Last updated: November 1, 2026
This Privacy Policy explains how the operator of CogVideo AI Video Generator (“CogVideo,” “we,” or “us”) handles information when you visit www.cogvideo.org, use our video generation service, or contact us. For privacy questions or requests, use our Contact Us page or email [email protected].
1. Information We Process
- Account information: your name, email address, profile image, authentication details, and account settings. If you use Google sign-in or another sign-in option offered on the site, we receive the profile information and provider identifier needed to create or link your account. We do not receive your Google password.
- Generation information: prompts, reference images you submit, selected generation settings, generated videos, thumbnails, task identifiers, delivery status, and usage history. A reference image can contain personal information about anyone shown in it.
- Billing information: billing name and address, country, selected plan, purchase amount, tax, currency, payment and subscription references, renewal and cancellation status, and refund or dispute information. Payment providers handle card entry and payment credentials on their own payment surfaces.
- Technical and security information: IP address, approximate location inferred from the IP address, browser, operating system, login and request activity, error information, and identifiers used to prevent duplicate requests and investigate abuse.
- Screening records: request and account identifiers, an input fingerprint, screening result and categories, policy information, timing, and technical error details. The dedicated screening log records a fingerprint rather than the full uploaded image; prompts and other generation data are also handled through the generation workflow.
- Communications: information you include in support, billing, privacy, or content reports and our responses.
2. Why We Use This Information
We use information to create and secure accounts, generate and deliver videos, maintain usage allowances, process and reconcile payments, manage subscriptions and refunds, respond to requests, investigate errors and prohibited content, improve the website, and meet legal or payment-provider obligations.
Where applicable data protection law requires a legal basis, we rely on performance of our agreement for account, generation, and purchase services; legitimate interests for proportionate security, abuse prevention, support, and service improvement; legal obligations for required records and disclosures; and consent where required for optional tracking or other optional processing. You may contact us to discuss a basis or exercise an applicable right.
3. Generation, Screening, and Payment Providers
To generate a video, we send your prompt, reference image when supplied, and selected settings to our generation provider, currently MiniMax. This processing is necessary to fulfill the generation you request. Do not submit sensitive material or other people's information unless you have the necessary rights and permission.
We use Dodo Payments for automated input screening. The prompt and reference image may be transmitted to Dodo's screening service, together with a request identifier. We retain screening decisions and related records to enforce usage limits, investigate abuse, and associate a decision with the correct task. Automated input checks can reject a request and are subject to limitations described in our Terms of Service.
For purchases processed by Dodo Payments, Dodo acts as merchant of record and receives the information needed to provide checkout, collect payment, manage tax and subscriptions, and handle refunds or disputes. We receive payment status and transaction references to deliver and maintain your allowance. Other payment providers, when offered, process the purchases made through them.
Hosting, storage, email, authentication, and technical support providers may also process the information needed to operate the service. Third-party providers process information under the terms and privacy notices applicable to their services. This policy does not set those providers' independent retention or model-training rules. We do not represent that submitting material to a third-party model guarantees it will never be retained or used for improvement; contact us before submitting material with specific confidentiality requirements.
4. Cookies and Website Analytics
We use session and similar technologies to sign you in, protect requests, remember preferences, and record cookie-notice choices. Disabling essential cookies can prevent account and generation features from working.
The website uses Microsoft Clarity for usage analytics, including interaction measurements, heatmaps, and session replay. Microsoft may collect device, browser, interaction, and cookie information. See the Microsoft Privacy Statement for its practices. Additional analytics, such as Google Analytics, may operate where enabled on the site.
You can manage cookies through your browser and use available provider privacy controls. Clarity can load when you open a page. Dismissing the cookie notice does not itself disable analytics. To limit tracking, use your browser settings and available provider controls, or contact us with a privacy request.
5. Visibility and Sharing
New videos are private within your account by default. Older examples already published on public pages can be viewed by visitors, together with their displayed prompts or descriptions. We do not treat a new private generation as permission to publish it in a public gallery.
Private gallery settings limit normal in-site visibility. Media files and accessible links can still be copied or shared by a person who has access to them, and a private-gallery label is not a promise that every file URL requires sign-in. Avoid distributing links or files containing information you do not intend to share.
We may disclose relevant information to investigate infringement or abuse, respond to a valid legal request, protect rights and safety, or address a payment dispute. A business transfer may require transferring service records; we will give notice where required. We do not sell your prompts, reference images, or generated videos as a content marketplace.
6. Storage and Retention
We retain account information while needed to provide your account and resolve outstanding matters. Video availability follows the storage period of the plan used for its generation. Credit expiration and video storage expiration are separate; a plan without a specified video expiration does not mean every related record is kept forever or must remain available after account closure.
Reference images are transmitted for screening and generation and may be held in the task-processing workflow while work is pending. Generated videos, thumbnails, prompts, and task metadata can remain in storage or records beyond their visible availability while cleanup, backup cycles, support, or legal retention requirements are addressed.
Billing, credit-ledger, security, and screening records can remain after a video expires or an account is closed where needed for accounting, preventing abuse, resolving disputes, or legal obligations. Records in backups are subject to backup retention and are not necessarily removed immediately from every copy. Service providers have their own retention practices. Contact us if you need a specific deletion or retention assessment.
7. Your Choices, Account Closure, and Privacy Requests
You can update account details in account settings and remove a video's normal availability through your gallery. Gallery removal makes a video unavailable through the normal gallery flow; it does not by itself guarantee immediate physical deletion of the media file or every associated record.
The account closure control disables your account and replaces identifying profile and sign-in information. It does not automatically erase all historical video files, prompts, usage records, payment records, or screening logs. Closing an account does not itself cancel an active payment-provider subscription; cancel it through billing controls or contact us first.
Depending on the law that applies, you may have rights to access, correct, delete, obtain a copy of, restrict, or object to processing of your information, and to withdraw consent for processing based on consent. You may also have a right to complain to the relevant data protection authority. Use our Contact Us page or email [email protected] to make a request. We may need proportionate information to confirm that the request concerns your data. We will explain any retention obligation or other reason that limits a request and respond within applicable legal time limits.
8. International Processing and Security
Our service providers may process information outside your country. The locations and protections depend on the provider and service involved. These locations may have privacy rules different from those in your country. Contact us for information relevant to your request before submitting material with location restrictions.
We use account access controls and other technical measures to protect information, but no online service can promise absolute security. Protect your sign-in account and avoid sending passwords, full card details, or unnecessary identity documents in a support message.
9. Age Requirement and Policy Updates
The service is intended for adults aged 18 or over. If you believe a child has provided personal information through this service, contact us so we can investigate and address it.
We may revise this policy when the service or its data practices change. We will publish the updated text and date and provide additional notice or obtain consent where required. For privacy questions, requests, or concerns, use our Contact Us page or email [email protected].