PRIVACY POLICY

This Privacy Policy explains how Aiscenix Inc. ("Aiscenix," "we," "us," or "our") collects, uses, shares, and protects personal information when you use Aiscenix, including our websites, apps, and related services (the "Platform"). It applies to viewers, creators, and users of Aiscenix Director, our creative software for generating and editing video, images, and audio ("Director"). Capitalized terms not defined here, such as Tokens, Content, Credits, Inputs, and Outputs, have the meanings given in our Terms of Service and the Aiscenix Director Terms. Aiscenix Inc. is the business responsible for your personal information (the "controller," where that term applies).

1 Information we collect

1.1 Information you give us. When you create an account or use the Platform, you give us your name, email address, password, date of birth, gender (you can choose "Prefer not to say"), country, and optional profile details such as a display name or photo. If you sign in with a third-party account, such as Google, we receive your name, email address, and profile photo from that account, as Section 1.9 explains. If you verify your account, for example to receive Promotional Tokens, you give us a phone number. If we need to verify that you are at least 18, we may use an ID check or a verification provider. If you contact support, report content, send a copyright notice or counter-notice, or opt out of arbitration, we receive what you send us, including your contact details.

1.2 Purchases and your wallet. When you buy Tokens, a plan, or Director Credits, we keep a record of the purchase, price, plan, renewals, cancellations, refunds, and payment disputes. For viewers, we also keep your Token balances by type and the episodes you unlock. For Director users, we keep your Credit balances, grants, expiry dates, and Credit use. Payments are processed by Stripe, or, for some Director purchases, by Link (see Section 4(c)). We receive limited payment details from Stripe, such as card brand, the last four digits, expiration date, billing country and postal code, and a code that identifies the payment method without revealing the card number. We do not receive or store your full card number.

1.3 Viewing and activity. We record what you watch and how much of it you watch, what you unlock, the creators you follow, your comments, searches, and other interactions. We use watch progress, for example, to apply the viewing requirement for promotional spend described in our Terms.

1.4 Device and technical information. When you use the Platform, we automatically receive your IP address, approximate location derived from it (such as city or region), device and browser type, operating system, device identifiers, language, referring pages, log data, and cookie data. We do not collect precise location.

1.5 Agreement and consent records. We keep records of the agreement versions you accepted and when and how you accepted them, including IP address and device; separate consents, such as to automatic renewal or AI training; creators' upload rights confirmations; and any arbitration opt-out or rejection of a change to our terms.

1.6 Additional information from creators. If you have a creator account, we also collect: your legal name, address, and, for an entity, ownership or control information; identity verification information, which may include a government-issued ID; tax information, such as a taxpayer identification number on a W-9 or W-8 form; payout details, most of which are held by our payout provider; the Content you upload and its metadata; the rights confirmations and records you provide; materials you submit to creation tools; and records of your Earnings, Tier, and payouts.

1.7 Information from Director. If you use Director, we also collect:

• your Inputs, such as prompts, text, images, video, audio, and reference material;
• character, voice, and style samples you upload to train custom models, and the custom models created from them;
• your Outputs, projects, and the Authorship Record of how they were made;
• your team workspace details, including the names and email addresses of people you invite, their roles, and the activity of each seat;
• MCP and API connection details, such as credentials and usage logs; and
• records of generations, including the model used, Credits charged, and whether a job succeeded, failed, or was blocked by a safety filter.

Your Inputs may include information about other people, such as their image or voice. Only upload information about another person if you have the right to do so, and their written permission where the Director Terms require it.

1.8 Information from others. We receive information from: Stripe, Link, and our payout provider, such as payment status, payout status, and fraud signals; sign-in providers you choose to use; verification services, such as whether a phone number is valid and whether it is a virtual or disposable number; other users, for example when someone reports content, comments, files a copyright notice, or invites you to a Director team; and, for creators, identity-verification and tax-form providers and sanctions and watch lists we are required to check.

1.9 Sign in with Google. If you choose to sign in with Google, Google shares your name, email address, and profile picture with us, as allowed by your Google account settings. We use this information only to create your account, sign you in, and pre-fill your display name and profile photo, which you can change. We also ask for your date of birth to confirm you are at least 18, and for your country and gender to complete your account. We do not request access to your Gmail, Google Drive, contacts, or any other Google data. We do not sell Google user data, use it for advertising, or share it with anyone except the service providers that operate our sign-in and database systems on our behalf. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can remove our access at any time at myaccount.google.com/permissions, and you can ask us to delete your account by emailing [email protected].

