Skip to content

Privacy Policy

Last updated: 8 October 2026

This Privacy Policy explains what information POPCORN collects when you use popcornstudio.ai, how we use and share it, and the choices you have. By using POPCORN, you agree to the practices described here.

1. Who we are

POPCORN ("POPCORN", "we", or "us") operates the AI advertising studio at popcornstudio.ai, a service of POPCORN FILMS FZ-LLC. This Privacy Policy applies to that website and app. For any question about your data, email support@popcornstudio.ai.

2. Information we collect

Information you provide

  • Account information — your name, email address, and a securely hashed password when you sign up.
  • Social Trends creator details — your private legal name, country of residence, phone number including its country code, and confirmation that you meet the age requirement. The creator phone number is encrypted and kept separate from your public profile; it is not published or used for marketing consent. A date of birth is collected only when the applicable setup requirements need it.
  • Content you submit — product links, product photos and other images you upload, briefs, scripts, prompts, and any other material you give us to generate an ad.
  • Communications — messages and details you send when you contact support.

Information created as you use POPCORN

  • Generated content — the images, videos, voiceovers, and other media POPCORN produces from your inputs.
  • Usage and device data — log data, IP address, browser and device type, approximate location, pages viewed, and actions taken, collected automatically to run and secure the service.

Payment information

Payments are processed by Stripe. We do not receive or store your full card number — Stripe handles card details directly. We receive limited billing information such as transaction status, your subscription state, and the card brand and last four digits. In Egypt, payments in Egyptian pounds are processed by EasyKash, which receives the name, email address and mobile number you enter at checkout and handles your payment details on its own page.

3. How we use your information

We use the information above to:

  • provide POPCORN — generate your videos, run your projects, and manage your Kernel balance;
  • process payments, subscriptions, and Kernel top-ups;
  • create, secure, and authenticate your account;
  • send you transactional messages such as email verification, receipts, and service notices;
  • provide support, fix problems, and improve and develop the service;
  • detect, prevent, and address fraud, abuse, and security risks; and
  • comply with our legal obligations.

4. AI processing and our service providers

To generate your ads, POPCORN sends the inputs you provide — such as product information, images, and briefs — to third-party AI and infrastructure providers that process this data on our behalf, only to deliver their service to us. Google Analytics 4, Google Ads, PostHog and the Meta Pixel, at the end of this list, are different: they are analytics and advertising-measurement tools that receive usage data from your browser, and only after analytics cookies are accepted, including by the cookie banner's 5-second auto-accept (see Cookies and sessions below):

  • Vercel — Application hosting, content delivery, and media storage (Vercel Blob).
  • Neon — Managed PostgreSQL database.
  • GitHub — Encrypted nightly backups of our database, kept for 14 days.
  • Stripe — Payment processing and subscription billing.
  • EasyKash — Payment processing in Egyptian pounds for visitors in Egypt (prepaid plans, Kernel top-ups and Social Trends purchases where enabled), including the name, email address and mobile number entered at checkout.
  • Resend — Transactional email delivery.
  • Google (Sign in with Google) — Account sign-in, when you choose to continue with Google.
  • Google (Google Fonts) — Delivering the website's fonts, which your browser loads from Google.
  • Anthropic (Claude) — Analysis of your briefs, links, prompts and uploaded images, and creative direction.
  • OpenAI — AI image generation, script writing, creative direction, and text analysis, including as a backup when Claude is unavailable.
  • Google (Gemini) — AI image generation, AI video with sound (Gemini Omni), and text analysis.
  • BytePlus (ByteDance) — AI video and image generation (Seedance, Seedream), a private library of the reference images your renders use, and face-verification checks.
  • Kling (Kuaishou) — AI video generation and motion transfer.
  • MiniMax — AI video generation and lip sync (MiniMax H3).
  • Black Forest Labs — AI video generation (FLUX 3).
  • Alibaba Cloud (Model Studio) — AI video generation (Wan 3.0).
  • ElevenLabs — AI voices and text-to-speech.
  • Sync (sync.so) — Lip-sync video processing.
  • Firecrawl — Retrieving public product-page data from links you provide, and reading text from scanned PDFs you upload.
  • Google (Google Analytics 4) — Website and product analytics; loads only after analytics cookies are accepted, including by the cookie banner's 5-second auto-accept.
  • Google (Google Ads) — Advertising measurement, counting the plan purchases that come from our Google ads; loads only after analytics cookies are accepted, including by the cookie banner's 5-second auto-accept.
  • PostHog — Product analytics and session replay, with every typed input masked; loads only after analytics cookies are accepted, including by the cookie banner's 5-second auto-accept.
  • Meta (Meta Pixel) — Advertising measurement; loads only after analytics cookies are accepted, including by the cookie banner's 5-second auto-accept.

We do not sell your personal information. This list may change as the product evolves, and we will keep it current on this page.

