Privacy Policy

Last updated: August 10, 2026

Welcome to Pexo!

Pexo is an AI video generation platform (the “Platform”) operated by APEX CONTEXT PTE. LTD. and its affiliates (“we”, “our” or “us”). You may access the Platform via our website at https://pexo.ai/ or through integrated AI agent environments (such as Claude Code or ChatGPT), and use our services, including AI-powered video generation, content editing, and related functions (the “Services”).

We respect your privacy and are committed to handling your Personal Data responsibly and in accordance with applicable laws and industry standards. This Pexo Privacy Policy (the "Policy") applies to our processing of Personal Data via our Platform and Services and explains how we handle your Personal Data when you use the Platform and Services.

This Policy is intended to serve as our general privacy notice worldwide, except for Mainland China (which, for the purposes of this Policy, does not include the Hong Kong Special Administrative Region, the Macao Special Administrative Region, or the Taiwan region). Additional region-specific disclosures may apply depending on your location and the Services you access or use; these are set out in relevant addenda. In case of any inconsistency between the main body of this Policy and an applicable regional addendum, the regional addendum will control to the extent of that inconsistency for individuals in the relevant jurisdiction.

Please note that our Services may contain links to third-party websites or services. This Policy does not apply to their privacy practices. Please review their privacy notices separately.

Please read and understand this Policy before using the Platform and Services. By accessing or using them, or by clicking to accept, you acknowledge that we may process your Personal Data in accordance with this Policy. If you do not agree, please do not access or use the Platform or Services.

If you have any questions, please contact us using the details provided in the "How to contact us" section.

This Policy informs you of the following information:

How do we collect and use your Personal Data
How do we entrust the processing of, share, transfer, and publicly disclose your Personal Data
How do we transfer your Personal Data internationally
How do we retain your Personal Data
How do we protect your Personal Data
How do we process minors’ Personal Data
Your rights
How do we update this Policy
How to contact us

1. How do we collect and use your Personal Data

“Personal Data” herein refers to all kinds of information recorded electronically or otherwise, relating to an identified or identifiable natural person, whether on its own or in combination with other information, such as the natural person’s email address, etc. Personal Data also includes sensitive Personal Data specified in applicable laws and regulations. In this Policy, sensitive Personal Data will be highlighted in bold and underlined text for your attention.

Depending on how you use the Services, we may collect the following categories of Personal Data:

1. Scenarios in which you authorize and consent to our collection and use of your Personal Data (except as otherwise provided in the EEA, Switzerland and UK-Specific Addendum)

(a) Account registration and login

When you create an account, we collect your email address, verification code, password, IP address and browser information to create and manage your account, authenticate your access, prevent fraudulent registration and maintain account security. We may also use this information to communicate with you, provide service updates, respond to your requests, and offer customer support.
When you log in, access, and use the Services, we collect information related to your access, including your user ID, login time, login device, logout time, and IP address. This information is used to manage your login status, support service security, detect unauthorized access and ensure the proper operation of the Services.

(b) Upload, generate and share content

When you use the Platform to upload content for AI video generation, you may submit or make available to us videos, images, audio files, text prompts, and any other materials you provide. We will store, process, and use the above data based on the specific functions you use to generate video, image, audio, or other AI outputs. We may also provide the content you upload to our third-party AI model providers to enable the generation services you request. Depending on the context in which the Services are used, content you upload or generate may contain Personal Data relating to you or to other identifiable individuals and may even include sensitive Personal Data under applicable laws (for example, videos or photos containing facial information). Please ensure that you have provided appropriate notice to the relevant data subjects and obtained all necessary authorizations, permissions, or other lawful bases for processing required under applicable law before uploading content that contains such Personal Data.
When you direct us to retrieve content from third-party sources (such as via URLs or links you submit, including but not limited to publicly accessible web pages, cloud storage links, or social media content). Please note that we process such content solely at your request and on your behalf to generate AI outputs. In doing so, we act as a processor on your behalf with respect to any Personal Data contained in such content.
When you upload content or use related features, we may record task ID, upload progress, processing status, task creation time, and failure reason. This information is generated automatically and is used to provide you with the requested services, monitor task execution, and improve the functionality and stability of the Services.