2 How we use information

We use personal information to:

• create and manage your account, and provide the Platform, including streaming, unlocks, and your wallet;
• provide Director, including running generations through the model you choose, training and storing your custom models, keeping your projects and Authorship Record, managing team workspaces, and providing MCP and API access;
• process purchases, deliver Tokens and Credits, manage plans and renewals, send receipts, renewal reminders, and price-change notices, and handle cancellations, refunds, and payment disputes;
• confirm that users are at least 18;
• show Content, prices, and features available in your country, and meet the legal requirements that apply where you live;
• understand our audience in aggregate, for example by age range, gender, and country;
• run promotions and prevent abuse, including limiting welcome promotions to one per person, phone number, device, and payment method, blocking Promotional Token use on Content you own or are connected to, and detecting fake, duplicate, or linked accounts;
• detect and prevent fraud, chargeback abuse, account takeovers, and security incidents;
• run safety filters on Director requests and Outputs, and enforce the Director Terms;
• for creators, verify identity and eligibility, calculate Earnings and Tiers, make payouts, issue statements, and meet tax reporting obligations;
• recommend Content and personalize your experience, based on what you watch, follow, and unlock;
• moderate Content, respond to reports, process copyright and intimate-image requests, and enforce our Terms and Creator Agreement;
• communicate with you about your account, purchases, changes to our terms, and support, and, with the choices described in Section 7, about new Content and features;
• understand how the Platform is used and improve it, using aggregated or de-identified information where practical; and
• comply with law, respond to lawful requests, keep required records, and establish, exercise, or defend legal claims.

We do not use your personal information, creators' Content or private materials, or your Director Inputs, Outputs, or custom models to train or fine-tune generative AI models, and we do not let our providers do so, unless you give separate, express opt-in consent. The only exception is a custom model you ask Director to create from your own samples, which is used only for your account or team and is not used to train any other model. Creators' Content is used only as the Creator Agreement allows. We do not use voice or face samples you upload to identify you or anyone else; we use them only to create the custom models you ask for. We do not use gender to decide what Content you can see or what you pay.

Account, purchase, and, for creators, identity, payout, and tax information are required to provide those services. Without them we cannot create your account, complete a purchase, or pay you.

3 Automated decisions

We use automated tools to detect fraud and promotional abuse, for example to flag accounts that share a device or payment method or to decline a disposable phone number. An automated flag can delay or decline a promotion or hold a transaction for review, and temporary holds on creator Earnings may start automatically under Section 8.6 of the Creator Agreement. In Director, automated safety filters may block a request or an Output. A person reviews any decision to terminate an account, keep or reverse creator Earnings, or reset a creator's Tier, and you can appeal as described in our Terms and Creator Agreement. You can also ask for a person to review any automated decision about you by emailing us.

4 How we share information

We do not sell personal information, and we do not share it for cross-context behavioral advertising (targeted ads based on your activity on other sites). We share it only as follows:

• (a) Service providers. We use companies that process information for us under contracts that limit their use of it to providing services to us. These currently include Supabase (sign-in, database, and storage), Clerk (sign-in for Director), Stripe (payment processing and plan billing), Cloudflare (content delivery and security), the technology provider that hosts and operates Director's software for us, our payout provider (creator payouts; we will tell creators who it is before they set up payouts), and providers of email delivery, phone and identity verification, sanctions screening, tax forms, customer support, and creation tools you choose to use. Stripe and our payout provider also use information under their own privacy policies, for example to prevent fraud and meet anti-money-laundering laws.
• (b) AI model providers. When you run a generation or train a custom model in Director, we send your Inputs and the related instructions to the company that runs the model you chose, such as providers of video, image, voice, music, and 3D models. They process it to return your Output, and may keep it for a limited period under their terms, for example to monitor for abuse. We use providers whose terms do not allow them to train their general models on what we send. The current list of model providers is available on request at [email protected].
• (c) Link. Some Director purchases, including most purchases from outside the United States, are sold through Link, Stripe's checkout service, which acts as the seller for that purchase. Link receives your name, email, billing details, and order information, handles tax, receipts, and payment support for that purchase, and uses that information under the Link Privacy Policy.
• (d) Creators. Creators see summary statistics about their Content, such as views, unlocks, Token spend, and follower counts, and the public information described in item (f). We do not give creators your email address, payment information, or other private account information, except as item (g) describes.
• (e) Director teams. If you join a Director team workspace, the Account Owner and other members can see your name, email address, role, the projects and Outputs in the workspace, and your activity and Credit use there.
• (f) The public. Your display name, profile photo, and comments are visible to other users. A creator's channel, profile, and published Content are public.
• (g) Rights and safety reports. If you send a copyright notice, we may send it to the person who uploaded the material. If you send a counter-notice, the law requires us to send it, including your name, address, and telephone number, to the person who sent the original notice. We may share information with rights holders, as needed to resolve a dispute. We do not tell the uploader who sent an intimate-image or safety report.
• (h) Legal and safety. We share information with law enforcement, government authorities, or others when we believe in good faith it is required by law or legal process, or necessary to protect the rights, property, or safety of Aiscenix, our users, or the public. We report apparent child sexual exploitation to the National Center for Missing & Exploited Children as the law requires.
• (i) Business transfers. If Aiscenix is involved in a merger, acquisition, financing, reorganization, or sale of assets, information may be transferred as part of that transaction, subject to this Policy. We will notify you before your information becomes subject to a different privacy policy.
• (j) With your consent or at your direction, including when you connect Director to a third-party tool such as an AI assistant through MCP or the API.
• (k) Affiliates and promotional partners, to promote creators' published Content and channels, without your private account information.

