Privacy Policy

1. Information We Collect

Information You Provide Directly

When you create an account, use our services, or contact us, we collect information you provide directly, including:

• Account information (name, email address, password)
• Profile information and creator details
• Payment information (processed securely through Stripe)
• AI Short submissions, descriptions, and related content
• Support requests, feedback, and communications
• Portfolio images and creator portfolio information
• Business information for marketplace transactions

Information Collected Automatically

When you use our platform, we automatically collect certain information:

• Usage data and platform analytics
• Device and browser information
• IP address and approximate location data
• Cookies and similar tracking technologies
• Platform performance and error logs
• Transaction history and interaction patterns

Information from Third Parties

We may receive information about you from third-party services such as Stripe (for payment processing), Supabase (for authentication), and other integrated services you choose to connect to our platform.

2. Legal Basis for Processing (GDPR)

We process your personal data under the following legal bases:

• Contract Performance: To provide our services and fulfill our obligations to you
• Legitimate Interests: To improve our services, prevent fraud, and ensure platform security
• Consent: For marketing communications where required by law
• Legal Obligation: To comply with applicable laws and regulations

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our AI marketplace services
• Process transactions, payments, and creator payouts
• Facilitate communication between sellers/creators and buyers
• Review, approve, and moderate AI Short submissions
• Ensure platform security and prevent fraudulent activities
• Analyze usage patterns and optimize user experience
• Send important service updates and notifications
• Provide customer support and resolve disputes
• Comply with legal obligations and enforce our terms
• Conduct research and development for platform improvements

4. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

Trusted Service Providers

We work with trusted third-party service providers who assist us in operating our platform:

• Stripe: Payment processing and financial transactions
• Supabase: Database services, authentication, and cloud infrastructure
• PostmarkApp: Email communications and notifications
• Vercel: Website hosting and performance optimization
• Analytics providers: Platform usage analysis and optimization

Legal Requirements and Safety

We may disclose your information when required by law, legal process, court order, or government request. We may also share information to protect our rights, property, or safety, or that of our users or the public.

Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control via platform notification within 30 days of the transaction.

Data Sharing with Sellers

When you purchase an AI Short, your inputs are shared with the seller's AI systems and any third-party AI services they use. These external services may have their own privacy policies and data practices that differ from ours. We recommend reviewing each seller's data practices before purchasing.

By purchasing an AI Short, you consent to sharing your inputs with the seller's AI systems and any third-party AI services they use for the purpose of generating your requested outputs.

With Your Consent

We may share your information with your explicit consent for purposes not covered in this policy.

5. Data Security and Protection

We implement industry-standard technical and organizational measures to protect your personal information, which may include:

• Encryption of data in transit and at rest
• Authentication measures and access controls
• Secure cloud hosting with our service providers
• Security monitoring and regular reviews
• Backup procedures to protect against data loss

While we strive to protect your personal information, no security system is impenetrable. We cannot guarantee the absolute security of your data.

Data Breach Notification

In the event of a data breach that may affect your personal information, we will notify relevant authorities within 72 hours as required by applicable law and will notify affected users without undue delay. We will provide clear information about the breach, its potential impact, and the steps we are taking to address it.

6. Your Rights and Choices

You have the following rights regarding your personal information:

Access and Portability

You can access and download your personal data through your account settings or by contacting us. You have the right to receive your data in a structured, commonly used, and machine-readable format.

Correction and Updates

You can update your account information at any time through your profile settings. You have the right to request correction of inaccurate or incomplete personal data.

Deletion (Right to be Forgotten)

You can request deletion of your account and personal data by contacting our support team. We will delete your data within 30 days of your request unless we have a legal obligation to retain it. Note that some information may be retained for legal, accounting, or legitimate business purposes.

Restriction of Processing

You have the right to request that we restrict the processing of your personal data in certain circumstances.

Objection to Processing

You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.

Marketing Communications

You can opt out of marketing communications at any time using the unsubscribe link in our emails or through your account settings. You can continue to receive essential service communications even if you opt out of marketing.

7. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience on our platform. You can set your browser to refuse all or some browser cookies, or to alert you when cookies are being sent. If you disable or refuse cookies, please note that some parts of our platform may then be inaccessible or not function properly.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your own, primarily the United States where our servers are located. We rely on our service providers' compliance frameworks and legal mechanisms for international data transfers, including their use of Standard Contractual Clauses and other appropriate safeguards where applicable.

9. Children's Privacy

Our services are not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take immediate steps to delete such information from our servers.

10. Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes outlined in this policy. Typical retention periods include:

• Account data: Retained while your account is active and up to 7 years after closure where required for legal compliance
• Transaction data: Retained up to 7 years for tax and accounting purposes as required by law
• AI Short content: Retained while published and for a reasonable period after removal
• Support communications: Retained for a reasonable period for quality assurance and dispute resolution
• Analytics data: Retained in aggregated form for analysis and improvement purposes

We may retain certain information for longer periods as required by law or for legitimate business purposes such as fraud prevention and dispute resolution.

11. Automated Decision Making

We may use automated decision-making processes for AI Short approval, fraud detection, and content moderation. You have the right to request human review of any automated decision that significantly affects you. Contact us if you wish to request such review.

12. Third-Party Links and Services

Our platform may contain links to third-party websites or services. This privacy policy does not apply to those third-party sites. We encourage you to review the privacy policies of any third-party services you access through our platform.

13. Changes to This Policy

We reserve the right to modify this privacy policy at any time to reflect changes in our practices or applicable laws. We will notify you of material changes via platform notification at least 30 days before changes take effect. Your continued use of our services after changes take effect constitutes acceptance of the updated policy.

14. Contact Information and Data Protection Officer

If you have questions about this privacy policy, wish to exercise your rights, or need to report a data protection concern, please contact us: