This page says which of your data we process, whom we forward it to, where it is stored, for how long, and how to ask for deletion. The policy covers the whole platform, with particular attention to the Studio, because that is where data is forwarded to model providers outside our control.
The controller is [POPUNITI: pun poslovni naziv i pravna forma], [POPUNITI: adresa sedišta], company number [POPUNITI: matični broj], tax number [POPUNITI: PIB]. For any question about data processing and for the requests in section 6, write to [POPUNITI: kontakt email za zaštitu podataka].
Account: email address, first and last name, username, language, avatar, role and the time your email was confirmed. If you sign in with a Google account, Google gives us your email, name and profile picture.
Learning and community: lesson progress, work submitted with tasks, posts, comments and the messages you write yourself.
Studio: the prompt, model parameters, the files you upload as input, the generated files, the price in credits, the time, the job status and a fingerprint of the prompt.
Billing: credit and transaction history, Stripe customer, subscription, session and invoice identifiers. We never see or store your card number - only Stripe processes it.
fal.ai (fal, Inc., USA) - prompt, parameters and input files for the models fal.ai runs, including the ElevenLabs models for speech, music and audio processing. Without that forwarding there is no generation.
Google (Google LLC / Google Ireland Limited) - prompt, parameters and input files for the Gemini and Veo models; separately from that, Google is also the sign-in provider if you choose to sign in with a Google account.
BytePlus (BytePlus Pte. Ltd., Singapore) - prompt, parameters and input files for the Seedream and Seedance models.
Stripe (Stripe, Inc. / Stripe Payments Europe) - email, amount, tax status and payment data, for charging and invoicing.
Convex (Convex, Inc.) - the platform database and file storage. Resend (Resend, Inc.) - sending account emails and notifications. Vercel (Vercel, Inc.) - hosting the application itself.
Some of these processors are outside the European Economic Area, chiefly in the USA. The transfer relies on the standard contractual clauses in their data processing agreements. We do not sell your prompts or files and do not forward them to anyone for advertising.
Performance of a contract: the account, course access, Studio generations and billing. Without this data the service cannot be provided.
Legal obligation: accounting and tax records of the services charged.
Legitimate interest: content moderation, prevention of abuse and fraud, and platform security. On that basis authorised staff may review generated content, as stated in the Studio terms of use; every full access to an individual job is logged.
Generated video: 30 days. Generated images and audio: 90 days. An input file not used in any generation: 24 hours.
Generation metadata and the credit ledger are kept permanently, because they are the record of what was charged. Account data is kept as long as the account exists. Accounting records are kept for the periods required by tax law.
You have the right to access your data, to correct it, to have it deleted, to restrict processing, to data portability, and to object to processing based on legitimate interest.
Send the request from the account's email address to [POPUNITI: kontakt email za zaštitu podataka], saying what you are asking for. We answer within 30 days at the latest. You can also delete an individual generation yourself from the Studio gallery.
Deleting an account does not delete what the law requires us to keep - accounting records and the record of services charged - nor content that is the subject of a report until that report is resolved. When an account is deleted, unused credits lapse and are not paid out.
If you believe we process your data unlawfully, you have the right to lodge a complaint with the competent data protection authority.
We use only the cookies necessary for the platform to work: sign-in and session handling. We have no advertising or marketing cookies and do not track you across other sites.
We may change this policy; a change is published on this page with a new date. For questions about the contract rather than the data, write to [POPUNITI: kontakt email za podršku].
