Privacy Policy
Effective date: May 26, 2026
Last updated: September 29, 2026
This Privacy Policy explains how Nureta ("we," "us," "our") collects, uses, and protects your information when you use nureta.ai (the "Service"). Nureta is an adult AI video generation platform. We are committed to collecting the minimum data necessary to operate the Service and to protecting your privacy.
1. What We Do Not Collect
Nureta collects as little as possible. You sign in with Google or a crypto wallet, and we deliberately do not collect:
- Email addresses — unless you choose Google sign-in (see section 2)
- Government ID or real-world identity documents
- Passwords
- Credit card or bank account information
- Social media accounts, contacts or friend lists
- Advertising identifiers
2. Data We Collect
Account Data
- If you sign in with a wallet: your public wallet address (your account identifier). If you sign in with Google: your email address, name and profile picture, used only to run your account.
- Account creation date
Face Photos (Temporary)
- Photos you upload for video generation (0-2 per generation). These are stored temporarily for processing and are deleted within 24 hours of generation completion.
- We do not use uploaded photos for model training or any purpose other than generating your requested video.
Generated Videos
- AI-generated videos are stored for 30 days, then automatically and permanently deleted.
- Scene selections and generation parameters used to produce each video.
Usage Data
- Pages visited, features used, timestamps
- Device type, browser, operating system
- IP address (for security, rate limiting, and abuse prevention only)
Payment Data
- Payments are processed on-chain via the x402 protocol using USDC on the Base network. All transactions are recorded on the public Base blockchain. We store only the transaction hash, wallet address, payment amount, and credit balance associated with your account. We do not store private keys, seed phrases, or wallet credentials.
3. How We Use Your Data
- Service delivery: Processing face photos through our AI pipeline, generating videos, and delivering content.
- Payment processing: Verifying on-chain payments and maintaining your credit balance.
- Safety and moderation: Detecting and preventing abuse, fraud, underage usage, and policy violations.
- Service improvement: Aggregated, anonymized analytics to improve platform performance and reliability.
4. AI Processing
When you generate a video, your uploaded face photos are sent to our Seahorse backend for AI video generation. During this process:
- Photos are processed in a secure, isolated environment.
- Photos are used solely to generate your requested video.
- Photos are not used to train, fine-tune, or improve AI models.
- Photos are deleted from the processing pipeline once generation is complete, and from all storage within 24 hours.
- All generated outputs are AI-generated content and do not depict real individuals.
5. Third-Party Processors
We share data with the following service providers, only as necessary to operate the Service:
- Seahorse -- AI video generation backend. Receives face photos and scene parameters to produce generated videos.
- Base Network (x402 protocol) -- On-chain payment settlement using USDC. Transactions are publicly visible on the Base blockchain.
- Cloudflare -- CDN, DDoS protection, and content delivery.
We do not sell, rent, or trade your personal data to third parties. We do not use your data for advertising. We do not share your data with data brokers. We have no advertising partners.
6. Cookies
We use a minimal set of essential cookies. We do not use third-party advertising cookies, tracking pixels, or cross-site trackers of any kind.
- nureta_session -- Session management cookie. Essential for maintaining your authenticated session. Expires when you close your browser or after 24 hours of inactivity.
- nureta_age_verified -- Stores your age verification confirmation so you are not prompted on every visit. Expires after 30 days.
7. Data Retention
- Uploaded face photos: Deleted within 24 hours of video generation completion.
- Generated videos: Stored for 30 days, then automatically and permanently deleted. Download to keep permanently.
- Account data (email or wallet address, credit balance): Deleted when you delete your account.
- Payment records (transaction hashes, amounts): Retained for 7 years as required by financial regulations. On-chain records exist permanently on the public blockchain independent of our systems.
- Usage logs: Retained for 90 days for security and abuse prevention, then permanently deleted.
8. Your Rights
All Users
- Access your data by visiting your account page or contacting us.
- Delete your account at any time from your account page; your videos, photos and profile are permanently deleted.
- Download your generated videos before the 30-day retention window expires.
- Request a copy of the data we hold about your account.
GDPR Rights (EU/EEA Residents)
If you are in the EU or EEA, you have additional rights under GDPR:
- Right to access: Request a copy of all personal data we hold about you.
- Right to rectification: Request correction of inaccurate data.
- Right to erasure: Request deletion of your data. We will comply within 30 days.
- Right to data portability: Receive your data in a structured, machine-readable format (JSON).
- Right to object: Object to processing of your data for specific purposes.
- Right to restrict processing: Request that we limit how we process your data.
To exercise any GDPR right, email [email protected]. We respond within 30 days as required by regulation.
9. Security
We implement industry-standard security measures including encryption in transit (TLS 1.3), encryption at rest (AES-256 for stored files), strict access controls, and network isolation for processing environments. Face photos are processed in isolated environments and are never accessible to Nureta staff. However, no system is 100% secure. We recommend keeping your wallet and private keys secure.
10. Children
Nureta is an adult platform. The Service is not intended for anyone under 18. We do not knowingly collect data from minors. If we learn that a user is under 18, we will immediately delete their account and all associated data, including any generated content. If you believe a minor is using the Service, please report it to [email protected] immediately.
11. International Data Transfers
Your data may be processed in jurisdictions outside your country of residence. Where we transfer data internationally, we ensure appropriate safeguards are in place, including standard contractual clauses where required by GDPR. On-chain transaction data exists on the decentralized Base blockchain and is not subject to geographic restrictions.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated through an in-app notification or prominent notice on the Service. The "Last updated" date at the top reflects the most recent revision. Continued use of the Service after changes take effect constitutes acceptance of the revised policy.
13. Contact
Privacy questions or data requests? Email [email protected].