(c) Subscription and payment management

We may collect your subscription details, payment information, transaction history, and order records to manage your account billing, process payments, track credit consumption, and maintain related accounting records.

(d) Marketing communications

We may send you marketing emails about product updates, features, tips, and special offers. You can opt out at any time by clicking the "unsubscribe" link in any such email or contacting us via the channel set out in this Policy. Please note that service-related messages (e.g., billing, security alerts) are not affected by your opt-out.

(e) Technical support and troubleshooting

To ensure service functionality, compatibility, and security, we may collect necessary device information (such as browser type, operating system, IP address, user agent and login timestamps).
When you contact us for technical support, and solely for the purpose of diagnosing and resolving your specific issue, we may access or process relevant information including your processing logs, intermediate results, and generated outputs. We limit such access to what is strictly necessary and treat any personal data contained therein with strict confidentiality.

(f) Function Optimization and Iteration

To improve the quality and functionality of the Services, to the extent permitted by applicable laws and regulations, we may use certain aggregated or de-identified user data (such as usage patterns and feature adoption rates) to maintain, develop, and improve the Services.
We do not use content you upload, or any content retrieved from third-party sources at your direction, to train or improve our foundational AI models, except that we use such data in an aggregated or anonymized form that does not identify any individuals.

(g) Other processing purposes

To the extent applicable, we will process your Personal Data for the following purposes:

To provide, maintain, improve, and enhance our Services;
To understand and analyze how you use our Services, build user profiles in an aggregated form, and develop new products, services, features, and functionality;
To generate anonymized or aggregate data containing only de-identified, non-personal data that we may use and disclose for any lawful purposes;
To find and prevent fraud and abuse, and respond to trust and safety issues that may arise; and
For compliance purposes, including enforcing our Terms of Service or other legal rights.

2. You fully understand that, in the following circumstances, we may collect and use your Personal Data without obtaining your authorization and consent:

Where necessary for the conclusion or performance of a contract to which you are a party;
Where necessary for us to perform our statutory duties or obligations;
Where necessary to respond to a public health emergency, or in emergency circumstances to protect the life, health, property, or safety of natural persons;
Where Personal Data is processed within a reasonable scope for news reporting, public opinion supervision, or other activities carried out in the public interest;
Where your Personal Data that you have disclosed on your own or that has otherwise been lawfully disclosed is processed within a reasonable scope in accordance with applicable rules; or
Other circumstances as provided by laws and administrative regulations.

3. Scenarios in which we obtain your Personal Data from third parties

If we obtain Personal Data that you have authorized a third party to share with us, we will, in accordance with our agreement with such third party and after verifying the lawfulness of the source of the Personal Data, collect and use such Personal Data on the premise that applicable laws and regulations are complied with.

4. Other rules on the use of Personal Data

If we intend to use your Personal Data for a purpose not specified in this Policy, we will notify you and obtain your separate consent, where required by applicable law.

As our Services evolve, we may introduce new features or scenarios involving the collection of Personal Data not covered by this Policy. In such cases, we will inform you and seek your consent through agreements, on-screen notices, or other appropriate means before you first use such feature. You may decline the collection; if you do, you may be unable to use the relevant new feature, but this will not affect your use of existing Services.

2. How do we entrust the processing of, share, transfer, and publicly disclose your Personal Data

2.1 Entrusted processing

Where necessary for the provision of hosting, analytics, customer support, payment processing, email delivery, or other operational services, we may entrust third-party service providers to process Personal Data on our behalf. These service providers include, for example:

AI model providers that process content you upload to deliver the generation services you request;
Observability platform providers that process user inputs, model outputs, tool call results, and related identifiers for system monitoring and service optimization purposes.
Email service providers that process your contact and payment information for service communications.

We will enter into agreements with such entrusted parties requiring them to keep the data confidential and to process the data in accordance with applicable laws, this Policy, and our instructions. We will supervise their Personal Data processing activities.

