Hazevio

Privacy Policy

Last updated 3 September 2026

Hazevio generates video ads for people who sell things online, and publishes those ads to social accounts they connect themselves. This describes what that involves handling, and is written against what the software does rather than what a policy template assumes.

Who this covers

Two different groups, and the distinction matters because we hold very different things about each.

• Sellers — people with a Hazevio account, who connect their own social and commerce accounts.
• People who message or comment on a seller's posts — who have no relationship with us at all, and whose data reaches us only because a platform delivers it when they interact with an account a seller has connected.

What we hold about sellers

• Account — email address, an optional name, and a password hash. We never store a password itself.
• Brand and product information — what you sell, product descriptions and images, and whatever you tell us about your brand so the generated script fits it. Where you connect a catalogue, this is imported from Etsy or Shopify.
• Access tokens for the social and commerce accounts you connect, together with the account id, display name, granted scopes and expiry. What a token can do depends on what you approved when connecting, and covers more than publishing: posting content, reading how a post performed, reading your product catalogue, and — where you switch on the automation — receiving and replying to messages and comments on your accounts. The consent screen at the time of connecting lists exactly what is being granted.
• Generated media — the images and videos the system produces for you, and the captions written to accompany them.
• Publishing records — what was scheduled, when it went out, the id the platform returned, and any failure reason.

We do not ask for or store payment card details. We do not buy data about you, and we do not sell or rent anything we hold to anyone.

What we hold about people who contact a seller

If a seller turns on the message and comment automation, the platform sends us the events that trigger it. For each we store the sender's platform-assigned id, the text of their message or comment, which post it related to, and timestamps. That is what the automation needs in order to decide whether and how to reply.

We do not attempt to identify these people beyond the id the platform gives us, and we do not combine it with anything from elsewhere. If you have messaged a business using Hazevio and want that removed, write to info@hazevio.com and we will delete it — you do not need an account with us to ask.

Who else sees it

These are the services the system actually sends data to, and what each receives.

• OpenAI — product and brand text, to write scripts and to analyse the format of reference videos.
• KIE — prompts and product images, to generate the presenter and render the video.
• ElevenLabs — script text, where a run adds a separate voiceover.
• Cloudflare R2 — storage for generated and imported media.
• The platforms you connect — TikTok, Meta (Instagram and Facebook), LinkedIn, Threads, YouTube, Shopify and Etsy receive whatever a given action requires, under the permissions you granted.
• A server we operate for video processing, which handles media files only.

Nobody on that list receives your data in order to market to you, and none of it is sold.

How long we keep it

Account and product data for as long as the account exists. Generated media and publishing records likewise, because you may want to see what was published and when. Message and comment records are kept while the automation needs them to hold a conversation, and are deleted with the account.

Deleting your account deletes what we hold about you, including the tokens for connected accounts and the message records tied to them. It does not delete anything already published to a platform — those posts belong to your account there, and only you can remove them.

Disconnecting

You can disconnect any account from within Hazevio, which deletes the stored token. You can also revoke our access from the platform's own settings, which is worth knowing because it works even if you cannot reach us. Once revoked, publishing to that account stops immediately.

Security, stated plainly

Access is restricted to the operators who run the service. Connections to every provider use TLS. We ask only for permissions tied to a feature that exists, and offer narrower routes where a platform allows one — connecting a Facebook Page alone requests no Instagram permissions at all, so a seller who does not use Instagram never grants them.

We would rather describe this accurately than impressively: this is a small service, not a certified one, and it makes no claim to a formal security standard.

AI-generated content

Every presenter in a Hazevio video is generated and does not exist. Each ad carries a written disclosure in its caption before it leaves the system, and where a platform has its own synthetic-media flag — as YouTube does — it is set. This is a property of the product rather than an option, and applies to every video without exception.

Where we are, and getting in touch

Hazevio is operated by Haze Tech Solutions. Data is processed in the United States and, for some providers, elsewhere. For anything about this policy, or to ask for your data to be deleted, write to info@hazevio.com.

Depending on where you live you may have rights to access, correct, export or delete what we hold, and to object to how it is used. Ask us and we will do it. We do not require a particular form of words.

Changes

If this policy changes in a way that affects what we do with your data, we will say so before the change takes effect rather than quietly updating the date at the top.