Privacy

We process only the data needed to run, secure, bill, and improve Unfaced.

Videos you publish to YouTube through Unfaced are labeled as AI-generated using the platform's own flag, and exported caption files carry the same disclosure line.

• Account and contact data, such as your email, locale, login events, and marketing preference. If you subscribe to weekly creator ideas without an account, we also keep the signup source and confirmation, send, and unsubscribe timestamps.
• Workspace content, including briefs, scripts, uploads, brand assets, generated media, review decisions, series settings, and publication metadata.
• Connected-platform identifiers, permissions, encrypted access and refresh tokens, and publishing results. We do not receive your platform password.
• Billing records such as plan, Stripe customer and transaction identifiers, credits, invoices, and tax status. Card and bank details are handled by Stripe, not stored by Unfaced.
• Technical and security data such as IP address, device and browser information, logs, error traces, rate-limit events, and cookie or analytics identifiers when enabled.

We use account, content, generation, publishing, and billing data to perform our contract with you (GDPR Article 6(1)(b)). We use necessary logs, fraud controls, service analytics, backups, and security measures for our legitimate interests in operating a reliable and safe service (Article 6(1)(f)). We process tax, accounting, and lawful-request data to meet legal obligations (Article 6(1)(c)). Optional marketing and non-essential analytics rely on consent where consent is required (Article 6(1)(a)).

We do not sell personal data. We do not use your private uploads to train a general-purpose model unless you separately opt in.

A provider receives data only when its specific function is used.

• Amazon Web Services: application compute, database, queues, logs, and backups (EU region where configured).
• Cloudflare: object storage, delivery, DNS, and security (global network; EU safeguards as applicable).
• Apple: Sign in with Apple and App Store purchase processing (account or purchase data as applicable).
• Google: Gemini generation, Google sign-in, and YouTube connection or publishing (content, prompts, account or channel data as applicable).
• ElevenLabs: speech generation and word timing (script text and generation metadata).
• Alibaba Cloud / DashScope: optional speech generation (script text and generation metadata).
• fal.ai: optional image generation (prompts and reference media).
• Pexels: stock-media search and retrieval (search terms and request metadata).
• Spacemail (SMTP): transactional and lifecycle email (email address and message metadata).
• Stripe: web checkout, subscriptions, payments, invoicing, and tax (billing and transaction data).
• RevenueCat: mobile-store subscriptions, purchases, entitlements, and purchase recovery (account identifier and purchase history).
• PostHog (EU cloud): web product analytics when enabled (usage and device data; in the studio also your account ID, email address and name). Mobile product interactions use Unfaced's own consent-gated analytics service.
• Google (Google Analytics): website usage statistics, only after you accept analytics cookies (usage and device data, pseudonymous identifiers).
• Sentry: error monitoring when enabled (technical diagnostics that may contain account or request identifiers).

Some providers operate outside the European Economic Area. Where required, transfers rely on an adequacy decision, the European Commission's standard contractual clauses, and supplementary safeguards. Provider terms and locations can change; the live subprocessor list will be updated before a new material recipient is used.

We keep account and workspace data while your account is active. Draft media may be removed on the product retention schedule; final exports remain until you delete them or close the account. You can delete a video and its files from your library at any time, and deleting your account removes your workspace, videos, and files. Copies already published to a connected platform are not removed. Delete them on the platform itself. Consent-gated mobile product-interaction events are kept for at most 180 days and are deleted immediately when you turn that analytics setting off. Newsletter records are kept while you are subscribed; after unsubscribe, a suppression record may be retained so we do not send again. Deleted data may remain in protected backups for a limited rotation period. Billing and tax records are retained for the period required by law. Security logs are kept only as long as reasonably needed to investigate abuse and incidents.

We use access controls, encryption in transit, encrypted connected-platform tokens, isolated workers, audit and cost records, and protected backups. No online system is risk-free; contact us promptly if you believe your account or content has been exposed.

Depending on the law that applies, you may request access, correction, deletion, restriction, portability, or objection, and may withdraw consent at any time without affecting earlier processing. You may complain to your local data-protection authority. We may need to verify your identity before acting on a request.

Essential cookies keep you signed in and protect the service. Optional analytics is used only under the consent rules that apply to you. Google Analytics loads only after you choose “Accept analytics” in the cookie notice; with “Essential only” it never loads, and neither does it when your browser sends Do-Not-Track or Global Privacy Control. Your choice is stored in a cookie for six months, and you can change it at any time under “Cookie settings” in the footer. The weekly creator-ideas email requires a separate signup and email confirmation. Every edition includes an unsubscribe link. Account holders do not receive weekly idea emails; service and security messages may still be sent.

Automated systems generate and rank creative output and may apply safety or abuse controls. They do not make decisions that produce legal or similarly significant effects about you. A human review step remains available before publishing unless you deliberately enable an earned auto-publish setting.

Use the controller contact details below for privacy requests. We will update this notice when data use or providers materially change and will announce important changes through the service or by email.