Privacy Policy

At Enlighten 3D Inc., a Delaware corporation ("we," "us," "our," or "Company"), we respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, share, and protect information when you use Superdirector (the "Service").

By using the Service, you consent to the data practices described in this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the Service.

We collect several types of information to provide and improve our Service:

1.1 Information You Provide

• Account Information: Name, email address, and password when you create an account
• Payment Information: Billing details processed securely through Stripe (we do not store your full credit card numbers)
• User Content: Video URLs you submit for analysis, production plans, templates, and other content you create within the Service
• Communications: Messages, feedback, or support requests you send to us

1.2 Information Collected Automatically

• Usage Data: Features you use, videos you analyze, searches you perform, and actions you take within the Service
• Device Information: IP address, browser type and version, device type, operating system, and unique device identifiers
• Log Data: Access times, pages viewed, clickstream data, and other diagnostic information
• Cookies and Tracking: We use cookies and similar tracking technologies to maintain your session and analyze usage patterns (see Section 9)

1.3 Information from Third Parties

• Video Metadata: When you submit a video URL, we retrieve publicly available metadata (title, author, thumbnail, duration) from platforms like YouTube and Instagram
• OAuth Information: If you sign up using a third-party authentication provider (e.g., Google), we receive basic profile information they provide
• Payment Processors: Stripe provides us with payment status and subscription information (but not your full payment card details)

We use the information we collect for the following purposes:

2.1 To Provide and Improve the Service

• Process video URLs and generate AI-powered analyses
• Store and retrieve your analyses, production plans, and templates
• Provide semantic search functionality across your content
• Generate scripts, storyboards, and production recommendations
• Improve our AI models, algorithms, and Service features
• Develop new features and functionality

2.2 To Manage Your Account

• Authenticate your identity and maintain your session
• Process subscription payments and manage billing
• Track usage limits and enforce subscription tier restrictions
• Communicate important account or Service updates

2.3 For Security and Legal Compliance

• Detect, prevent, and respond to fraud, abuse, or security incidents
• Enforce our Terms of Service and protect our legal rights
• Comply with applicable laws, regulations, and legal processes
• Respond to law enforcement requests and legal obligations

2.4 For Analytics and Communications

• Analyze usage patterns to improve the Service
• Send you technical notices, updates, and support messages
• Respond to your inquiries and support requests
• Send marketing communications (with your consent)

Artificial Intelligence Services: We use third-party artificial intelligence and machine learning services to analyze videos and generate content. When you submit a video for analysis, we send the video URL and metadata to external AI service providers. These services process information in accordance with their respective privacy policies and terms of service. We select AI providers based on their security, privacy practices, and technical capabilities.

AI Training on Platform-Stored Content: We use Production Plans, Video Analyses, and User Input that remain stored on our Service to train and improve our AI models, develop new features, and enhance Service capabilities. This includes analyzing patterns, aggregating insights, and creating derivative works for product improvement purposes. This usage applies only to content while it is stored on our platform.

Off-Platform Content Exclusion: We do not use any Production Plans, analyses, or content that you have exported, downloaded, or otherwise removed from our Service platform for AI training, product improvement, or any other purpose. Once content leaves our platform, our license to use it terminates.

Production Plans Ownership: You retain ownership of all Production Plans (scripts, storyboards, production setups) generated through the Service. While your content is stored on our platform, we have an unlimited license to use it for AI training and Service improvement as described above and in our Terms of Service.

Other Third-Party Services: We also use:

• Vercel: Infrastructure and hosting provider
• Supabase: Authentication and database services
• Stripe: Payment processing
• Apify: Instagram data scraping (when analyzing Instagram content)
• Rendi.dev: Video frame extraction services

Each third-party service processes data according to their own privacy policies. We share only the minimum information necessary to provide the Service.

We do not sell your personal information. We share your information only in the following circumstances:

4.1 Service Providers

We share information with third-party service providers who perform services on our behalf, including:

• Cloud hosting and infrastructure providers
• AI and machine learning service providers
• Payment processors
• Authentication services
• Analytics providers

These providers are contractually obligated to protect your information and use it only for the purposes we specify.

4.2 Legal Requirements

We may disclose your information if required to do so by law or in response to:

• Valid legal processes (subpoenas, court orders, search warrants)
• Government or regulatory requests
• Requests to protect our rights, property, or safety
• Emergencies involving potential harm to persons

4.3 Business Transfers

If we are involved in a merger, acquisition, sale of assets, or bankruptcy, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.

