Last updated: 14 October 2026

Controller and data

Aleksei Krasnoperov, a Spanish sole trader, controls account, billing, security and research data. Contact krasnoperov.me. Contact: privacy requests and organizational processing terms.

Email, name, optional Google identity and picture; encoded password credentials, registration consent and verification/recovery records; memberships, permissions, sessions and agent grants.
Prompts, recipes, references, media, canvas data, history and actors; alignment transcripts and word timings.
Encrypted provider keys, validation and operational metadata, including synchronized ElevenLabs voices.
Billing identity, payments, credit holds/charges, refunds, Stripe references and actors. Stripe handles card details and payment tokens.
Errors, request metadata and correspondence.

Cloudflare hosts data and delivers account and activity emails; Google supplies sign-in; Stripe payments/invoices. Email records contain recipients, activity summaries, preferences and delivery status. Verification and recovery links are sent by email; their tokens are stored only as digests in authentication records and are excluded from delivery records. Manage optional generation and credit emails in Profile. Operators receive account activity summaries for product operation and support; these exclude prompts, media and credentials.

AI providers

Providers receive necessary prompts, settings and references/media URLs. We store results/request identifiers:

Google AI: image, video, music and Describe; supported media inputs.
OpenAI: image generation/editing; reference images.
fal: hosted image, video and lip-sync; image/video/audio inputs.
Replicate: hosted video; image/video references.
ElevenLabs: speech, sound, music, voice synchronization and alignment; text, voice identifiers, audio/transcripts.
Hi3D: 3D generation and texturing; reference images and source 3D models.
Tripo: 3D segmentation, rigging and animation; source 3D models.
Fish Audio: directed speech; text and voice identifiers.

We do not train on your content. Providers’ retention/training/safety rules and own-key agreements apply; deletion here does not erase their records.

Diagnostics, analytics and research

Sentry receives errors, stack locations, routes, request metadata, hashed actor identifiers and service/environment details. We filter recognized credentials and provider response text; no request bodies, headers, profiles, traces or session replay are attached. Unexpected error text may contain personal data.

Simple Analytics collects aggregate page views, device/language/viewport information, time and scrolling without analytics cookies or persistent visitor identifiers. Space and internal referring paths are masked; unknown paths grouped; queries and campaign parameters omitted. Pages send no navigation referrer. No prompts/media are sent. You can block its script or enable Do Not Track.

UserTold and its disclosed providers process voluntary interview responses, audio, transcripts, observations and, when disclosed and permitted, screen recordings. Invitations explain collection; decline or stop freely. Terms do not consent to recording.

Purposes and sharing

GDPR bases: contract for service/purchases; legal obligation for financial records; legitimate interests for security, diagnostics/support; consent where required for research/recording.

Sharing and agent permissions control access. Public spaces, media and recipes are readable/exportable by anyone; revocation cannot recall copies. Apps have separate policies. Disclosures may address legal obligations or abuse. No data sales or advertising profiles.

Retention and security

Canvas deletion hides content; media, recipes and actor history remain without automatic purging. Request account deletion/erasure through Contact. We review retention/minimization; user deletion preserves other members’ work.

Spanish accounting records: at least six years from the last entry. OSS records: ten years from transaction-year end. Legal holds may extend retention; accounting does not justify indefinite unrelated-data retention.

Sessions expire after thirty days; pending sign-ins after ten minutes. Expiry does not erase access history. Cloudflare/Sentry retention follows service settings; research/support retention is reviewed against purpose and obligations.

We use access controls, encrypted connections and encrypted provider keys; security is not guaranteed. Providers may process outside the EEA under applicable safeguards, such as adequacy or standard contractual clauses.

Rights, storage and changes

Manage sharing, export and revoke agents in the product. Request access, correction, erasure, restriction, objection, portability or consent withdrawal through Contact. We respond within one month, with lawful extensions and reasons for refusals. Withdrawal does not affect earlier lawful processing. Complain to your supervisory authority, including Spain's AEPD.

Necessary cookies/storage support sign-in, security and preferences; blocking them may prevent operation. Research recording needs disclosed permissions; Simple Analytics uses no analytics cookies.