This Privacy Policy explains how Buckshot Studios (“we”) collects, uses, shares, and protects personal data when you use our AI creative production platform (the “Service”).
1. Data we collect
- Account data — email address, display name, and avatar, provided directly or via your sign-in provider.
- Content — the prompts, uploaded reference files, and generated media (images, video, audio) associated with your account.
- Billing data — subscription and credit-purchase records. Card details are handled by our payment processor (Razorpay); we do not store full card numbers.
- Usage & technical data — log data, IP address, device/browser information, and operational metrics used to run and secure the Service.
2. How we use data
- To provide the Service — process your prompts and produce, store, and display your generated media.
- To bill you and prevent fraud or abuse (including rate limiting and credit metering).
- To secure, debug, maintain, and improve the Service.
- To communicate with you about your account and service changes.
- To comply with legal obligations.
3. Third-party processors
To generate media and run the Service, your prompts, reference files, and/or generated media are transmitted to the following categories of processors:
- AI model providers — KIE, Anthropic, Google, Replicate, Kling, RunPod, ElevenLabs, and similar generation/inference providers, which receive the prompt and any reference media required to fulfil your request.
- Cloud infrastructure — Amazon Web Services (compute, database, and S3/CloudFront storage and delivery, in the ap-south-1 region).
- Payments — Razorpay (billing and fraud prevention).
These providers process data on our behalf or as independent controllers under their own terms. We share only what is necessary to deliver the requested functionality.
4. Storage & retention
Your content and account data are retained for as long as your account is active and as needed to provide the Service. Generated media is stored on our cloud storage and served via CDN. We retain data as required to meet legal, accounting, and security obligations.
5. Your rights
Subject to your jurisdiction, you may request access to, correction of, or deletion of your personal data, and a copy of the data you provided. To exercise these rights, contact [email protected]. Deleting your account removes your account profile and associated generated media from active systems; residual copies in backups are purged on our standard backup cycle.
6. Security
We use industry-standard measures including encryption in transit, scoped access controls, and secret management. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.
7. Children
The Service is not directed to children under 18, and we do not knowingly collect their data.
8. Changes & contact
We may update this Policy; material changes will be posted here with a new “Last updated” date. Questions or requests: [email protected].