We may share aggregated or de-identified information that cannot reasonably identify you. We do not try to re-identify de-identified information.

Your viewing history is protected. We disclose information that identifies the videos you watched only to you, to our service providers as needed to run the Platform, in a business transfer, with your separate written consent, or under a warrant, subpoena, or court order, as the Video Privacy Protection Act allows. The other sharing described above does not include your viewing history.

5 Cookies and similar technologies

We use only cookies and similar technologies that are needed to keep you signed in, remember your settings, secure the Platform, and prevent fraud. We do not use analytics cookies, advertising cookies, or advertising pixels. If we add analytics tools, we will update this Policy first and ask for your consent where the law requires it. We do not allow third parties to collect information about your activity over time and across other websites through the Platform for advertising. You can control cookies through your browser settings, but blocking essential cookies may stop parts of the Platform from working. Because we do not track you across websites for advertising, we do not change our practices in response to "Do Not Track" browser signals. We treat a Global Privacy Control signal as a request to opt out of the sale or sharing of your personal information; since we do not sell or share it, no further change is needed.

6 How long we keep information

We keep personal information only as long as needed for the purposes in this Policy:

• Account and profile information: while your account is open, then deleted or de-identified within 90 days after closure, except as listed below.
• Director projects, Inputs, Outputs, and custom models: while your plan is active, and for at least 30 days after your plan ends so you can download them or restart your plan, after which we may delete them. Character and voice samples and custom models are deleted when you delete them or your account.
• Information sent to AI model providers: kept by them only for the limited periods their terms allow, for example to monitor for abuse.
• Purchase, payout, Earnings, and tax records: 7 years, for accounting and tax purposes.
• Agreement acceptance, consent, and arbitration opt-out records: while your account is open and for 4 years after, or longer if a dispute is pending.
• Published Content after a creator removes it or closes their account: only as Section 4.7 of the Creator Agreement allows, such as serving viewers who already unlocked it, keeping existing promotional posts, and legal and backup copies.
• Comments: until you delete them or close your account, except copies others have shared.
• Copyright notices, counter-notices, and enforcement records: for as long as needed to apply our repeat-infringer policy and resolve claims.
• Fraud and abuse signals, such as phone numbers, device identifiers, and payment-method codes used to enforce promotion limits: up to 3 years after the account closes, to prevent the same person from repeating abuse.
• Backups: up to 90 days after deletion from our active systems.

We may keep information longer where the law requires it, or where it is needed for an ongoing legal claim or investigation.

7 Your choices and rights

7.1 Your rights. Depending on where you live, and in any case as a matter of our policy, you can ask us to: tell you what personal information we have about you and give you a copy; correct inaccurate information; delete your information; and give you your information in a portable format. You can also object to or ask us to restrict certain processing, and withdraw consent where we rely on it. Some requests may be limited where we must keep information for legal reasons, such as tax records, or to prevent fraud. If your information is in a Director team workspace controlled by an Account Owner, we may refer some requests to the Account Owner.

7.2 How to make a request. Email [email protected] with the subject line "Privacy request" from the email address on your account, and tell us what you are asking for. We will confirm receipt within 10 business days. We will verify your request by confirming your account email, and we may ask for more information where the request involves sensitive information. You can use an authorized agent; we may ask the agent for written proof of authority and ask you to confirm your identity. We will respond within 45 days, or tell you if we need up to 45 more days and why. If you are in the European Economic Area, the United Kingdom, or Switzerland, we will respond within one month, which we may extend by up to two months where the law allows. We will not discriminate against you for exercising your rights.

