Privacy Policy

SmartGrants AdStudio is operated by Solutions Intelligentes SmartGrants Sougou Inc. ("SmartGrants", "we", "us"), a corporation registered in Quebec, Canada, with registered address 1436 Mackay, Montreal, Quebec, Canada. SmartGrants AdStudio ("the Platform") is the AI advertising video generation service operated at adstudio.smartgrants.io.

For data submitted by workspaces (account information, billing details and workspace settings), SmartGrants is the data controller. For the prompts, briefs and reference material a workspace processes through the Platform, the workspace is the controller and SmartGrants acts as a processor under a written Data Processing Addendum (DPA).

Contact: privacy@smartgrants.io · 1436 Mackay, Montreal, Quebec, Canada.

This Policy applies when:

• you visit adstudio.smartgrants.io or our marketing properties;
• you create a workspace, start a free trial, or pay for a subscription;
• you purchase credit top-ups;
• you use the Platform to generate, review, download or share advertising videos.

3.1 Data you give us directly

• Account data: name, work email, organization, password (hashed).
• Billing data: billing contact, address, tax identifiers and transaction history (full card numbers are held by our PCI-compliant payment processor, not by SmartGrants).
• Creative inputs: the prompts, briefs and parameters you submit for generation.
• Communications: messages you send us via email or support requests.

3.2 Data generated by your use of the Platform

• Generated media: the videos produced from your prompts, with their model, duration and status.
• Credit ledger: debits, refunds and top-ups recorded against your workspace balance.
• Operational metadata: generation request identifiers, provider status callbacks, error messages and audit entries.

• Provide the Platform — workspace provisioning, hosting, generation, support, billing. Legal basis: performance of contract.
• Generate video — transmit your prompt and parameters to the model provider to produce the requested video. Legal basis: your instruction.
• Content moderation — providers screen inputs and outputs; rejected generations are refunded. Legal basis: legal obligation and legitimate interests.
• Security, fraud prevention, audit logging — legitimate interests.
• Billing, accounting, tax compliance — legal obligation.
• Marketing about our own services — consent or legitimate interests with opt-out.

5.1 What AI does on the Platform

• Text-to-video generation: your prompt is sent to a generative video model (currently Kling and Hailuo, accessed through Higgsfield) which produces a short advertising video.
• Prompt optimisation: some models refine your prompt internally before rendering, to improve the result.

5.2 What AI does NOT do

• No training on your data. Your prompts and generated videos are not submitted for third-party foundation-model training.
• No data sales. We do not sell personal data and do not share it for cross-context behavioural advertising.
• No cross-workspace reuse. Your prompts and videos are never shown to, or reused for, another workspace.

5.3 AI sub-processors

We use Higgsfield Cloud and the underlying model providers it routes to for video generation. Generated media is retained by the provider for a limited period (typically at least seven days) and may then be removed, which is why AdStudio keeps your videos available in your workspace.

• Sub-processors: Supabase (database and authentication), Cloudflare (edge hosting), Higgsfield (video generation), Resend (transactional email), Stripe (payments).
• Professional advisers under duties of confidentiality.
• Authorities where required by law or court order. We notify the affected workspace where lawful.
• Corporate transactions in connection with a merger, financing or sale, subject to confidentiality and continuity of this Policy.

Personal data may be processed in Canada (SmartGrants operations) and the United States (Higgsfield, Stripe, Cloudflare, Supabase and Resend as applicable). For EEA/UK transfers we rely on the EU Standard Contractual Clauses and the UK International Data Transfer Addendum, plus technical and organizational safeguards (encryption, access control, audit logging).

• Active accounts: prompts, videos and ledger entries are retained for the duration of your subscription.
• After termination: workspace data is returned or deleted within 60 days, except where retention is required by law.
• Provider retention: generated media is held by the model provider for a limited period only.
• Billing records: retained as required by applicable tax law (typically 6–10 years).

Depending on your jurisdiction (GDPR, UK GDPR, Quebec Law 25, PIPEDA, CPRA), you have rights to access, correct, delete, port, restrict or object to the processing of your personal data, and to withdraw consent. To exercise any of these rights, contact privacy@smartgrants.io. If a video featuring you was generated by one of our customers, please contact that customer in the first instance — they are the controller — and we will assist them in responding.

See our Security page for the full list of safeguards: TLS 1.2+ in transit, AES-256 at rest, Row-Level Security for workspace isolation, server-side-only provider keys, audit logging and continuous vulnerability scanning.

See our Cookie Policy.

We will post material changes on this page and notify workspaces by email at least 14 days before they take effect.

Questions about this Policy or our processing: privacy@smartgrants.io.