Privacy Policy
Last updated: November 1, 2026
Privacy Policy - KAMORA MEDIA
1. Who we are
Dunaportal 2010 Ltd., a company registered in Hungary (company registration number 01-09-954963) that operates the Kamora Media brand ("Kamora", "we"), provides AI-generated marketing videos for businesses through kamoramedia.com (the "Services"). This policy explains what personal information we collect, how we use it, who we share it with, and your choices. Contact: support@kamoramedia.com; 1066 Budapest, Dessewffy utca 49., Hungary.
Our two roles. For accounting, billing, website and marketing data, Kamora decides how data is used (a "business" under US state laws, a "controller" under GDPR). For personal information about other people inside the materials our clients upload (for example photos of a client's employees or customers), we process it on the client's behalf and instructions (a "service provider" or "processor"). Clients are responsible for having the right to share that information with us.
Which laws apply. Because Kamora is established in Hungary, the EU General Data Protection Regulation (GDPR) and Hungarian data protection law (Act CXII of 2011) apply to all our processing, wherever our clients are located. US federal and state privacy laws also apply to information about US residents. Our supervisory authority is the Hungarian National Authority for Data Protection and Freedom of Information (NAIH).
We do not sell your personal information. We do not use your uploaded content to train third-party foundation AI models.
2. Information we collect
| Category | Examples | Source |
|---|---|---|
| Account and contact | Name, email, password (hashed), Google sign-in profile, phone number, job title | You |
| Business information | Business name, website and domain, service area, services, offers, prices, brand and communication guidelines | You; your public website |
| Uploaded materials | Logos, photos, videos, text, testimonials, and images or recordings of people they contain | You |
| Likeness and biometric data (Digital Presenter plan only) | Face images, video and voice samples; face geometry or voiceprints derived from them | You, with the person's written consent |
| Payment | Billing name and address, last four digits and type of card, transaction history (full card numbers are handled only by Stripe) | You; Stripe |
| Communications | Support messages, feedback, survey answers, video approvals and edit requests | You |
| Usage and device | IP address, browser, device, pages viewed, clicks, session recordings, approximate location, referring ad | Cookies and similar technologies |
| Public and third-party information | Public information about your business and your industry (website, Google Business Profile, public social pages, public reviews); public competitor content analyzed at business level | Public sources |
We do not knowingly collect sensitive data beyond the Digital Presenter data described above. Please do not upload government IDs, health information, or financial account details.
3. How we use information
- Provide the Services: create your account, research your business and market, generate scripts and videos, deliver them, and run your client portal.
- AI processing: sending relevant materials and prompts to our AI and video-generation providers to create your Output.
- Improve the Services: analyze aggregated and de-identified usage and performance patterns (for example, which video formats work in a trade). Aggregated insights never reveal one client's materials to another.
- Billing: process payments, renewals, refunds and the annual plan adjustment.
- Communicate: send service emails (deliveries, receipts, renewal reminders, policy changes) and, with opt-out, marketing emails; and, only with your separate consent, text or WhatsApp messages.
- Safety and legal: verify rights and consent, detect fraud and misuse, enforce our Terms, and meet legal obligations.
- Advertising our own business: measure our ads and, where permitted, show you our ads on other sites. You can opt out (Section 8).
We do not make decisions producing legal or similarly significant effects about you based solely on automated processing.
4. AI and automated processing
Our Services use artificial intelligence to analyze your business and generate content. Your materials are processed by our own systems and by third-party AI providers acting as our service providers, under contracts limiting their use of your data to provide services to us. We do not train or fine-tune any AI models on identifiable client content, and we choose providers whose terms limit their use of our content to provide their services. AI output can be inaccurate; a human at your business should review every video before using it.
5. Likeness and biometric information
This section applies only if you or a person you authorize creates a Digital Presenter.
- Consent first. We collect face, voice and derived biometric identifiers only after the depicted person gives separate written consent in our app, which explains the purpose and retention period. Under the GDPR this is explicit consent to processing special-category data, and it can be withdrawn at any time.
- Purpose. Solely to create and operate that person's Digital Presenter for the client's videos. Never to identify or verify people, and never for any other client.
- No sale or profit. We do not sell, lease, trade or otherwise profit from biometric data, and disclose it only to the service provider that builds the Digital Presenter, under contract, or as required by law.
- Retention and destruction. We permanently destroy biometric data when the purpose is fulfilled, when consent is withdrawn, or within one (1) year after the client's last use of the Digital Presenter, whichever comes first, and never later than three years after the person's last interaction with us.
- Security. We protect it with at least the same care as our other most sensitive data.
