Privacy Policy

The AI Assistant You Use

The AI assistant you use the plugin in, Codex (OpenAI) or Claude (Anthropic), processes the conversation, your instructions, the files it reads and the results of the tools it runs, under your own account with that provider and in accordance with that provider's terms, privacy policy and your settings there. We do not receive your conversation and do not control that processing. A file stored on your Mac may still be sent to that provider when the assistant reads or uses it, and anything you type into the conversation, such as an access token, may be kept in the conversation records held under that provider's settings.

On Your Mac

The plugin's setup installs the tools it needs on your Mac under ~/.juicylucy: Node.js where the Mac has no recent version, the renderer and its video encoders, Juicy CLI, and a standalone Python runtime. Outside that folder, only those tools' own caches are written (the renderer's headless browser in ~/.cache/hyperframes and npm's download cache). Setup does not change your AI assistant's settings or permissions, or your shell profile, and it asks before each download. The renderer's usage telemetry is switched off.

Composition and rendering happen on your Mac. Project files, brand files, prompts, generated and downloaded media, generation records and exports are saved on your Mac and remain there until you delete them; the brand you set up with the plugin is saved as a skill in your assistant's local skills folder. We do not receive these local files, except the content sent with a generation request as described below. Juicy CLI stores your sign-in session (your account email, access tokens and session information, but not a password) in a file on your Mac readable only by your user account; signing out removes it. Removing the plugin or signing out does not delete your local projects or the data we hold for your account.

Image and Video Generation

When you ask for an image or a video to be generated, Juicy CLI sends the prompt, the generation settings and the reference media the generation needs to our generation service, under your JuicyLucy account, and downloads the result to your Mac. In Claude Code, every image and video is generated this way. In Codex, the plugin may first use Codex's own image tool, in which case OpenAI processes that request under your OpenAI account; other generation goes through Juicy CLI.

Our generation service runs on Supabase, which provides its authentication, database, programming interface and private storage for uploaded reference media. It uses fal (fal.ai) as a generation provider, which receives the prompt, settings and reference media needed by the selected model, and generates and hosts the resulting media for download. We keep a record of each generation job (the account it belongs to, its inputs and settings, its status, timestamps, errors, output links and the credits used) to complete the job, recover downloads, account for credits and provide support. This data is processed for the purposes and on the legal bases described under What Information We Process, and Supabase and fal act as our Data Processors for it.

Other Services You Choose to Use

When you ask the plugin to study an ad in Meta's public Ad Library, it retrieves that ad's page and the media files the ad links to. When you ask for winner analysis, it reads your Meta ad account through Meta's Marketing API, read-only, with an access token you supply in the conversation; the token is not written to a file. When you ask for a public link to a draft, the renderer's publishing feature uploads that project's source and assets. These requests are made from your Mac or by your AI assistant's own tools, not through our generation service, and the service concerned processes them under its own terms and privacy policy.

User Account Management

For the purpose of providing the AI video ad generation services and user account management, including creating and managing user accounts and signing users in with one-time codes sent to their email address, we may process the following personal data: email address, user ID, sign-in session records, the version of our Terms and Conditions you accepted and when you accepted it, your credit balance and the record of credits granted, bought and used, and project data. Accounts we create with a password (for example, demonstration accounts for platform review) also have an encrypted password.

Legal basis: conclusion of the contract with a data subject under Article 6(1)(b) of GDPR.

Storage terms: user account data will be retained for as long as the user maintains an active account. If an account remains inactive for a period of 2 years, the data will be deleted or anonymized within a reasonable timeframe, unless otherwise required by law. Project data and related materials will be stored for a duration of one year from the date of creation.

Data recipients: Data Processors.

Account Sign-up

When you, or an assistant on your behalf, ask to create an account for an email address, we send a one-time sign-up code to that address. For this purpose, and to limit how many sign-up emails can be sent so that the sign-up cannot be used to send unwanted email, we process: the email address, the IP address the request came from, and the times and number of sign-up emails sent. The IP address is used only to apply these limits. Until the code is entered, the address is held unconfirmed and no account exists.

Legal basis: steps taken at your request before entering into a contract under Article 6(1)(b) of GDPR, and, for the IP address and the sending limits, our legitimate interest in preventing abuse of the sign-up under Article 6(1)(f) of GDPR.

Storage terms: if the code is not entered, the unconfirmed address is deleted from our authentication system one day after the last sign-up code was sent to it. The sign-up record (email address, IP address, times and number of emails sent) is deleted 30 days after the last sign-up email. Once the code is entered, the account data is kept as described under User Account Management.

Data recipients: Data Processors (our hosting and authentication provider, and the email delivery provider that sends the code).

Personalized Video Experience

For the purpose of tracking video generation progress, providing personalized video templates and suggestions, and improving the platform's content and features, we may process the following personal data: user preferences, industry type, video creation interests, usage habits, interaction history, template usage data, and performance metrics.

Legal basis: conclusion of the contract with a data subject under Article 6(1)(b) of GDPR.

Storage terms: user progress data will be retained for as long as the user maintains an active account. If an account remains inactive for a period of 2 years, the data will be deleted or anonymized within a reasonable timeframe, unless otherwise required by law.

Data recipients: Data Processors.

Communication and Support

For the purpose of facilitating communication with users, responding to inquiries, providing customer support, and sending relevant notifications, we may process the following personal data: name, email address, message content, and support ticket history.

Legal basis: the legitimate interest in ensuring effective communication and support under Article 6(1)(f) of the GDPR.

Storage terms: data will be retained for as long as necessary.

Data recipients: Data Processors.

Performance Analysis and Improvement

For the purpose of analyzing aggregated user data, identifying popular features, detecting usage patterns, and improving the platform performance, content and features, we may process the following personal data: age, aggregated usage data (mouse events, keypresses), pages visited, interaction patterns, device information (e.g., IP address, browser type, resolution), geographic location (country only), and usage analytics.

Legal basis: the legitimate interest in enhancing the platform functionality and user experience under Article 6(1)(f) of the GDPR.

Storage terms: aggregated performance data will be retained for 365 days for the analysis and improvement purposes.

Data recipients: Data Processors.

Legal and Security Purposes

For the purpose of fulfilling legal obligations, enforcing terms of service, protecting against fraud, security threats, and unauthorized access, and complying with applicable laws and regulations, we may process relevant user data associated with legal and security incidents, such as IP addresses, access logs, and account activity records.

Legal basis: compliance with legal obligations and our legitimate interest in ensuring the platform and user security under Article 6(1)(f) of the GDPR.

Storage terms: data will be retained for as long as necessary to fulfill legal obligations or until it is no longer required for security purposes.

Data recipients: Data Processors, Attorneys, Notaries, and Auditors.

Payment Processing

For the purpose of processing payments and managing financial transactions, we may process the following personal data: name, billing address and tax identification number where you give them on the payment page, and transaction history (the credit pack bought, the amounts, service fee, tax and currency, payment status, and our payment provider's customer and payment references). Card and other payment details are entered on the payment page of our payment provider, Stripe, and are not received or stored by us.

Legal basis: the performance of a contract with the data subject (Article 6(1)(b) of the GDPR).

Storage terms: 10 years.

Data recipients: our payment provider, Stripe, and the payment networks and banks involved in completing the transaction.

Feedback

For the purpose of managing user reviews and feedback, we may process the following personal data: review content, username, and rating.

Legal basis: our legitimate interest in managing and improving our services (Article 6(1)(f) of the GDPR).

Storage terms: data will be retained for as long as necessary.