Privacy Policy

1. Information We Collect

We collect the following categories of information:

• Account information — your email address, authentication identifiers, and account settings.
• User media — photographs you upload and the videos generated from them, together with associated metadata necessary to provide the Service.
• Transaction information — purchase history, plan, credit balance, and billing records. Payment-card details are collected and processed directly by our payment processor (Stripe, Inc.); we do not receive or store full card numbers.
• Usage and device information — log data such as IP address, browser type, device identifiers, pages viewed, feature usage, timestamps, and error diagnostics.
• Communications — messages you send to us, including support requests and feedback.

2. How We Use Information

We use personal information for the following purposes:

• to provide, operate, and maintain the Service, including processing your photographs into Generated Videos;
• to create and manage your account and authenticate you;
• to process payments, manage subscriptions and credits, and send transactional communications;
• to secure the Service, prevent fraud and abuse, and enforce our Terms of Service and Acceptable Use rules, including automated safety screening of uploads;
• to respond to your inquiries and provide support;
• to analyze usage in aggregate and improve the Service; and
• to comply with legal obligations and establish, exercise, or defend legal claims.

We do not sell personal information, and we do not share personal information for cross-context behavioral advertising. We do not use your photographs or Generated Videos to train artificial-intelligence models without your express opt-in consent.

3. Legal Bases for Processing

Where the EU or UK General Data Protection Regulation applies, we process personal information on the following legal bases: performance of a contract (providing the Service you request); legitimate interests (securing and improving the Service, preventing abuse), balanced against your rights; consent (where you opt in, for example to model-training use of your media, and for non-essential cookies where required); and compliance with legal obligations.

4. How Your Media Is Processed

Your photographs and Generated Videos are stored in private storage buckets and are not publicly accessible by default. Media becomes accessible to others only if you create a share link; share links can be revoked, and revoked links stop working.

To generate a video, your photograph is transmitted to the third-party AI model providers we use, acting as our processors, solely to produce your Generated Video. These providers are contractually restricted from using your media for their own purposes, including model training, except where you have expressly opted in.

5. Disclosure of Information

We disclose personal information only in the following circumstances:

• Service providers (processors) — hosting and storage, authentication, payment processing, AI model inference, email delivery, and analytics providers, in each case bound by contractual confidentiality and data-protection obligations and permitted to use the information only to provide services to us.
• Legal compliance — where required by law, subpoena, or other legal process, or where necessary to protect the rights, property, or safety of the Company, our users, or the public.
• Business transfers — in connection with a merger, acquisition, financing, reorganization, or sale of assets, in which case the successor remains bound by commitments materially consistent with this Policy.
• With your direction — when you create share links or otherwise direct us to disclose information.

6. Data Retention

We retain your account information and media for as long as your account exists, unless you delete specific items sooner. When you delete a memory or your account, the associated media is queued for permanent deletion and is removed from production systems promptly and from backups within a bounded backup-rotation window (not exceeding thirty (30) days).

We retain transaction records for as long as required by tax, accounting, and other legal obligations, and we may retain limited records as necessary to establish, exercise, or defend legal claims or to enforce our agreements.

7. Security

We implement technical and organizational measures appropriate to the risk, including encryption of data in transit, private-by-default storage with signed access, access controls and least-privilege administration, and logging. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your personal information, we will notify you and the relevant authorities as required by applicable law.

8. Your Rights

Depending on your jurisdiction, you may have the right to: access the personal information we hold about you; receive a portable copy; correct inaccurate information; delete your information; restrict or object to certain processing; withdraw consent at any time (without affecting prior processing); and lodge a complaint with your local supervisory or data-protection authority.

If you are a California resident, you have the rights under the California Consumer Privacy Act, as amended by the CPRA, to know, correct, and delete personal information, the right to opt out of sale or sharing (we do not sell or share personal information as those terms are defined), the right to limit use of sensitive personal information (we use it only to provide the Service), and the right not to receive discriminatory treatment for exercising these rights.

You can exercise most rights directly: account settings allow you to delete individual memories or your entire account and data. For any other request, contact us at info@animemories.com. We will verify your request (typically by confirming control of the account email) and respond within the timeframe required by applicable law. You may use an authorized agent where the law permits; we will require proof of authorization.

9. International Data Transfers

We are based in the United States, and information we collect is processed in the United States and in other countries where our service providers operate. Where personal information originating in the European Economic Area, the United Kingdom, or Switzerland is transferred to countries not deemed adequate, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses and equivalent UK and Swiss mechanisms.

10. Children

The Service is not directed to children under thirteen (13), and we do not knowingly collect personal information from children under thirteen. Where the GDPR applies, users under sixteen (16) (or the lower age adopted by the relevant member state) may use the Service only with verifiable parental consent. If you believe a child has provided us personal information, contact us at info@animemories.com and we will delete it.

11. Cookies and Similar Technologies

We use strictly necessary cookies and similar technologies to authenticate you, maintain sessions, and secure the Service. We do not use third-party advertising cookies. Because industry standards for "Do Not Track" signals remain unsettled, we do not respond to them; we treat all users according to this Policy.

12. Changes to This Policy

We may update this Policy from time to time. Material changes will be announced by posting the updated Policy with a new effective date and, where appropriate, by email or in-product notice. Changes apply prospectively from their effective date.

13. Contact Us

To ask questions about this Policy or exercise your rights, contact A2M Technologies, LLC at info@animemories.com.