Privacy Policy

1. Who we are

faceless.studio ("we", "us", "our") is a sole-trader business operated from New Zealand. We are the data controller responsible for your personal information under the New Zealand Privacy Act 2020 and, where applicable, the EU/UK GDPR.

For privacy questions or requests, contact us at support@facelesstudio.org.

2. Categories of data we collect

• Account data: email address, display name, hashed password.
• Usage data: scripts you generate, prompts you submit, credit balance and history.
• Billing data: subscription status, plan, transaction IDs (full card details are handled by our payments provider, never by us).
• Technical data: IP address, browser type, device, language, approximate location, and cookies necessary to keep you logged in.

3. How we use your data

• To provide the script-generation service and store your outputs.
• To process payments, manage subscriptions, and apply daily credit bonuses.
• To prevent fraud, abuse, and violations of our Terms.
• To send service-related emails (receipts, security alerts). Marketing emails are opt-in only.

4. Who we share data with

We share the minimum personal data required with the following processors:

• Paddle.com Market Limited — Merchant of Record for payments and tax.
• Supabase Inc. — Database, auth, and file storage.
• OpenAI, L.L.C. — AI model provider that processes the script prompts you submit.
• Cloudflare, Inc. — Hosting, CDN, and DDoS protection.

We never sell your personal data.

5. International transfers

Some of our processors are based in the United States and the European Union. Where personal data is transferred outside New Zealand, we rely on Standard Contractual Clauses or equivalent safeguards.

6. How long we keep your data

We retain account and content data for as long as your account is active. If you delete your account, we delete or anonymise your personal data within 30 days, except where we are legally required to keep transaction records (typically 7 years for tax purposes in New Zealand).

7. Your rights

Under the NZ Privacy Act 2020 (and GDPR where it applies), you have the right to access, correct, export, and delete your personal data, and to lodge a complaint with the Office of the Privacy Commissioner. Email support@facelesstudio.org to exercise any of these rights.

8. Cookies

We use a small number of strictly necessary cookies to keep you signed in and to remember your session. We do not use third-party advertising or tracking cookies.

9. Children

Our service is not directed to anyone under 16. We do not knowingly collect personal data from minors.

10. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be announced in-app or by email at least 14 days before they take effect.