Privacy Policy

Last updated: [DATE]. Effective: [DATE].

This policy explains what personal information Madwackd Productions LLC ("Madwackd," "we," "us") collects through Madwackd Studio™ and www.madwackd.ai (the "Service"), how we use and share it, and the choices and rights you have.

1. Information we collect

Information you give us

Account details: name, email address, password (stored in hashed form) and business name if you add one.
Inputs: prompts, scripts, images, video, audio and voice samples you upload, and any consent records you provide for people shown or heard in them.
Messages: what you send through our contact form, support chat or producer services.
Purchase details: credit packs bought, amounts, dates and billing address. Card numbers are entered directly with Stripe, our payment processor. We do not see or store your full card number.

Information created when you use the Service

Outputs (videos and audio generated for you), quotes, render history, credit balance and safety-filter results.
Device and usage data: IP address, browser type, pages viewed, times and dates, and error logs.
Cookies and similar tools that keep you signed in, remember settings, prevent fraud and measure site use. [ZACH: list any analytics or ad pixels here; if none, say so.]

Information about other people

If your Inputs include another person's face, voice or name, you must have their consent before you upload them. We use that material only to provide the Service to you.

2. How we use information

To provide the Service: quoting, rendering video and voice, delivering Outputs and keeping your credit balance.
To process payments, refunds and credit returns, and to prevent fraud and chargeback abuse.
To keep the Service safe: running safety filters, enforcing our Acceptable Use Policy, and responding to removal and legal requests.
To provide support and producer services, and to send account and service notices.
To send marketing emails if you opt in. You can unsubscribe any time.
To meet legal, tax and accounting duties.

We do not use your Inputs or Outputs to train our own AI models, and we do not sell your personal information. We do not use voice samples to identify you; we use them only to create the voice you asked for. [ATTORNEY: confirm whether voice samples are "biometric data" under the Colorado Privacy Act and whether separate consent language is needed.]

3. How we share information

We share personal information only as needed to run the Service, with:

AI model providers, including Google Cloud (Vertex AI) for video generation and third-party text-to-speech voice providers, who process prompts and media to create your Outputs under their own terms. [ZACH: decide whether to name each provider here.]
Stripe, for payments and fraud prevention.
Hosting, storage, email and support vendors that work on our behalf under confidentiality duties.
Producers or contractors you choose to work with through our producer services.
Authorities or others when the law requires it, to answer valid legal process, to protect people from harm, or to report child sexual abuse material to the National Center for Missing & Exploited Children as required by law.
A buyer or successor if our business is sold, merged or reorganized, subject to this policy.

4. How long we keep information

Account and purchase records: while your account is open, then as long as needed for tax, accounting and legal purposes (generally up to 7 years for payment records).
Inputs and Outputs: until you delete them or close your account, plus up to [30] days in backups. [ZACH TO CONFIRM retention period.]
Safety and abuse records, including blocked prompts and removal requests: as long as needed to enforce our policies and meet legal duties.

5. Your choices and rights

Depending on where you live, you may have the right to:

Confirm whether we process your personal information and get access to it.
Correct inaccurate information.
Delete your information.
Get a copy of your information in a portable format.
Opt out of the sale of personal information, targeted advertising and profiling that produces legal or similarly significant effects. We do not sell personal information or use it for those kinds of profiling.
Not be treated differently for using these rights.

How to make a request: use the contact form on our website and choose "Privacy request." We will verify your identity before acting. You can use an authorized agent where the law allows. We respond within 45 days, and may extend once by 45 more days when reasonably necessary, with notice.

Colorado residents: If we deny your request, you may appeal by using the contact form and choosing "Privacy appeal." We will respond to appeals within 45 days. If you disagree with our answer, you may contact the Colorado Attorney General.

California residents: You have the rights described above under the California Consumer Privacy Act, as amended. In the last 12 months we collected the categories described in Section 1 (identifiers, commercial information, internet activity, audio and visual information, and inferences only as needed for safety) for the purposes in Section 2, and shared them only with the service providers described in Section 3. We do not sell or "share" personal information for cross-context behavioral advertising. [ATTORNEY: confirm whether CCPA applies at current size.]

Global Privacy Control: We honor browser opt-out signals such as Global Privacy Control as a request to opt out of any sale or targeted advertising.

6. Age limit

The Service is only for adults 18 and older. We do not knowingly collect personal information from children under 13 or from anyone under 18. If we learn we have, we will delete it. If you believe a minor has given us information, contact us through the contact form.

7. Security

We use reasonable safeguards, including encrypted connections (HTTPS), access controls and payment handling by Stripe, which is certified as a PCI Level 1 service provider. No system is perfectly secure, so we cannot promise absolute security. If a breach affects your personal information, we will notify you as required by law.

8. Where information is processed

We are based in the United States, and our providers may process information in the United States and other countries. By using the Service you understand your information may be processed outside your home country.

9. Changes to this policy

We may update this policy. If we make a material change, we will post it here and notify you by email or on the website before it takes effect.

10. Contact

Madwackd Productions LLC, 1001 Bannock St, Suite 660, Denver, CO 80204. For privacy questions or requests, use the contact form on our website.