7.3 Appeals. If we deny your request, you can appeal by replying with the subject line "Privacy appeal" within 60 days after our response. We will respond within 45 days. If you are not satisfied, you may contact your state attorney general or data protection authority.

7.4 Marketing messages. You can unsubscribe from marketing emails at any time using the link in the email or your account settings. You will still receive messages about your account, purchases, renewals, and changes to our terms.

7.5 Account settings. You can update your profile and communication preferences in your account settings, and close your account as described in our Terms. In Director, you can delete projects, files, and custom models at any time.

8 Age requirement and children

The Platform, including Director, is only for adults 18 and older. We do not knowingly collect personal information from anyone under 18, including children under 13. If we learn that we have, we will close the account and delete the information, except records we must keep by law, such as purchase and refund records. If you believe someone under 18 has given us personal information, contact [email protected].

9 Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information, including encrypted connections, access controls, and limiting access to people who need it. No system is completely secure, and we cannot guarantee the security of information. Keep your login details and Director MCP and API credentials secure and tell us promptly about any unauthorized use of your account. If a security breach affects your personal information, we will notify you as the law requires.

10 International users

Aiscenix is based in the United States, and we process and store information in the United States and in other countries where our service providers and AI model providers operate. These countries may have data protection laws different from those where you live. Where the law requires, we use appropriate safeguards, such as standard contractual clauses, for international transfers.

If you are in the European Economic Area, the United Kingdom, or Switzerland, we process your personal information on these legal bases: to perform our contract with you, such as providing the Platform and Director, processing purchases, and paying creators; for our legitimate interests, such as preventing fraud and promotional abuse, securing the Platform, running safety filters, recommending Content, and improving our services, balanced against your rights; to comply with legal obligations, such as tax and copyright law; and with your consent, where we ask for it, which you can withdraw at any time. You may also complain to your local data protection authority.

11 California privacy notice

This section applies to California residents and supplements the rest of this Policy.

11.1 Information we collect and why. We collect the following categories of personal information: identifiers, such as name, email, phone number, IP address, and device identifiers; customer records, such as payment and, for creators, tax and payout details; commercial information, such as purchases, plans, Token use, and Credit use; internet activity, such as viewing, interaction, and Director usage history; approximate location and country; characteristics such as age, date of birth, and gender, if you provide it; inferences, such as viewing preferences used for recommendations; audio or visual information, such as profile photos, creator Content, and Director Inputs, Outputs, and voice and character samples; professional information, for creators and Director teams; and sensitive personal information, limited to account login credentials, government ID used for age or identity verification, and, for creators, tax identification numbers. We collect these from the sources in Section 1, use them for the purposes in Section 2, and disclose them for business purposes to the recipients in Section 4. We keep them for the periods in Section 6. We use sensitive personal information only to provide the Platform, verify identity, prevent fraud, meet legal obligations, and as otherwise permitted by law, and not to infer characteristics about you. Because we use it only for these permitted purposes, we do not offer a separate right to limit its use.

11.2 No sale or sharing. We do not sell personal information or share it for cross-context behavioral advertising, and we have never done so. We do not sell or share the personal information of anyone under 18.

11.3 Your California rights. You have the rights to know, delete, and correct described in Section 7, and the right not to be discriminated against for using them. You can make a request and appeal as Section 7 describes.

11.4 Notice of financial incentive. Free Promotional Tokens, such as a welcome promotion, are offered only to accounts that verify a phone number, which we use to limit each promotion to one per person. The value of the Tokens offered is shown with each promotion, and we consider it reasonably related to the value to us of preventing duplicate promotions. Participation is optional. You opt in by verifying your phone number and accepting the promotion, and you can withdraw at any time by removing your phone number from your account, after which you will not receive further phone-verified promotions. We may keep a protected record of numbers that have already received a promotion, as Section 6 describes, so the same number cannot receive it again.

11.5 Shine the Light. We do not disclose personal information to third parties for their own direct marketing purposes.

12 Changes to this Policy

We may update this Policy from time to time. We will post the new version with a new "Last updated" date. If we make a material change, we will notify you by email or in the Platform at least 30 days before it takes effect, unless a change is required sooner by law or to address safety, fraud, or security. We will not use personal information we already hold in a materially different way without notice and, where the law requires, your consent.

13 Contact us

Aiscenix Inc., 45 S Arroyo Pkwy #1033, Pasadena, CA 91105, United States. Email: [email protected], with the subject line "Privacy request" or "Privacy appeal." Website: aiscenix.com/contact.