2.2 Sharing

We do not share your Personal Data with third parties unless:

We have obtained your explicit consent;
It is necessary to provide the Services or protect your account and transaction security (for example, with our affiliates or service providers for analytics, customer support, and payment processing, in which case we share only the minimum data necessary and they may not use it for any other purpose); or
We are required to do so by applicable laws, regulations, or lawful requests from judicial, administrative, or other competent authorities.

2.3 Transfer

We will not transfer your Personal Data to any third party without your consent. In the event of a merger, division, dissolution, bankruptcy, or similar corporate transaction, we will comply with applicable legal procedures, notify you of the recipient's identity and contact information, and require the recipient to continue honoring this Policy. If the recipient intends to process your Personal Data for a different purpose, we will require them to obtain your consent again in accordance with applicable law.

2.4 Public disclosure

We may publicly disclose your Personal Data only:

After obtaining your explicit consent; or
Where required by applicable laws, legal proceedings, litigation, or mandatory requests from competent government authorities.

Unless we have obtained your consent in accordance with law, or as otherwise required by laws and regulations, we will not entrust the processing of, share, transfer, or publicly disclose your Personal Data beyond the circumstances described in this Policy.

3. How do we transfer your Personal Data internationally

For the needs of our global operations, your Personal Data may be transferred to, or accessed from jurisdictions outside the place where you are located. Those jurisdictions may not provide the same level of protection as your home jurisdiction.

When we transfer Personal Data across borders, we will obtain your explicit consent where required by applicable law and take appropriate safeguards in accordance with applicable legal requirements.

4. How do we retain your Personal Data

We retain your Personal Data only for as long as necessary for the purposes described in this Policy, including to provide and improve the Services, comply with legal or regulatory requirements, resolve disputes, and protect our legitimate interests.

When the retention period required by applicable law expires, or when you request deletion, we will delete or anonymize your Personal Data. Due to technical limitations and backup system constraints, we may not be able to immediately delete corresponding information from our backup systems. In such cases, we will securely store such data and restrict any further processing until it can be deleted or anonymized.

5. How do we protect your Personal Data

We attach great importance to the security of your Personal Data and take all reasonable and practicable measures to protect it.

We implement appropriate technical and organizational measures to safeguard your Personal Data against unauthorized access, disclosure, use, modification, damage, or loss. These measures include access controls, role-based permissions, encryption in transit and at rest, logging, monitoring, backups, and vulnerability management.

Please be aware that no internet transmission is completely secure. In the event of a Personal Data security incident, we will take prompt remedial actions in accordance with applicable laws and regulations. We will also inform you without undue delay of the nature of the incident, its possible impact, the measures we have taken or will take, and the steps you can take to mitigate risks, using appropriate means such as email, letter, phone, push notification, or public announcement where individual notification is not practicable. We will also report the incident to the competent regulatory authorities as required.

If you have any questions regarding our protection of your Personal Data, please contact us as set out in this Policy. If you suspect any leakage of your Personal Data, particularly your account information, please contact us immediately so that we can take appropriate measures.

6. How do we process minors' Personal Data

Our Services are strictly not directed to minors, and we do not intentionally collect their Personal Data. If we become aware that we have collected Personal Data from minors without appropriate consent, we will promptly delete such data.

If you become aware that we may have collected a minor’s Personal Data without appropriate consent, please contact us using the means set out in this Policy, and we will take steps to delete such information promptly.

7. Your rights

We attach great importance to your concerns regarding Personal Data and will do our best to protect your rights in relation to your Personal Data, so that you have sufficient ability to safeguard your privacy and security. Your rights include the following:

7.1 Review, access, and correct your Personal Data

To the extent required by applicable law, you have the right to access, review, and correct your Personal Data through our Platform at any time. If you believe any Personal Data we hold about you is inaccurate or needs updating, you may request that we correct it. We rely on you to keep your Personal Data true, accurate, and up to date.

If you experience any difficulty exercising these rights, please contact us using the means set out in this Policy. We will respond to your request after verifying your identity, in accordance with applicable law.

