Legal
Privacy Policy
Last updated: July 30, 2026
VMD (VideoMarkdown) is founded and operated by Karandana Wariyapola Arachchige Ravidu Sohan Dananjaya (also referred to as KWA Ravidu Sohan Dananjaya), an individual based in Sri Lanka. This policy explains what data we collect, why, who else sees it, and what control you have over it. If anything here is unclear, email sohan@videomarkdown.com and we'll explain plainly.
1. What we collect
Account information. When you sign up, we collect your email address and password (handled securely via Supabase, our authentication provider — we never see or store your raw password).
Your content. The .vmd scene files, scripts, and animations you create within VMD. This is your content — see our Terms of Service for ownership.
Uploaded images. Images you upload for use in your scenes.
AI-assist data. If you use the AI generation feature, we send your prompt message and your current scene content to OpenAI (specifically the gpt-4o-mini model) to generate a response. We store the prompt text and token counts associated with each generation for the purpose of enforcing your plan's usage limits.
Usage and quota data. We track how many renders and AI generations you've used against your plan's monthly allowance, so we can enforce Free/Starter/Pro limits correctly.
Payment information. We do not collect or store your card details. Payments are handled entirely by Dodo Payments, acting as Merchant of Record — your card data goes directly to them, never to VMD's own servers.
What we do not collect: We do not currently use any analytics or tracking service — no Google Analytics, no Mixpanel, no PostHog, no advertising pixels. We simply don't have any of that wired into the site today.
2. Who we share data with
We only share data with the third-party services that are necessary to run VMD, and only the specific data each one needs to do its job:
| Service | What they receive | Why |
|---|---|---|
| Supabase | Your email, password (hashed), and account/scene data | Authentication and data storage |
| Dodo Payments | Your name, email, and payment details (handled entirely on their end) | Payment processing, as Merchant of Record |
| OpenAI | Your AI prompt text and current scene content, only when you use the AI-assist feature | Generating AI-assisted scene content |
| Pexels | Your search query, only when you search for stock images in the IDE | Returning relevant stock images |
We do not sell your data to anyone, and we do not share it with any party beyond what's listed above, except where required by law.
3. How long we keep your data
- Uploaded images: kept for 30 days on the Free plan, and indefinitely for as long as you maintain a paid plan (Starter credits or active Pro subscription).
- Account and scene data: kept for as long as your account is active.
- Payment/invoice records: retained by Dodo Payments as required for tax and financial compliance, even after you close your VMD account — this is outside our control, as Dodo is legally required to retain transaction records.
4. Your rights and account deletion
You can request deletion of your account and associated data (scenes, uploaded images, usage history) at any time by emailing sohan@videomarkdown.com. Since VMD is solo-operated, account deletion is currently handled manually rather than through an automated "delete my account" button — we'll confirm your request and complete deletion within 14 days.
One exception: invoice and transaction records held by Dodo Payments as our payment processor are retained by them independently, as required by tax law, and are not something we can delete on your behalf.
If you're located somewhere with specific data-protection rights (e.g., the EU/EEA under GDPR), you also have the right to request a copy of your data, or to correct inaccurate data — email us and we'll handle it directly, given our size, rather than through an automated self-serve system.
5. Security
We rely on our infrastructure providers' security practices — Supabase for authentication and data storage, and Dodo Payments (a PCI-DSS compliant processor) for anything payment-related. No card data ever touches VMD's own servers. That said, no system is perfectly secure, and we can't guarantee absolute security of your data.
6. Children's privacy
VMD is not directed at children, and we do not knowingly collect data from anyone under 18. If you believe a minor has provided us data, contact us and we'll delete it.
7. Changes to this policy
We may update this policy as VMD's features evolve — for example, if we add new third-party integrations or analytics tools in the future, we'll update this page and, for significant changes, notify active users by email.
8. Contact
Questions or requests regarding your data: sohan@videomarkdown.com