered videos for download during the 30-day retention window.
• To process payments for paid plans through Flutterwave.
• To maintain service security, diagnose errors, and improve reliability.
• To send transactional emails (job completion, payment receipts) — no marketing without separate consent.

We do not sell your data to third parties. We do not use your story ideas or generated content to train AI models. Your story idea text is transmitted to AI APIs solely to fulfill your video generation request.

Where GDPR applies, we rely on the following legal bases:

• Contract performance (Art. 6(1)(b) GDPR / NDPR s.2.2) — processing your account data and story ideas is necessary to deliver the video generation service you requested.
• Consent (Art. 6(1)(a) GDPR / NDPR s.2.2) — by creating an account and submitting a story idea, you consent to your input being transmitted to the third-party AI processors listed in Section 5. You may withdraw this consent at any time by deleting your account, which will result in the termination of the service.
• Legitimate interests (Art. 6(1)(f) GDPR) — server log data and security monitoring, where our interest in maintaining a secure platform does not override your rights.
• Legal obligation (Art. 6(1)(c) GDPR) — retaining transaction records as required by Nigerian tax and financial laws.

NDPR Cross-Border Transfer Disclosure: Eyita is a Nigerian company, but all of our third-party service providers are headquartered and operate primarily in the United States of America. Your personal data and content will therefore be transferred to and processed in the United States whenever you use our service. By creating an account, you explicitly consent to this cross-border transfer in accordance with NDPR Article 2.11. These transfers are necessary to deliver the service you have requested; we have no equivalent Nigeria-based alternatives currently available.

All processors are bound by their own privacy policies and applicable law:

We have entered into or rely upon data processing agreements (DPAs) or standard contractual clauses with each processor where required by applicable law. Processor privacy policies are available on their respective websites.

• Rendered videos (MP4 files) — automatically and permanently deleted from Backblaze B2 storage 30 days after the job completes. Download your video before this deadline; it cannot be recovered after deletion.
• Account data and job records — retained for the life of your account. Deleted within 30 days of an account deletion request.
• Story ideas — stored as part of job records and deleted with your account, or individually upon request.
• Payment records — transaction references and amounts are retained for 7 years as required by Nigerian financial regulations (FIRS).
• Server logs — retained for up to 90 days for security and debugging purposes, then deleted automatically.

Under the NDPR, GDPR, and applicable US privacy laws, you have the following rights regarding your personal data:

• Access — request a copy of all personal data we hold about you.
• Rectification — request correction of inaccurate or incomplete data.
• Erasure — request deletion of your account and all associated data (story ideas, job records, generated content). Note: payment transaction references required for tax compliance cannot be deleted within the statutory retention period.
• Portability — request a machine-readable export of data you provided to us.
• Objection / Restriction — object to or request restriction of processing based on legitimate interests.
• Withdraw consent — where processing is based on consent (e.g., AI processing of your story ideas), you may withdraw at any time by deleting your account.

You own the story ideas you submit and the videos Eyita generates from them. We assert no intellectual property claim over your content.

To exercise any of these rights, email ebunoluwa@daysmanenergies.com with the subject line “Data Request”. We will respond within 30 days (NDPR) / 30 days (GDPR Art. 12). Identity verification may be required before we action a request.

If you are an EU resident and believe your rights have been violated, you may lodge a complaint with your local supervisory authority. If you are a Nigerian resident, you may contact the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng.

Eyita uses session cookies only. These are set by Clerk to maintain your authenticated session and expire when you sign out or close your browser. We do not use advertising cookies, tracking pixels, or any third-party analytics cookies. We do not use cookies for behavioral profiling or cross-site tracking.

A local storage key (eyita-theme) is stored in your browser to remember your light/dark theme preference. This is functional data and does not identify you.

Eyita is intended for users who are 18 years of age or older. We do not knowingly collect personal data from anyone under 18. If you become aware that a minor has created an account, please contact us at ebunoluwa@daysmanenergies.com and we will delete the account immediately.

We implement industry-standard technical and organisational measures to protect your data: HTTPS encryption in transit (enforced by Cloudflare and Vercel), access controls on our database and storage systems, and principle-of-least-privilege access for all services. Authentication is delegated entirely to Clerk, which holds SOC 2 Type II certification.

No system is perfectly secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify affected users and the relevant supervisory authority within 72 hours of becoming aware of the breach, as required by GDPR Art. 33 and the NDPR.

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date at the top of this page and, where required by law, notify you by email. Continued use of Eyita after the effective date constitutes acceptance of the updated policy.

For all privacy-related enquiries, requests, or complaints:

You may also manage your account data directly in the app by visiting your account settings or your dashboard.