Privacy Policy

• Account data: name, email address, hashed password (or the identifier and email shared by Google or Apple when you sign in with them), language preference and studio settings.
• Content you provide: prompts, uploaded images and videos, voice recordings you submit for voice cloning, and the results the Service generates for you.
• Usage data: jobs you run (task, model, credits, timing, technical status), credit ledger entries, purchases (amount, pack, Stripe session and payment identifiers; we never see your full card number) and basic technical logs (IP address, browser, timestamps) used for security and troubleshooting.
• Cookies: a session cookie that keeps you signed in, a language cookie, a short-lived state cookie during Google/Apple sign-in, and an internal cookie while an administrator is signed in as you for support. We do not use advertising or cross-site tracking cookies.

• To provide the Service: run your requests, store your library, keep your credit balance, process payments and show you your history.
• To keep the Service safe: moderation, abuse prevention, rate limiting and security monitoring.
• To improve the Service: aggregated statistics about which features and models are used. We do not train our own AI models on your content.
• To communicate: service messages such as receipts, changes to terms or security notices. Marketing messages only with your consent, and you can opt out at any time.
• To meet legal obligations, including accounting and tax rules for purchases.

Our legal bases (where such bases apply) are performance of our contract with you, our legitimate interests in running a secure and improving service, your consent where we ask for it, and compliance with the law.

To fulfil some requests we send your prompt and the relevant files to third-party AI providers, currently including fal.ai (which hosts models from ByteDance, xAI, Google, OpenAI, MiniMax, ElevenLabs and sync.so) and, for text enhancement and translation, an OpenAI model accessed through fal.ai. Providers receive only what is needed for the request, process it under their own terms and are contractually or by policy restricted from using API traffic to train their models where such commitments are available. Which provider handled a job is recorded with the job.

Payments are processed by Stripe, which receives the data needed to complete the transaction and applies its own privacy policy.

Our servers and storage are operated by us or by hosting providers acting on our instructions. Content may be processed outside your country; where the law requires, we rely on appropriate safeguards such as standard contractual clauses.

We may disclose data when the law requires it, to protect rights and safety, or as part of a merger or acquisition, in which case this Policy continues to apply to the transferred data.

Voice cloning creates a synthetic voice from a recording you upload or record in the browser. The recording and the resulting voice model identifier are stored with your account and sent to the voice provider to create and use the voice. Only clone your own voice or a voice you have documented permission to use. You can delete a cloned voice at any time from Voice mode; deletion removes it from our systems and requests deletion at the provider.

Your library (uploads and results) is kept while your account is active so you can return to it. Deleted items are removed from storage promptly, subject to short-lived backups. Job records and credit ledger entries are kept for as long as your account exists and, for purchases, as long as accounting law requires. Technical logs are kept for a limited period. When your account is deleted we remove or anonymise your personal data unless we must keep some of it by law.

Depending on where you live you may have the right to access, correct, delete or export your data, to restrict or object to certain processing, and to withdraw consent. You can change your name, language and studio preferences in the app, delete individual items from your library, and ask us for anything else by email. We answer within the time the law allows. You may also complain to your local data protection authority.

Passwords are stored hashed, sessions are signed, provider keys are stored server-side and masked in our tools, and all traffic to the Service is encrypted in transit. Administrators can support you by viewing your account; this is logged. No system is perfectly secure, so please use a strong, unique password.

The Service is not directed to children under 18 and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will remove it.

We may update this Policy. Material changes will be announced in the Service or by email before they take effect. The date at the top shows the current version.

Privacy questions and requests: StarkOne LLC · [email protected]