Privacy Policy

This Privacy Policy explains what information mythreel.studio collects when you use the Service at mythreel.studio, how we use it, and what rights you have over it. We've written this in plain language — no unnecessary jargon.

mythreel.studio is operated as a Vietnamese-primary service and complies with the Vietnamese Personal Data Protection Decree (Nghị định 13/2023/NĐ-CP, "PDPD") and, where applicable to EU residents, the General Data Protection Regulation (GDPR).

1. Information we collect

Account information

• Email address — used solely for magic-link authentication and transactional communications (sign-in links, billing receipts, important service notices).
• Session tokens stored as secure cookies to keep you signed in.

Content you create

• Text scripts you input for TTS generation. These are sent to Google's Gemini API to produce audio Output (see Third-party processors below).
• Generated audio and video Output files, stored so you can access them from your Library. You can delete them at any time.

Billing information

• Subscription plan, credit balance, and transaction history (transaction IDs, amounts, dates).
• Payment card processing is handled entirely by PayOS (VND payments) or Polar (USD payments). We never receive or store full card numbers — only metadata such as last 4 digits and transaction reference IDs returned by those processors.

Usage and technical data

• Basic usage events (e.g., "TTS generation started", "video exported") to monitor service health and debug issues.
• Request logs including IP address, browser type, and timestamps — retained for security and rate-limiting purposes.
• Google Analytics 4 events and page views to understand acquisition channels, signup funnels, and product usage patterns.

Local storage (browser-side only)

• User preferences such as selected voice configuration and render quality preset are saved in your browser's localStorage. These never leave your device unless you explicitly generate content using those settings.

2. How we use your information

Purpose	Data used
Authenticate your account and keep you signed in	Email address, session tokens
Generate AI voiceover and video output	Input scripts, generation parameters
Store and serve your generated content in your Library	Generated audio/video files
Process payments and manage your subscription and credits	Billing metadata, subscription plan
Security, abuse prevention, and rate limiting	IP address, request logs
Send transactional emails (sign-in links, receipts, important account notices)	Email address
Debug service issues and monitor uptime	Usage events, request logs

We do not sell your personal data to advertisers, data brokers, or any third parties. We do not use your data for any marketing purpose without your explicit consent.

3. Third-party processors

We share the minimum data necessary with the following service providers to operate mythreel.studio. Each is bound by their own data processing terms:

• Google (Gemini API) — your input scripts and generation parameters are sent to Google's AI APIs to produce audio and image Output. Google processes this data under their Privacy Policy and API Terms of Service.
• Resend — transactional email delivery (sign-in magic links, billing receipts).
• PayOS — Vietnamese payment processing (VND). Payment card data is handled exclusively by PayOS.
• Polar — international payment processing (USD). Payment card data is handled exclusively by Polar.
• Render — cloud hosting provider (United States) running our servers and database.
• Cloud storage — generated audio and video files are stored in cloud object storage (may include providers such as Cloudflare R2 or equivalent). Files are accessible only via authenticated requests.

4. Data retention

• Account data: Retained while your account is active. Deleted within 30 days of account deletion request.
• Generated content: Retained until you delete it or until 90 days after your account is deleted or subscription is cancelled, whichever comes first. After that period, files are permanently deleted.
• Request logs: Retained up to 30 days for security and debugging, then deleted.
• Billing records: Retained as required by applicable accounting and tax regulations (typically 5 years for Vietnamese tax compliance).

5. Your rights

Under the Vietnamese PDPD and (where applicable) the GDPR, you have the following rights. To exercise any of them, email us at hello@mythreel.studio with your account email and request. We will respond within 30 days.

• Right of access: Request a copy of the personal data we hold about you.
• Right to correction: Ask us to correct inaccurate data.
• Right to deletion: Delete your account from settings (or request deletion by email). We will complete deletion within 30 days, subject to legal retention obligations.
• Right to data portability: Request an export of your generated content and account information in a common format.
• Right to withdraw consent: Cancel your subscription or disconnect optional integrations at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.
• Right to object: Object to processing based on our legitimate interests by contacting us.

If you believe your rights have not been respected, you may lodge a complaint with the relevant data protection authority in your jurisdiction (in Vietnam: the Ministry of Public Security's Department of Cybersecurity and Hi-tech Crime Prevention; in the EU: your national supervisory authority).

6. Cookies and local storage

• Session cookie: A secure, HttpOnly cookie to maintain your authenticated session. This is strictly necessary for the Service to function.
• localStorage: Stores your UI preferences (voice settings, render preset) locally in your browser. No tracking or advertising cookies are used.

We use Google Analytics 4 to measure aggregate traffic, acquisition sources, and product funnel performance. We do not use advertising pixels or sell analytics data to advertisers.

7. Children's privacy

mythreel.studio is not directed at children under the age of 13 (or 16 for users in the EU/EEA). We do not knowingly collect personal data from children. If you believe a child has provided us with their information, please contact us and we will delete it promptly.

8. Vietnam — PDPD compliance

This policy is prepared in accordance with Decree 13/2023/NĐ-CP on Personal Data Protection (PDPD). Key points for Vietnamese users:

• Your personal data may be stored and processed on cloud infrastructure located outside Vietnam (including the United States), in compliance with applicable Vietnamese law on cross-border data transfers.
• You have the rights described in Section 5 above, as guaranteed under the PDPD.
• Data subjects in Vietnam may direct complaints to the Ministry of Public Security's relevant department.

9. International data transfers

mythreel.studio is operated from Vietnam but uses cloud providers and AI APIs based in the United States. When you use the Service, your input scripts are transmitted to Google's servers (US) for processing, and your account and content data is hosted on Render's infrastructure (US). By creating an account, you consent to this cross-border transfer as necessary to deliver the Service. We take reasonable steps to ensure these providers maintain adequate data protection standards.

10. Security

We use HTTPS for all data in transit and industry-standard security practices for data at rest. Access to our production database and storage is restricted to authorized services. No system is completely secure; if you suspect your account has been compromised, contact us immediately at hello@mythreel.studio.

11. Changes to this policy

We may update this Privacy Policy from time to time. For material changes, we will provide at least 30 days' notice via email or prominent notice within the Service before the updated policy takes effect. Continued use after that date constitutes acceptance of the updated policy.

12. Contact

Privacy questions or data rights requests: hello@mythreel.studio

---