# Privacy Policy — HK AI Studio

**Last updated:** July 7, 2026

HK AI Studio ("the Extension," "we," "us") is a browser extension that helps HeyGen content creators detect and download rendered videos, build scenes, generate captions, and lay out avatars. This policy comprehensively describes what data we collect, how we use it, how we store and secure it, who we share it with, and what choices you have.

## 1. What Data We Collect

| Data Type | What It Is | Why We Collect It |
|---|---|---|
| Device ID | A randomly generated identifier (not derived from any hardware, browser fingerprint, or personal information) created the first time you install the Extension. | To bind a paid activation key to a single device and enforce our one-device-per-license limit. |
| Activation key | The license key you enter to unlock the Extension. | To verify your subscription is active and has not expired or been revoked. |
| Media URLs on heygen.com / heygen.ai | The web address of a rendered video detected on a HeyGen page you have open. | To populate the "Downloads" list inside the Extension's popup, so you can download your own rendered video. |
| Script, scene, caption, and timeline text you type into the Extension | The content you create using the Extension's Script, Scene, and Caption tools. | To let you build, edit, and export your own content. This data is never transmitted anywhere — see Section 3. |
| API keys you optionally provide (OpenAI, Stability AI, HeyGen/D-ID/Synthesia) | Third-party API credentials you choose to enter if you enable AI image or avatar generation. | Sent directly to the provider you selected, to generate the content you requested. See Section 4. |

We do **not** collect: your name, email address, IP address, browsing history outside heygen.com/heygen.ai, financial or payment information, health information, or any content from websites unrelated to the Extension's function.

## 2. How We Collect Data

- Device ID and activation key are generated/entered locally and stored using `chrome.storage.local`.
- Media URLs are detected only on `heygen.com` and `heygen.ai` domains via the `webRequest` and `scripting` permissions, scoped exclusively to those domains.
- Script/scene/caption content is entered directly by you into the Extension's popup interface.

## 3. How We Store and Secure Data

- **Locally on your device:** Your script, scene, caption, timeline, and settings data are stored only in `chrome.storage.local` on your own browser and are never transmitted to any server we operate. This data is removed automatically if you uninstall the Extension.
- **On our license server:** Only your device ID and activation key are transmitted to our license verification server (`hassan-kamboh-heygen-license.hassankamboh.workers.dev`), a Cloudflare Worker. This transmission occurs over HTTPS (encrypted in transit). The data is stored in a Cloudflare KV namespace (encrypted at rest by Cloudflare's infrastructure) and is retained for as long as your license remains active, plus a limited period afterward for support and fraud-prevention purposes, after which it is deleted.
- We do not store your script, caption, or scene content on any server.

## 4. Who We Share Data With

- **We do not sell, rent, or share your data with advertisers, data brokers, or any third party for marketing purposes.**
- **Third-party AI providers (only if you opt in):** If you enable AI image generation or avatar generation, the prompt text and the API key you provided are sent directly from your browser to the provider you selected (OpenAI, Stability AI, HeyGen, D-ID, or Synthesia, as applicable) under that provider's own privacy policy. We do not proxy, intercept, or retain a copy of this data.
- **Legal compliance:** We may disclose limited data (such as a device ID) if required to comply with applicable law, a valid legal process, or to investigate abuse of our licensing system.
- We do not use any data for personalized advertising, credit scoring, or lending decisions.

## 5. Data Retention

- Locally stored data (scripts, scenes, captions, settings) persists until you clear it in Settings or uninstall the Extension.
- Device ID and activation key are retained on our license server only while your license is active or recently expired, for support purposes, and are periodically purged for inactive/expired keys.

## 6. Your Choices and Rights

- You can clear all locally stored data at any time from the Extension's Settings panel.
- Uninstalling the Extension permanently deletes all locally stored data associated with it.
- You may request deletion of your device ID/activation-key record from our license server by contacting us (Section 8).
- If you are in a jurisdiction with statutory data rights (e.g., GDPR, CCPA), you may request access to, correction of, or deletion of the limited data we hold, by contacting us below.

## 7. Children's Privacy

The Extension is not directed at children under 13, and we do not knowingly collect data from children.

## 8. Contact

For privacy questions, data deletion requests, or concerns, contact: **zohanayan85@gmail.com**

## 9. Changes to This Policy

If we change what data we collect or how we use it, we will update this policy and, where required, provide an in-product notice before the change takes effect.

## 10. Trademark Notice

HK AI Studio is an independent, third-party tool and is not affiliated with, endorsed by, or sponsored by HeyGen. "HeyGen" is referenced only to describe compatibility with that platform.