Privacy Policy

We use the information we collect to:

• Create and manage your account
• Provide, maintain, and improve the Service
• Process payments and manage subscriptions and credits
• Generate AI video, image, and audio content based on your prompts
• Ensure character consistency across your video scenes
• Send transactional emails (e.g., receipts, account alerts)
• Respond to support requests and troubleshoot issues
• Analyze usage patterns to improve product features
• Detect and prevent fraud, abuse, or security threats
• Comply with legal obligations

We do not use your content or personal data for training external AI models or sell your data to third-party advertisers.

To power AI features, your content (prompts, images, scripts) is transmitted to third-party AI providers:

• Fal.ai: Processes your prompts and reference images to generate video and image content. Subject to Fal.ai’s privacy policy.
• OpenAI: Processes your text inputs to generate scripts, enhance prompts, and analyze images. Subject to OpenAI’s privacy policy.

We only share the minimum data necessary with these providers to fulfill your requests. We recommend reviewing their respective privacy policies for information on how they handle data.

We do not sell your personal information. We may share it in the following limited circumstances:

• Service Providers: With trusted vendors who help us operate the Service, including Stripe (payments), Google Cloud Storage (asset storage), Mixpanel (analytics), Fal.ai and OpenAI (AI generation), and Neon (database hosting). These providers are contractually obligated to protect your data.
• Legal Requirements: When required by law, subpoena, or government request, or to protect the rights, property, or safety of the Company, our users, or the public.
• Business Transfers: In connection with a merger, acquisition, or sale of all or a portion of our assets, in which case your data may be transferred as part of the transaction. You will be notified of any such change.
• With Your Consent: In any other circumstance where you have given explicit consent.

Your data is stored on servers in the United States, including Neon (PostgreSQL database) and Google Cloud Storage. Generated video and image assets are stored in Google Cloud Storage and accessed via signed, time-limited URLs.

We implement reasonable technical and organizational security measures, including encryption in transit (TLS/HTTPS), hashed passwords (bcrypt), and Stripe webhook signature verification. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

We retain your account and usage data for as long as your account is active or as needed to provide the Service. Generated media assets may be retained for a period to allow you to access them; older assets may be deleted to manage storage. Credit transaction records are retained for accounting and legal compliance purposes.

You may request deletion of your account and associated data by contacting us at privacy@lumyn.studio. Note that some data may be retained as required by law or for legitimate business purposes.

We use Mixpanel to collect anonymized event data about how users interact with the Service (e.g., which features are used, generation success rates). This data helps us improve the product. Mixpanel may use cookies and device identifiers. You can opt out of Mixpanel tracking at mixpanel.com/optout.

We use the following types of cookies:

• Strictly Necessary: Required for authentication and core Service functionality. Cannot be disabled.
• Functional: Store your preferences (e.g., theme, settings).
• Analytics: Used by Mixpanel to understand usage patterns (can be opted out of).

You can manage cookie preferences via your browser settings. Disabling cookies may impact functionality of the Service.

The Service is not directed at individuals under 18 years of age. We do not knowingly collect personal information from minors. If we become aware that a minor has provided us with personal information, we will take steps to delete such information. If you believe a minor has submitted information to us, please contact us at privacy@lumyn.studio.

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data (subject to legal retention requirements).
• Portability: Request your data in a portable format.
• Objection / Restriction: Object to or request restriction of certain processing activities.

To exercise any of these rights, contact us at privacy@lumyn.studio. We will respond within 30 days.

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know: Know what personal information we collect, use, disclose, and sell.
• Right to Delete: Request deletion of personal information we have collected from you.
• Right to Correct: Request correction of inaccurate personal information.
• Right to Opt-Out: We do not sell personal information. We do not share personal information for cross-context behavioral advertising.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

To submit a California privacy request, email us at privacy@lumyn.studio with the subject line “California Privacy Request”. We may need to verify your identity before processing your request.

The Service is operated in the United States. If you access the Service from outside the United States, your data will be transferred to and processed in the United States, which may have different data protection laws than your country. By using the Service, you consent to this transfer.

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on the Service or sending an email to your registered address. The “Last updated” date at the top of this page will reflect when changes were made. Your continued use of the Service after any changes constitutes acceptance of the updated Policy.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: