Muvimator Image Generator

1. Who We Are

Muvimator ("Muvimator", "we", "our", "us") is the trading name of [Your Full Name], a sole trader operating in England & Wales. We are the data controller for the personal information collected via our website and applications (collectively, the Service). If you have questions, contact us at privacy@muvimator.com.

2. Scope of This Policy

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you use the Service. It applies to visitors, account holders, and customers located in the United Kingdom or elsewhere. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

3. The Information We Collect

We only collect information that is necessary for the purposes set out in this Policy:

Account Data – Name (derived from email when not provided), email address, hashed password, country, subscription plan, token balance, role.
Usage Data – Logs relating to model queries (including prompts, parameters, media URLs submitted as User Input), request IDs, status, generated output metadata, IP address, device and browser information.
Payment Data – Stripe customer and subscription IDs, partial card details (last 4 digits, expiry), billing address. We do not store your full card number or CVC.
Cookies & Similar Tech – Authentication cookies, analytics cookies, and local storage tokens. See Section 10.
Support Data – Communications with our support team, bug reports, feedback.

4. Lawful Bases for Processing

We rely on the following lawful bases under UK GDPR:

Contract – To provide and administer the Service (Article 6(1)(b)).
Legitimate Interests – For security, fraud prevention, analytics, and service improvement (Article 6(1)(f)).
Legal Obligation – For tax and accounting compliance (Article 6(1)(c)).
Consent – For optional marketing communications or non-essential cookies (Article 6(1)(a)). You may withdraw consent at any time.

5. How We Use Your Information

We use personal data to:

Process your User Input (prompts, images) via underlying AI models to generate video output.
Create and maintain your Account, process payments, and deliver Tokens.
Respond to support enquiries and enforce the Terms of Service.
Monitor usage to detect and prevent fraud, abuse, or policy violations.
Analyse aggregated usage trends to improve our models and user experience. [**See Note Below**]
Send service-related emails and, where permitted, marketing messages.

[**Note on AI Training/Improvement:** *Please replace this note after confirming.* This policy needs to accurately state if/how User Input or Generated Output is used for training/improving the AI models, whether by Muvimator or third-party providers like Fal.ai, and whether data is anonymized.]

6. Data Retention & Security

We retain personal data only for as long as necessary to fulfil the purposes set out above or to comply with legal obligations. Typical retention periods are:

User Input (Prompts/Images) – Retained only as long as necessary to fulfil the generation request and for short-term logging/caching (e.g., up to 30 days), unless required longer for security/abuse investigations or if you explicitly save them.
Account Data – kept for the life of your Account and up to six (6) years after closure for tax and audit purposes.
Usage Logs – deleted or anonymised after twelve (12) months.
Payment Records – retained for a minimum of seven (7) years in accordance with HMRC requirements.
Generated Output – stored until you delete it via the interface or for twelve (12) months, whichever is sooner, unless extended storage is part of your plan.

We implement technical and organisational measures including encryption in transit, hashed passwords, least-privilege access controls, and periodic security reviews.

7. Sharing Your Information

We do not sell your personal data. We share information only with:

Service Providers – Including AI inference providers (Fal.ai) to process your User Input and generate output, cloud hosting (e.g., Vercel, AWS), payment processing (Stripe), customer support tools – strictly as necessary to provide the Service. All providers are bound by contractual data-processing terms. [**Confirm if Fal.ai terms permit them to use data for training/improvement and disclose if so.**]
Affiliates & Successors – If we reorganise, merge, or sell the business, data may transfer to the successor entity subject to this Policy.
Legal & Safety – Where required to comply with law, enforce our Terms, or protect rights, property, or safety of users or others.

8. International Transfers

We may transfer personal data outside the UK (for example, to the EU or United States). Whenever we do so, we ensure appropriate safeguards are in place, such as adequacy regulations or standard contractual clauses approved by the UK ICO.

9. Your Rights

Under UK GDPR, you have the right to access, correct, erase, restrict, or object to processing of your personal data, as well as data portability and to withdraw consent. To exercise these rights, contact privacy@muvimator.com. You may also lodge a complaint with the Information Commissioner's Office (ico.org.uk).

10. Cookies

We use necessary cookies for authentication and service functionality. With your consent, we use analytics cookies (e.g., Google Analytics) to understand usage patterns. You can manage cookies via your browser settings or the consent banner.

11. Automated Decision-Making

Our generative AI output involves automated processing of your User Input. However, we do not make decisions that produce legal or similarly significant effects solely based on automated processing.

12. Children

The Service is not directed to individuals under 18. We do not knowingly collect personal data from children. If we learn a child has provided personal data, we will delete it.

13. Changes to This Policy

We may update this Policy. We will notify you of material changes via email or a prominent notice. The Last updated date below indicates the latest revision.

Last updated: 17 June 2024