SIMPLEFEM STUDIO

Privacy Policy

Last updated: June 20, 2026

1. Who we are

This Privacy Policy describes how Simplefem AI Movie Studio ("we", "us") processes personal data when you use the Service at studio.simplefem.ca.

2. Data we collect

  • Account data: email, display name, sign-in identifier (e.g. Google ID).
  • Project content: scripts, character descriptions, scene breakdowns, and AI-generated outputs you create.
  • Billing data: Stripe customer ID, subscription status, invoice metadata. We do not store card numbers.
  • Credit ledger: credit balance and transaction history (top-ups and spend).
  • Anti-abuse signal: a hashed device fingerprint collected at sign-up to detect duplicate accounts abusing the free-credit bonus.
  • Technical logs: standard server logs (IP, user agent, timestamps) for security and debugging.

3. How we use data

  • To provide and operate the Service (authentication, generating outputs, storing projects).
  • To process payments and manage subscriptions.
  • To prevent fraud and abuse of free credits.
  • To respond to support requests.
  • To comply with legal obligations (e.g. tax records).

4. Legal bases (GDPR)

If you are in the EEA or UK, we process your data under: contract (to provide the Service), legitimate interests (security, anti-abuse, product improvement), legal obligation (accounting), and consent where required.

5. Subprocessors

We share data only with the providers required to run the Service:

  • Lovable Cloud — hosting, database, authentication, storage.
  • Stripe — payment processing and subscription billing.
  • AI model providers — receive the prompts and inputs you submit in order to generate outputs. We do not sell your project content.
  • Google — if you choose Google sign-in.

6. Data retention

Account and project data are retained while your account is active. Billing records may be retained longer where required by tax or accounting law. You may request deletion of your account and associated content at any time from the Account page or by contacting us.

7. Your rights

Depending on your jurisdiction, you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise these rights, contact us via the email on file with your account.

8. Cookies

We use the minimum cookies and local storage required to keep you signed in and to remember UI preferences. We do not currently run third-party advertising or analytics trackers. If that changes, this policy will be updated.

9. International transfers

Our subprocessors operate globally and may process data outside your country of residence, including in the United States. We rely on standard contractual clauses and equivalent safeguards where applicable.

10. Children

The Service is not directed to children under 18 and we do not knowingly collect their data.

11. Changes

Material changes will be posted on this page with an updated effective date.

12. Contact

For privacy questions or data requests, contact us via the account email on file. See also our Trust & Privacy page.