7.2 Copy and obtain a copy of your Personal Data

You have the right to obtain a copy of your Personal Data. If you wish to exercise this right, please contact us using the means set out in this Policy. Subject to applicable law and technical feasibility, we will provide a copy of your Personal Data in response to your request.

7.3 Delete your Personal Data

In the following circumstances, we will proactively delete your Personal Data. If we have not done so, you have the right to request that we delete it:

Where the purpose of processing has been achieved, cannot be achieved, or is no longer necessary for achieving the purpose of processing;
Where we cease to provide the products or services of this Platform, or the retention period has expired;
Where you withdraw your consent;
Where we process Personal Data in violation of laws, administrative regulations, or our agreement with you; or
Other circumstances provided by laws or administrative regulations.

If we decide to respond to your deletion request, we will notify the entities that have received your Personal Data from us and require them to delete it, unless otherwise required or permitted by law.

After you request deletion of your information, we may not be able to immediately remove it from our backup systems due to technical limitations. In such cases, we will securely store the data and restrict any further processing until it can be deleted or anonymized.

7.4 Cancel your account

You may cancel your account through the Platform or by contacting us using the means set out in this Policy. After cancellation, we will cease providing you with the Services and will delete or anonymize your Personal Data in accordance with applicable law.

Account cancellation does not affect our right to retain data as necessary to comply with legal obligations, resolve disputes, or enforce our agreements, nor does it exempt you from any liabilities incurred prior to cancellation.

7.5 Change the scope of your authorization and consent, or withdraw your authorization

Where permitted under applicable law, you may withdraw your consent or adjust your authorization for our collection of Personal Data by deleting information, disabling device permissions, adjusting Platform settings, or canceling your account.

Please note that certain features of the Service require basic Personal Data to function. If you withdraw your consent, we will no longer be able to provide you with those features, and we will cease processing the relevant Personal Data. However, such withdrawal will not affect the lawfulness of any processing carried out prior to your withdrawal.

7.6 Response to your requests

If you are unable to exercise your rights through the means described in this Policy, or if you believe we have violated applicable laws or this Policy in handling your Personal Data, please contact us using the means set out in this Policy. We will respond to your request within a reasonable timeframe after verifying your identity.

We do not charge a fee for legitimate requests. However, in accordance with applicable law, we may charge a reasonable fee or refuse to act on requests that are manifestly unfounded, excessive, repetitive, or technically impracticable.

In some circumstances, in accordance with applicable legal requirements, we may be unable to respond to your request. For example:

Where the request is related to our performance of obligations required by laws and regulations;
Where the request is related to national security or national defense security;
Where the request is related to criminal investigation, prosecution, trial, or enforcement of judgments;
Where there is sufficient evidence showing that you have subjective malice or are abusing your rights; or
Where responding to your request would cause serious harm to the lawful rights and interests of you or other individuals or organizations.

8. How do we update this Policy

We may update this Policy from time to time to better serve you and reflect our evolving business practices. We will post the updated version on the Platform and notify you of material changes before they take effect, in accordance with applicable law. We encourage you to periodically review this Policy to stay informed of how we protect your Personal Data.

For material changes, we will provide more prominent notice, such as displaying special notices on browsing pages, to explain the specific changes to this Policy.

Material changes referred to in this Policy include, but are not limited to:

Significant changes to our service model, such as the purposes for processing Personal Data, the types of Personal Data processed, or the manner in which Personal Data is used;
Significant changes to our ownership structure or organizational structure, such as changes in ownership arising from business adjustments, bankruptcy, or mergers and acquisitions;
Changes to the main recipients of Personal Data sharing, transfer, or public disclosure;
Significant changes to your rights relating to participation in Personal Data processing and the methods for exercising those rights;
Changes to the department responsible for Personal Data security, contact details, or complaint channels; and
Where a data protection impact assessment report indicates a high risk.

To help ensure timely receipt of notices, we recommend that you keep your contact details up to date with us. Your continued use of the Platform after the updated Policy takes effect constitutes your acceptance of the revised terms.

