Home / Privacy Policy
Privacy Policy
Last updated: 3 November 2026
Chaos Systems s. r. o., Šikmá ulica 967/7, 900 50 Hrubá Borša, Slovakia, IČO 56 315 341, registered in the Commercial Register of the Municipal Court Bratislava III, section Sro, insert no. 179114/B, is the controller of the personal data described here. Contact: . We have not appointed a Data Protection Officer, as our processing doesn't require one; write to the address above about anything in this policy.
What we collect and why
| Data | Purpose | Legal basis (GDPR) |
|---|---|---|
| Email, name, password hash, Google account ID (if you use Google sign-in) | Create and secure your account | Contract (Art. 6(1)(b)) |
| Projects, scenes, storyboard text, uploaded images, renders | Provide the service | Contract |
| Voice recordings for characters (yours or someone who agreed), the speaker's name, and the consent you gave (statements, date, IP address, browser string) | Make characters speak in that real voice; prove the voice was used with permission | Consent (Art. 6(1)(a)) — the speaker's and yours; withdraw by deleting the voice [counsel: voice as biometric data, Art. 9 / BIPA] |
| Provider API keys (encrypted) | Call the Providers you choose | Contract |
| IP address, device/browser string, sign-in and security events | Security, fraud and abuse prevention, session list | Legitimate interests (Art. 6(1)(f)) |
| Billing details: Stripe holds your name, email, billing address and payment method; we keep only the Stripe customer and subscription IDs, your plan, its status and renewal date | Charge paid plans and credit packs, invoices, accounting and tax records | Contract (Art. 6(1)(b)), legal obligation (Art. 6(1)(c)) |
| Marketing email preference | Product news, only if you opt in | Consent (Art. 6(1)(a)) — withdraw any time |
| Anonymous usage statistics | Improve the product, only if you allow it in cookie settings | Consent |
Providers you choose
When you render, your prompts, images and — when a clip uses a character's real voice — that voice recording are sent to the AI Provider whose key you use (e.g. fal.ai, Higgsfield, Google, Runway, Anthropic, OpenAI). Some models, like Kling, keep a registered copy of a voice in your own provider account; delete it there too. They process that data under their own terms and privacy policies, as your chosen service. We send only what's needed for the clip.
Who else processes data
Hosting, email delivery, payments and similar vendors process data on our behalf under data processing agreements. See Subprocessors. Where data leaves the EEA/UK we rely on adequacy decisions or Standard Contractual Clauses.
How long we keep it
- Account and project data: while your account exists. Deleting your account erases it immediately from live systems and from backups within 30 days.
- Voice recordings and their consent records: until you delete the voice (Character Studio → Voice extract), the character or your account — then removed from live systems immediately and from backups within 30 days. Copies registered in your own provider account must be deleted there.
- Security logs: up to 12 months.
- Billing and accounting records: 10 years, as Slovak accounting law requires.
Your rights
You can access, correct, export (Settings → Download my data), restrict or object to processing, withdraw consent, and erase your data (Settings → Delete my account). Contact for anything else. You may complain to the Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov SR, Hraničná 12, 820 07 Bratislava, dataprotection.gov.sk) or to the authority where you live or work.
Security
See our security overview. We never sell personal data and never use your content to train models.
Children
ScriptedReel isn't for anyone under 16.
Changes
We'll announce material changes by email or in the app before they apply.
See also: Terms · Privacy · Cookies · Acceptable Use · Subprocessors · Security