4.4 With Your Consent

We may share your information with third parties when you explicitly consent to such sharing.

We retain your information for as long as necessary to provide the Service and fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Account Data: Retained while your account is active and for a reasonable period after account deletion to prevent fraud and comply with legal obligations
• User Content: Video analyses and production plans are retained until you delete them or close your account
• Usage Data: Aggregated and anonymized usage data may be retained indefinitely for analytics and improvement purposes
• Payment Records: Retained for 7 years to comply with tax and accounting regulations

When we delete information, we take reasonable measures to make it unrecoverable or irreversibly anonymized.

Depending on your location, you may have certain rights regarding your personal information:

6.1 General Rights

• Access: Request a copy of the personal information we hold about you
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your personal information (subject to legal obligations)
• Portability: Receive your data in a structured, machine-readable format
• Objection: Object to certain processing of your information

6.2 GDPR Rights (European Economic Area)

If you are located in the EEA, you have additional rights under the General Data Protection Regulation (GDPR):

• Right to withdraw consent at any time
• Right to restrict processing of your data
• Right to lodge a complaint with your local data protection authority
• Right to object to processing based on legitimate interests

Legal Basis for Processing: We process your data based on:

• Contract performance (providing the Service you subscribed to)
• Legitimate interests (improving the Service, preventing fraud)
• Consent (for marketing communications)
• Legal obligations (compliance with laws and regulations)

6.3 CCPA/CPRA Rights (California)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know: Request disclosure of personal information we collect, use, and share
• Right to Delete: Request deletion of your personal information
• Right to Correct: Request correction of inaccurate information
• Right to Opt-Out: We do not sell personal information, but you may opt-out of certain sharing
• Right to Limit: Limit use and disclosure of sensitive personal information
• Right to Non-Discrimination: Exercise your rights without discriminatory treatment

Categories of Information: We collect identifiers, commercial information, internet activity, and inferences as described in Section 1.

6.4 Exercising Your Rights

To exercise any of these rights, please contact us at contact@enlightenanimation.com. We will respond to verified requests within the timeframes required by applicable law (typically 30-45 days).

You can also access, update, or delete much of your information directly through your account settings.

We implement reasonable security measures to protect your information from unauthorized access, alteration, disclosure, or destruction:

• Encryption: Data is encrypted in transit using TLS/SSL and at rest using industry-standard encryption
• Access Controls: Strict access controls and authentication requirements for internal systems
• Monitoring: Regular security audits and monitoring for suspicious activity
• Incident Response: Documented procedures for responding to security incidents

However, no method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.

We are based in the United States, and our service providers may be located in various countries. If you access the Service from outside the United States, your information may be transferred to, stored in, and processed in the United States or other countries.

EU-U.S. Data Transfers: For users in the European Economic Area, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission to transfer data to countries outside the EEA. We also conduct transfer impact assessments and implement supplementary measures as needed.

By using the Service, you consent to the transfer of your information to countries that may have different data protection laws than your country of residence.

We use cookies and similar tracking technologies to provide and improve the Service:

Types of Cookies We Use

• Essential Cookies: Required for authentication and core functionality (these cannot be disabled)
• Performance Cookies: Help us understand how you use the Service to improve it
• Functional Cookies: Remember your preferences and settings

Managing Cookies

Most browsers allow you to control cookies through their settings. However, disabling cookies may limit your ability to use certain features of the Service. You can learn more about cookies at www.allaboutcookies.org.

The Service is not intended for users under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected information from a child under 18, we will take steps to delete such information promptly.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at contact@enlightenanimation.com.

The Service may contain links to third-party websites or services (e.g., YouTube, Instagram). We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party sites you visit.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will post the updated Privacy Policy on this page with a new "Last Updated" date.

For material changes, we will provide additional notice (such as by email or through a prominent notice on the Service). Your continued use of the Service after the effective date of an updated Privacy Policy constitutes acceptance of the updated policy.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

For GDPR-related inquiries: If you are located in the EEA and have unresolved concerns, you have the right to lodge a complaint with your local data protection authority.

For CCPA-related inquiries: California residents may also contact the California Attorney General's office regarding privacy concerns.