Last updated: October 24, 2026 · Effective: October 24, 2026
LensWave ("we", "us", "our") operates the LensWave AI canvas editor subscription platform. This Privacy Policy explains what personal data we collect, why and how, the limited ways we share it, the safeguards we apply, and the rights you have. By using LensWave you agree to the practices described here. Our business: an AI canvas editor subscription; users bring their own keys to third-party AI compute.
Account information: your username/email, a hashed password, and display name used for login, billing, and support. We never store your password in plain text.
Payment information: billing is processed by Creem (our merchant of record). We do not store full card numbers; we receive only a transaction record, subscription status, and billing email.
Project content: scripts, shot lists, storyboards, uploaded reference images, prompts, and generated videos, stored in an account-isolated workspace.
Technical and log information: generation-task logs (account identifier, time, model used, prompt, output address), device/browser type, and support-ticket content. We do not build advertising profiles or track your browsing across the web.
Attribution and referral data: when you arrive via a marketing link, we may record utm_source, utm_medium, utm_campaign, the referring URL (stripped of sensitive query strings), and any ?ref= invite code, and associate it with your account for up to 12 months. This is used only to measure channel performance and credit affiliate/referral payouts — never for third-party ad targeting.
We share personal data with the following subprocessors only as needed to deliver the service:
Model providers (BYOK): when you bring your own key, prompts and media are sent directly to the provider you choose (e.g. OpenAI, Google Veo, Kuaishou Kling, Runway, Pika, Luma, ElevenLabs, Stability, etc.) under your own contract with them. We do not operate those providers and cannot control their data handling; review their terms before connecting a key.
We use information only to: operate and improve the service; run your generation requests; handle billing and support; maintain security and prevent abuse; and comply with legal obligations. We do not sell your personal information and do not share it for cross-context advertising.
We are subject to the Personal Data (Privacy) Ordinance (PDPO), Laws of Hong Kong (Cap. 486). Under the PDPO, "personal data" means any data that relates directly or indirectly to a natural person, from which it is practicable to identify the person. Your account email, display name, and project content tied to your account are treated as personal data.
If you are in the European Economic Area, the United Kingdom, or Switzerland, the General Data Protection Regulation (GDPR) applies and you have the right to:
Legal basis: we process to perform our contract with you (providing the subscription), for our legitimate interests (security, service improvement), and, where applicable, with your consent. EU Representative: requests may be sent to support@lenswave.ai; our EU/UK representative contact details will be published here once appointed, and in the meantime we will forward your request to the appropriate entity within our organization.
If you are a California resident, the California Consumer Privacy Act, as amended by the CPRA, gives you the right to know, delete, and opt out. "Sale" and "sharing": we do not sell your personal information and do not share it for cross-context behavioral advertising, and we do not combine information to infer profiles for advertising. We honor Global Privacy Control (GPC) signals as an opt-out request. You may request deletion of your personal data, or disclosure of the categories and purposes of collection, at any time by emailing support@lenswave.ai. Authorized agents may submit requests on your behalf. We do not discriminate against you for exercising your rights.
When you connect your own model-provider API key ("BYOK"), the key is encrypted at rest using AES-256 via a managed key-management service, under least-privilege access with audit logging. The key is never written to application logs and is never displayed back in plain text. We use it only to route your own generation requests to that provider. If you ask us to revoke it, we delete the stored encrypted key immediately.
To generate video, your prompt material is sent only to the model provider you select for that task, solely to produce your output. Each provider's own data-use terms apply (e.g., Luma may use inputs under its API terms for service improvement); review them before use. We do not share your full project library with them.
We use strictly necessary cookies (login session, security, preferences) and, only after your consent, analytics and preference cookies. You can accept or reject non-essential cookies in the consent banner shown on your first visit, and you can change your choice at any time via our Cookie Policy page. See the Cookie Policy for the full list and purposes.
LensWave is intended for users aged 18 and older. We do not knowingly collect personal data from children. If we learn a child has an account, we will delete the data and close the account.
Data in transit is encrypted with TLS. To exercise any of the rights above (access, deletion, consent withdrawal, DSAR), email support@lenswave.ai or open a ticket from the Help Center; we respond within 45 days (and within GDPR's one-month window). Copyright notices: see our DMCA Policy.
Terms of Service · Refund Policy · DMCA Policy · Cookie Policy · Back to Home
© 2026 LensWave