9. How to contact us

If you have any questions or concerns about this Policy or our handling of your Personal Data, please contact us through the feedback channel available on the Platform or at support@pexo.ai. We will review your request and respond in accordance with applicable law.

Annex: EEA, Switzerland and UK-Specific Addendum

This Addendum supplements the Policy and applies only to individuals in the European Economic Area (EEA), Switzerland, and the UK to the extent that Regulation (EU) 2016/679 (the “GDPR”), UK GDPR and Swiss Federal Act on Data Protection, and other applicable data protection laws (together, the “Applicable Laws”) apply to our processing of their Personal Data. This Addendum prevails over any conflicting information between this Addendum and the Policy.

1. Controller Information

For individuals in the EEA, Switzerland, and the UK, the controller of Personal Data and the primary contact for privacy matters is APEX CONTEXT PTE. LTD., which can be contacted as described in the main body of this Policy.

2. Categories of Personal Data

The categories of Personal Data we process are described in Section 1 above. We collect such data directly from you when you use the Services, automatically through your interaction with the Platform (including via cookies and similar technologies), and, where applicable, from third-party sources at your direction (such as content accessed via URLs or links you submit).

Where we require certain Personal Data to provide the Services or to comply with legal obligations, we will indicate this at the point of collection. If you choose not to provide such data, you may be unable to access the relevant features of the Services.

3. Purposes of Processing and Legal Bases

We process your Personal Data for the purposes described in Section 1 of the main body of this Policy. Depending on the circumstances, we may rely on one or more of the following legal bases under the Applicable Laws:

Performance of a contract, for example, to create and manage your account, provide the Services, process uploads, or respond to service requests.
Legitimate interests, for example, to maintain Service security, prevent misuse, troubleshoot issues, improve reliability and performance (including training and improving AI models), conduct internal analytics, or administer our business, provided that such interests are not overridden by your rights and interests.
Compliance with legal obligations, for example, to maintain records, comply with tax or accounting rules, respond to lawful requests from law enforcement or courts, or meet legal and regulatory requirements.
Consent, where required, for example, for certain non-essential cookies, certain marketing communications, or other optional processing activities.

We do not collect special categories of Personal Data. If such Personal Data is provided to us, we will process it only where and as permitted under Applicable Laws.

We disclose your Personal Data to third parties, including service providers, as described in Section 2 of the main body of this Policy.

4. International Transfers

Where Personal Data subject to the Applicable Laws is transferred outside the EEA, Switzerland, and the UK to a country not recognized as providing an adequate level of protection by the European Commission, the UK Parliament, or the Swiss Federal Council, we will implement appropriate safeguards in accordance with Applicable Laws, such as the European Commission Standard Contractual Clauses, or rely on binding corporate rules or applicable legal derogations where necessary. You may contact us to obtain a copy of the safeguards we use for such transfers.

5. Data Retention and Security

The security and retention principles described in the main body of this Policy also apply to individuals in the EEA, Switzerland, and the UK. We retain Personal Data only for as long as necessary for the relevant purposes, taking into account legal requirements, contractual obligations, dispute resolution needs, security requirements, and operational necessity.

6. Your Rights

Subject to Applicable Laws and certain limitations, you may have the right to:

Request access to your Personal Data;
Request rectification of inaccurate or incomplete Personal Data;
Request erasure of your Personal Data;
Request restriction of processing;
Object to processing based on legitimate interests;
Request data portability;
Where processing is based on consent, withdraw your consent at any time without affecting the lawfulness of the processing before you withdrew your consent; and
Lodge a complaint with the competent supervisory authority, including in your country of residence, place of work, or where an incident took place.

7. How to Exercise Your Rights

You may exercise your rights by contacting us using the contact details in this Policy or through any privacy request channel we make available. We may need to verify your identity before responding. Where an exemption applies, we may be unable to fulfil part or all of a request, but we will explain our decision where required by law.

You also have the right to lodge a complaint with the competent supervisory authority in your jurisdiction, if you consider that our processing of your Personal Data infringes applicable data protection laws.