Privacy Policy

This Privacy Policy describes how 2036 Studios ("we", "us", "our") collects, uses, holds and discloses your personal information when you use https://www.2036studios.ai and our related services (collectively the "Service"). We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

1. What we collect

1.1 Account information. When you create an Account we collect your email address, display name, optional avatar image, and an encrypted password. If you sign in via a third party (such as Google) we receive the basic profile information that provider sends to us.

1.2 Content you upload. Prompts you type, reference images, video and audio you upload, and the generated outputs you create are stored to make the Service work.

1.3 Payment information. Card details are collected and processed by Stripe, our payment provider. We never store full card numbers ourselves. We retain transaction metadata (amount, currency, last four digits, billing email) for accounting, dispute resolution and tax purposes.

1.4 Usage data. We collect basic usage telemetry such as IP address, user agent, pages visited, features used, and credit balances. We use this for fraud prevention, debugging, capacity planning and product analytics.

1.5 Communications. When you contact us at hello@2036studios.ai or via our contact form, we retain the message and your contact details so we can respond and improve our support over time.

2. How we use your information

We use the personal information we collect to:

1. operate, maintain and improve the Service;
2. process payments and prevent fraud;
3. send you transactional emails (signup confirmation, password reset, purchase receipts, account notifications);
4. send you product updates and marketing emails (you can unsubscribe at any time);
5. respond to your requests and provide customer support;
6. investigate and address violations of our Terms of Use;
7. comply with our legal obligations and protect our legal rights.

3. Generative AI inputs and outputs

Prompts, reference images, videos, audio and other inputs you submit to the Service are sent to third party AI providers so that those providers can generate the requested Output. Currently these are BytePlus (video, image and whole-scene audio generation, processed in Singapore), OpenAI (image generation and writing assistance such as prompt polishing and script drafting), and ElevenLabs (voice synthesis, transcription and voice cloning). Those providers process inputs in accordance with their own privacy terms. We may also use your inputs and outputs to train, evaluate and improve our own models and the Service, as described in our Terms of Use. We do not sell your personal information to third parties for advertising purposes.

3a. Voice cloning and biometric-type information

Some features accept material that can identify a person by their body or voice - for example a voice recording used to create a cloned voice, or a reference photo containing a face. Under the Privacy Act this kind of material can be sensitive information, so we only collect it with your consent, which you give by choosing to use the feature. You must only submit your own voice or likeness, or another person's with their documented consent. Cloned voices are private to your account, are not used to train shared models, and you can delete a cloned voice or ask us to remove the underlying recording at any time by using the in-product controls or emailing hello@2036studios.ai.

4. Who we share your information with

We share personal information only with service providers acting on our behalf and only to the extent necessary to deliver the Service. Current providers include:

1. Supabase (database, authentication, storage): hosted in the AWS Sydney region.
2. Vercel (web hosting, edge network).
3. Stripe (payment processing).
4. Namecheap Private Email (transactional email delivery).
5. BytePlus (AI video, image and audio generation).
6. OpenAI (AI image generation and writing assistance).
7. ElevenLabs (AI voice synthesis, transcription and voice cloning).

We may also disclose personal information where required by law, in response to a valid legal request, or where necessary to protect the rights, property or safety of 2036 Studios, our users or the public.

5. Overseas disclosures

Some of our service providers are located outside Australia, including in the United States, the European Union and Singapore (where BytePlus processes generation requests). By using the Service you consent to your personal information being disclosed to recipients in those countries. We take reasonable steps to ensure overseas recipients handle your personal information in a manner consistent with the APPs.

6. How we store and protect your information

We store personal information in Supabase's AWS Sydney environment. We use industry standard security measures including encryption in transit (HTTPS / TLS), encryption at rest, role based access controls, and regular security audits. No internet transmission or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security. If a data breach occurs that is likely to result in serious harm, we will notify affected users and the Office of the Australian Information Commissioner in accordance with the Notifiable Data Breaches scheme under Part IIIC of the Privacy Act.

7. How long we keep your information

We retain your personal information for as long as your Account is active or as needed to provide you with the Service. After Account closure we retain limited information for the period required by law (for example, financial records under Australian tax law are kept for at least five years).

8. Your rights

You have the right to:

1. request access to the personal information we hold about you;
2. request correction of inaccurate or out of date information;
3. request deletion of your Account and the personal information it contains, subject to our retention obligations under law;
4. opt out of marketing emails at any time via the unsubscribe link in those emails or by emailing us;
5. lodge a complaint with us, or with the Office of the Australian Information Commissioner (OAIC) at https://www.oaic.gov.au.

To exercise any of these rights, email us at hello@2036studios.ai. We will respond within 30 days.

9. Cookies

We use cookies and similar technologies as described in our Cookie Notice.

10. Children

The Service is not intended for users under 18. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with personal information, please contact us so we can delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. If we make material changes we will notify you by email or via a prominent notice on the Service.

12. Contact

Questions or concerns about this Privacy Policy can be sent to hello@2036studios.ai.