Privacy Policy

1. Introduction

Stillglow ("Company", "we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our photo animation services.

Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site.

2. Information We Collect

Personal Information

We may collect personal information that you provide directly to us, such as:

• Name and contact information (email address)
• Account credentials (username, password)
• Payment information (processed through secure third-party providers like Creem)
• Profile information (avatar, preferences)
• Communications with us (support tickets, emails)

Photos and Generated Content

When you use our photo animation service, we collect:

• Photos you upload for animation processing
• Generated video content created from your photos
• Metadata associated with your uploads (file size, format, upload time)

Important: Your uploaded photos and generated videos are automatically deleted from our servers after 30 days. We recommend downloading your content before this period ends.

Automatically Collected Information

When you visit our Service, we automatically collect certain information, including:

• Device information (IP address, browser type, operating system)
• Usage data (pages visited, time spent, clicks)
• Cookies and similar tracking technologies
• Log data (access times, referring URLs)

Information from Third-Party Services

If you authenticate using OAuth providers (Google), we may receive:

• Basic profile information (name, email, profile picture)
• Authentication tokens

3. How We Use Your Information

We use the information we collect to:

• Provide our photo animation service and generate video content
• Process transactions and manage your account and credits
• Send administrative information and service updates
• Respond to your comments, questions, and support requests
• Improve and personalize your experience
• Monitor and analyze usage patterns and trends
• Develop new features and improve our AI models
• Prevent fraud and enhance security
• Comply with legal obligations

Note: We do not use your personal photos to train our AI models without your explicit consent. Your photos are only processed to generate the specific animation you requested.

4. Data Retention

We retain your information as follows:

• Uploaded photos: Deleted after 30 days
• Generated videos: Deleted after 30 days
• Account information: Retained until you delete your account
• Transaction records: Retained for 7 years for legal and accounting purposes
• Support communications: Retained for 2 years

When we no longer need your information, we will securely delete or anonymize it in accordance with our data retention policies.

5. How We Share Your Information

We may share your information in the following situations:

With Service Providers

We share information with third-party vendors who perform services on our behalf, such as:

• Payment processors (Creem)
• Cloud hosting and storage providers (Cloudflare R2)
• AI processing services (for video generation)
• Analytics services
• Email service providers (Resend)

For Legal Purposes

We may disclose your information when required by law or to:

• Comply with legal obligations
• Respond to lawful requests from public authorities
• Protect our rights, privacy, safety, or property
• Enforce our terms and agreements

Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction.

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal information, including:

• Encryption of data in transit (SSL/TLS)
• Encryption of photos and videos at rest
• Secure cloud storage with access controls
• Regular security audits and assessments
• Access controls and authentication requirements

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

7. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

Access and Portability

You can request access to your personal information and download your generated content before the 30-day deletion period.

Correction and Update

You can update your account information through your profile settings.

Deletion

You can request deletion of your account and all associated data by contacting us.

Marketing Communications

You can opt-out of marketing emails by clicking the unsubscribe link or contacting us directly.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws than your country.

We take appropriate safeguards to ensure that your personal information remains protected in accordance with this Privacy Policy.

9. California Privacy Rights (CCPA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA), including:

• The right to know what personal information we collect, use, and disclose
• The right to request deletion of your personal information
• The right to opt-out of the sale of personal information (we do not sell personal information)
• The right to non-discrimination for exercising your privacy rights

10. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, you have additional rights under the General Data Protection Regulation (GDPR), including:

• The right to be informed about data processing
• The right to rectification of inaccurate data
• The right to erasure ("right to be forgotten")
• The right to data portability
• The right to object to processing
• Rights related to automated decision-making
• The right to lodge a complaint with supervisory authorities

11. Children's Privacy

Our Service is not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18. If you become aware that a child has provided us with personal information, please contact us immediately.

12. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Effective Date" at the top.

For significant changes, we will provide additional notice through email or a prominent notice on our Service.

13. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

• Email: privacy@stillglow.org
• Support: support@stillglow.org
• Website: https://stillglow.org