Legal

Privacy Policy

Last updated: May 9, 2026 · Applies to the AIVideoAuditor Chrome Extension and aivideoauditor.com

1. Single Purpose

AIVideoAuditor (“AVA”, “the Extension”) exists for one purpose: to help you document technical failures in AI-generated videos on app.runwayml.com so you can request credit refunds from the platform. The Extension does not monitor general browsing, track user behaviour across sites, or serve any advertising function.

2. Data We Collect — and Why

AVA collects the minimum data required to build a refund documentation report. All collection is triggered by explicit user action or scoped strictly to the Runway domain.

Generation Metadata

When you use Runway’s generation interface, AVA passively reads the Generation ID, Share / Asset ID, and timestamp from Runway’s own API responses (URLs matching app.runwayml.com/api/*). This data is needed to identify your specific generation in a refund request. No data is sent to AVA servers at this stage.

Visual Evidence — Screen Capture

AVA uses Chrome’s chrome.tabs.captureVisibleTab API only when you click “Mark Failure” on a specific video frame. The screenshot is immediately cropped to the video element bounds and stored in memory for the current session. It is included in your audit report only if you choose to generate one. The screenshot is never uploaded to our servers automatically.

Prompts

If your prompt text is visible in Runway’s interface at the time of marking a failure, AVA may read and include it in your audit report for context. It is stored locally in chrome.storage.local only.

Authentication Token (Pro users)

Pro users authenticate via the AIVideoAuditor website. A session token is stored locally using chrome.storage.local with AES-GCM encryption. This token is used solely to verify Pro status against our API — it is never shared with third parties.

3. What We Do Not Collect

The following data is never collected, stored, or transmitted by AVA:

  • ✗Email addresses, passwords, or account credentials
  • ✗Payment information or financial data
  • ✗Browsing history outside of app.runwayml.com
  • ✗Cookies or session data from any website other than our own
  • ✗Biometric data, location, or device identifiers
  • ✗Content from tabs other than the active Runway tab when Mark Failure is clicked
  • ✗Keystrokes or clipboard contents

4. Principle of Least Privilege

AVA requests only the permissions required for its stated function:

Host permission: app.runwayml.com

Required to inject the panel UI and intercept generation metadata. The Extension does not activate on, read from, or communicate with any other domain.

tabs / activeTab

Required solely to call captureVisibleTab when you click Mark Failure. The Extension does not query tab URLs, titles, or content passively.

scripting

Required to inject the content script into app.runwayml.com pages. Scripts run only on the declared Runway URL pattern.

storage

Required to persist your audit reports and (for Pro users) the encrypted session token between browser sessions.

clipboardWrite

Required to copy the generated refund letter to your clipboard when you click "Copy Refund Letter". No clipboard data is read.

The Extension does not listen to network traffic, tabs, or activity outside of app.runwayml.com. No background polling or idle monitoring occurs.

5. Data Storage & Retention

All data collected by AVA is stored in chrome.storage.local on your device. It does not leave your browser unless you take one of the following explicit actions:

  • →Download PDF Report — generates a PDF file saved to your local Downloads folder. No server upload.
  • →Copy Refund Letter — copies text to your clipboard. No server upload.
  • →Pro cloud sync (if enabled) — audit metadata (not screenshots) is synced to your Pro account. You can delete this data at any time from your dashboard.

Local storage is cleared when you uninstall the Extension or manually clear extension data from Chrome settings.

6. Third-Party Services

AVA uses the following third-party services in limited, scoped ways:

Supabase

Authentication and Pro account data storage. Only accessed when you log in to a Pro account. Data is processed under Supabase's privacy policy.

Vercel

Hosts the AIVideoAuditor website and the Pro-status verification API. Standard server access logs apply.

No advertising networks, analytics providers, or data brokers receive any data from AVA.

7. Chrome Web Store Certifications

In accordance with Google’s User Data Policy, AIVideoAuditor certifies that:

✓

We do not sell user data

User data collected by AVA is never sold, rented, or traded to any third party for any purpose.

✓

We do not use data for unrelated purposes

All data processed by AVA is used exclusively to generate refund documentation for the user's own Runway ML generations. It is not used for advertising, profiling, or any purpose unrelated to the Extension's stated function.

✓

We do not use data to determine creditworthiness

AVA does not use any collected data to assess, determine, or influence creditworthiness or financial standing.

8. Your Rights

You may at any time:

  • ·Delete all locally stored data by uninstalling the Extension or clearing its storage in chrome://extensions
  • ·Request deletion of your Pro account data by emailing us at the address below
  • ·Export your audit history from the dashboard before deletion

9. Children’s Privacy

AVA is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has provided us with personal data, contact us and we will delete it promptly.

10. Changes to This Policy

We may update this policy as the Extension evolves. Material changes will be noted with an updated “Last updated” date at the top of this page. Continued use of the Extension after changes constitutes acceptance of the revised policy.

11. Contact

Questions about this policy or data deletion requests: joejoego23@gmail.com