5. Cookies and sessions

POPCORN uses strictly necessary cookies to keep you signed in and to keep the service secure. We do not use cookies to sell your data. Analytics and advertising-measurement cookies are used only after they are accepted. Until you choose, a banner asks you to accept or decline them; if you don't choose within 5 seconds, the banner accepts them. You can change your choice at any time with Cookie settings below.

The cookies and browser storage POPCORN sets itself:

  • __Secure-authjs.session-token — Keeps you signed in; strictly necessary, and it ends when you sign out or after 60 days without a visit.
  • __Host-authjs.csrf-token and __Secure-authjs.callback-url — Protect sign-in against forged requests and remember which page to return you to; strictly necessary, and they end when you close your browser.
  • __Secure-authjs.pkce.code_verifier and __Secure-authjs.state — Security checks used only while you sign in with Google; strictly necessary, and they last 15 minutes at most.
  • __Host-social-trends-guest — Strictly necessary, secure, HTTP-only cookie for a verified guest checkout on one Social Trends product version; lasts up to 1 hour and does not sign you into a POPCORN account.
  • __Host-social-trends-guest-order — Strictly necessary, secure, HTTP-only cookie for access to one private Social Trends order; lasts up to 1 hour.
  • __Host-social-trends-guest-browser — Strictly necessary, secure, HTTP-only browser binding that protects Social Trends guest verification and private order access; lasts 24 hours.
  • popcorn_signup — A first-party cookie set only when a new account is created; it lasts 10 minutes, holds only the sign-up method (such as Google or email) and never your name, email address or account ID, and is deleted the first time a page reads it; the sign-up is reported to the analytics tools above only if analytics cookies are accepted.
  • popcorn-sidebar — Remembers whether the side menu is collapsed; kept for 1 year.
  • _ga, _ga_*, _gcl_*, _gac_*, _fbp, _fbc and ph_* — Cookies and browser storage that Google Analytics 4, Google Ads, the Meta Pixel and PostHog set on this site only after analytics cookies are accepted; we remove them if you later decline, but not the cookies Google and Meta may keep on their own domains, which you can manage in Google's and Meta's ad settings.
  • popcorn:analytics-consent — Local storage that remembers your cookie choice, so the banner does not ask again.
  • popcorn:lang and popcorn:theme — Local storage that remembers your language and whether you chose light or dark mode.
  • corn-draft:*, popcorn:corndraft:*, popcorn:studio:anon-draft, corn-lip:voice-line and popcorn.careers.apply.* — Your unfinished prompts, scripts, studio settings and job applications, kept in your browser's local or session storage so a refresh does not lose them.
  • popcorn:studio:*, popcorn:studio-billing-return, popcorn:in-flight:*, popcorn:corn:active-folder and popcorn:intent — The render in progress, the current project, the studio you opened, a purchase you are returning from and the panel layout, so the studio can pick up where you left off.
  • easykash:checkout:v1:* and easykash:order:* — Session storage used only while you pay in Egypt through EasyKash, so a refresh or a second click cannot start the same payment twice; it ends when you close the tab.
  • popcorn:pending-purchase, popcorn:ads-subscribe-lookup, popcorn:purchases-reported, popcorn:analytics-identified, popcorn:render-events and popcorn:lp-section-view:* — Bookkeeping in session and local storage that makes sure a purchase, a sign-in, a render or a homepage section view is reported to the analytics tools above at most once; nothing is reported unless analytics cookies are accepted.
  • Other popcorn:, yalla: and contest keys — Small technical markers and display choices in local or session storage, such as when you last signed in on this device, whether notifications are on, which menu sections are open, list or grid view, and your Yalla chat preferences.

6. How we share information

We share information only: with the service providers listed above; when required to comply with the law or a valid legal request; to protect the rights, safety, and security of POPCORN, our users, and the public; and in connection with a merger, acquisition, or sale of assets, in which case we will notify you. We do not sell your personal data.

7. Data retention

We keep your account information and content for as long as your account is active and as needed to provide the service. After you close your account, we delete or anonymise your personal data within a reasonable period, except where we must retain certain records to meet legal, accounting, or security obligations. Generated media may be removed when your account is closed.

8. Security

We use technical and organisational measures to protect your information, including encrypted connections, hashed passwords, and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

9. Your rights and choices

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, to object to or restrict certain processing, and to withdraw consent. You can update most account details inside the app, and you can make other requests by emailing support@popcornstudio.ai. You may also unsubscribe from non-essential emails at any time.

10. International data transfers

POPCORN operates globally, and your information may be processed in countries other than your own, including by the providers listed above. Where required, we rely on appropriate safeguards for such transfers.

11. Children

POPCORN is intended for adults and is not directed at anyone under 18. We do not knowingly collect personal data from children. If you believe a child has provided us personal data, contact us and we will delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above, and for material changes we will provide a more prominent notice.

13. Contact us

Questions about this policy or your personal data? Email support@popcornstudio.ai.