6. How we share information
| Recipient | Why | Examples |
|---|---|---|
| Hosting and app platform | Run the Services | Base44 and its cloud hosting providers |
| AI and video-generation providers | Research, scripting, video, voice and presenter creation | Anthropic (Claude), Higgsfield, other 3rd party providers from time to time |
| Payment processor | Charges, refunds, fraud prevention | Stripe |
| Email and messaging | Service and marketing emails; texts and WhatsApp with your consent | Base44 (built-in email service); SMS and WhatsApp messaging providers |
| Analytics and advertising partners | Site analytics, session recording, measuring our ads | Microsoft Clarity, Google Analytics, Meta Pixel, TikTok Pixel |
| Other service providers | Support, security, storage and business tools | Added as needed, under contract |
| Professional advisers and authorities | Legal, accounting, compliance; responding to lawful requests | Lawyers, accountants, auditors, courts |
| A buyer or successor | Merger, acquisition, financing or sale of assets | — |
| Anyone you direct | When you ask us to share or connect a third-party account | — |
We may add or change service providers. Each act under a written contract, including GDPR data processing terms, and may use your information only to provide services to us. A current list is available on request at support@kamoramedia.com.
If we use advertising pixels, some US state laws treat sharing data with ad partners for cross-context behavioral advertising as "sharing" or "targeted advertising". You can opt out as described in Section 8.
7. Cookies and tracking
We use cookies and similar technologies that are necessary for the site, plus optional analytics and advertising cookies. You can manage optional cookies through our cookie banner and the Cookie Settings link at the bottom of every page, and through your browser settings. We honor Global Privacy Control (GPC) browser signals as an opt-out of sale, sharing and targeted advertising.
8. Your privacy rights
United States. Depending on your state of residence (including California, Colorado, Connecticut, Virginia, Utah, Texas, Oregon and other states with comprehensive privacy laws), you may have the right to:
- know and access the personal information we hold about you;
- correct inaccurate information;
- delete your information;
- receive a portable copy;
- opt out of sale, sharing, targeted advertising and profiling;
- limit use of sensitive personal information; and
- appeal our decision on your request.
Submit requests to support@kamoramedia.com. We will verify your identity and respond within the time the law requires (generally 45 days). Authorized agents may submit requests with proof of authority. We will not discriminate against you for exercising these rights. If we deny your request, you may appeal by replying to our decision; if your appeal is denied, you may contact your state attorney general.
California notice at collection. The categories collected, sources and purposes are listed in Sections 2–3; we have not sold personal information in the past 12 months; retention periods are in Section 10.
GDPR rights (all users, because Kamora is established in Hungary). Our legal bases are: performance of a contract (providing the Services and billing); legitimate interests (improving and securing the Services, business research from public sources, marketing to business contacts, which you can object to); consent (optional cookies, Digital Presenter data, and marketing where required); and legal obligation. You have rights of access, rectification, erasure, restriction, portability, objection, and to withdraw consent, and you may complain to your local data protection authority. Our supervisory authority is the NAIH (naih.hu).
9. International transfers
We are based in Hungary. Some of our providers process data in the United States and other countries outside the EEA. We protect these transfers with the European Commission's Standard Contractual Clauses, or the EU-US Data Privacy Framework where the recipient is certified, plus supplementary measures where needed. You can request a copy of the relevant safeguards at support@kamoramedia.com.
10. How long we keep information
| Data | Retention |
|---|---|
| Accounts and business information | Life of the account, then 180 days after cancellation |
| Uploaded materials and generated videos | Life of the account, then deleted 90 days after cancellation (copies on request until then) |
| Free preview data (no subscription) | 12 months after the preview, unless you ask us to delete it sooner |
| Biometric data | As in Section 5 |
| Billing and tax records | As required by law, generally 7 years |
| Marketing preferences and unsubscribes | As long as needed to honor them |
| Backups | Overwritten on a rolling basis within 35 days |
11. Security
We use administrative, technical and physical safeguards such as encryption in transit, access controls and vendor due diligence. No system is perfectly secure; please use a strong, unique password.
12. Children
The Services are for businesses and are not directed to anyone under 18. We do not knowingly collect personal information from children under 13 (or 16 where applicable). Do not upload content depicting minors unless you have their parent or guardian's written consent and a lawful basis. Contact us to delete any data collected in error.
13. Marketing communications
You can unsubscribe from marketing emails at any time via the link in each email; we will still send essential service messages. We send marketing or automated text and WhatsApp messages only if you opted in with a separate checkbox; that consent is not a condition of purchase. Reply STOP to opt out of texts, or write to support@kamoramedia.com. We keep records of your consent. We do not share mobile phone numbers or text-messaging consent with third parties for their marketing purposes.
14. Changes and contact
We will post changes here with a new "Last updated" date, and notify you by email for material changes. Questions or requests: support@kamoramedia.com; Dunaportal 2010 Ltd., 1066 Budapest, Dessewffy utca 49., Hungary.
Last updated: 1st November 2026