Back to home

Privacy Policy

Last updated: 2026-08-31

1. About This Policy

This policy explains what personal information this platform ("we", "us") collects when you use our AI film-creation platform (the "Service"), how we use it, who we share it with, and the rights you have over it.

The operator of this platform is the controller of the personal information described here. By using the Service you acknowledge this policy; where the law requires your consent — for example for certain cookies — we ask for it separately.

2. Information We Collect

  • Account data — the email address you register with, your nickname and avatar, your password in hashed form, and the profile information shared by Google or GitHub if you sign in with one of them.
  • Creative data — the prompts, scripts, reference images and other materials you submit, the storyboards, images, video and audio the Service generates for you, and the settings of each task.
  • Transaction data — your plan and Credit purchases, order numbers, amounts, currency and payment status. Card details are collected and processed by Stripe; we never receive or store your full card number.
  • Technical data — IP address, browser and device type, language and time zone, pages viewed and actions taken, and error and performance logs.
  • Communications — the content of support requests you send us and our replies.

3. How and Why We Use It

If you are in the European Economic Area or the United Kingdom, our legal bases are: performance of our contract with you (providing the Service and processing payments); our legitimate interests (security, abuse prevention and service improvement); compliance with a legal obligation (accounting, responding to lawful requests); and your consent where we ask for it, which you may withdraw at any time.

  • To provide the Service: running your generation tasks, storing your projects, and metering and settling Credits.
  • To handle payments, issue receipts and meet accounting and tax obligations.
  • To keep the Service secure: detecting fraud, abuse, automated scraping and breaches of the Terms of Service.
  • To support you and respond to your requests.
  • To improve the Service: understanding which features are used and diagnosing faults. We do not use your Input or Output to train our own AI models.
  • To comply with legal obligations and to establish, exercise or defend legal claims.

4. AI Model Providers

Generation tasks are executed by AI models. Some run on infrastructure we operate; others are operated by third-party providers, in which case your Input — and, for some features, an intermediate Output — is transmitted to that provider so that the task can run.

We select providers that are contractually restricted to using transmitted content for fulfilling the request. We do not sell your creative data and we do not use it to train our own models. Providers may retain content briefly for abuse monitoring under their own policies.

5. Sharing

We share personal information only with:

  • service providers acting on our instructions — cloud hosting and object storage, AI model providers, email and messaging delivery, and analytics;
  • Stripe, which processes payments as an independent controller under its own privacy policy;
  • authorities, courts or professional advisers where we are legally required to disclose, or where disclosure is necessary to protect our rights, our users or the public; and
  • a buyer or successor, if we are involved in a merger, acquisition or sale of assets, on the basis that this policy continues to apply.

6. We Do Not Sell Your Data

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We do not run advertising networks on the Service.

7. International Transfers

We operate internationally. Your information may be stored and processed in Hong Kong and in other jurisdictions in which our providers operate, and those jurisdictions may have data-protection laws that differ from those of your own country. Where we transfer personal information out of the EEA or the UK, we rely on appropriate safeguards such as the European Commission's standard contractual clauses.

8. How Long We Keep It

To close your Account, submit a request through the contact channels published by the Service. After verifying your identity, we anonymise your account identifiers and delete your works and generation history, and complete the deletion or irreversible anonymisation of the remaining personal information within a reasonable period, normally 30 days, except for records we are required by law to keep.

  • Account data — for as long as your Account is open.
  • Creative data — for as long as your Account is open, or until you delete the project or asset. Deleted items disappear from the Service immediately but may persist briefly in backups and caches until those are rotated.
  • Transaction records — for the period required by applicable accounting and tax law, typically seven years, even after your Account is closed.
  • Technical logs — normally up to 12 months, and longer where needed to investigate an incident.

9. Your Rights

Depending on where you live, you may have the right to:

  • access the personal information we hold about you and receive a copy;
  • have inaccurate information corrected;
  • have your information deleted;
  • restrict or object to certain processing, including processing based on our legitimate interests;
  • receive the information you provided to us in a portable, machine-readable format;
  • withdraw a consent you previously gave, without affecting processing already carried out; and
  • not be treated less favourably for exercising any of these rights.

10. Exercising Your Rights

You can exercise many of these rights directly in the Service: your account settings let you update your details and delete your works. For Account closure or anything else, contact us through the channels published on this platform.

We will respond within the period required by the law that applies to you, normally within one month. If you are in the EEA or the UK you may also lodge a complaint with your local supervisory authority; if you are in California you may use an authorised agent to make a request on your behalf.

11. Cookies and Local Storage

We use browser storage that is strictly necessary to run the Service: keeping you signed in, remembering your language and theme preferences, and protecting against fraudulent requests. We do not use advertising or cross-site tracking cookies. You can clear this storage in your browser, but the Service may then not work correctly.

12. Security

We protect your information with encryption in transit, access controls, and segregated storage of credentials and payment identifiers. No system is perfectly secure; if a breach affects your rights we will notify you and the relevant authority as required by law. Please keep your password confidential and use one that you do not reuse elsewhere.

13. Children

The Service is not intended for anyone under 18, and we do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us and we will delete it.

14. Changes to This Policy

We may update this policy. We will post the new version with an updated date and, where the changes are material, notify you in the Service before they take effect.

15. Contact

For any question about this policy, or about how we handle your personal information, contact us through the channels published on this platform.