Privacy Policy

This Privacy Policy explains how FalStudio (“we,” “us”) collects and processes personal data when you use our websites and applications. The controller is Auxora Limited (company number 16253784), trading as FalStudio, registered in England and Wales.

For the purposes of UK GDPR, Auxora Limited (trading as FalStudio) is the controller of personal data processed through the Service. Company number: 16253784. Privacy and data-protection requests: support@falstudio.ai. Product support: support@falstudio.ai.

Depending on how you use the Service, we may process:

• Account data: email, name/profile information, authentication credentials (hashed), account status.
• Production data: project/production names, scenes, shots, prompts, generation settings, characters, locations, voices, asset metadata.
• User content: uploaded images, videos, audio, and voice references.
• Generation data: prompts, references, generated outputs or URLs, seeds, request metadata, status, and error information.
• Payment data: purchase amounts, credit pack details, Stripe customer/session identifiers, and ledger entries. Payment-card details are processed by Stripe; FalStudio does not store complete card numbers.
• Affiliate data: referral codes, attribution, clicks, signups, commissions, and payout-related information.
• Technical data: IP address, browser/device information, logs, and security-related signals.
• Cookie data: essential authentication cookies; optional affiliate attribution; anonymous Vercel Web Analytics page views (no cookies). See the Cookie Policy.

We process personal data to provide the Service, authenticate users, process generations, take payments, operate the affiliate program, secure the platform, comply with law, and communicate about the account.

Depending on the activity, we rely on: performance of a contract (providing the Service, accounts, generations, and payments); legitimate interests (security, fraud prevention, service improvement, and affiliate attribution where consent is not required); consent (non-essential cookies, where shown); and legal obligation (tax, accounting, and compliance records).

To provide generation features, FalStudio sends User Content and related generation data, including prompts, images, videos, audio, and any personal data contained in those assets, to third-party AI and infrastructure providers for processing. This currently includes fal.ai for inference / generative media processing.

Generated media (such as videos, images, or audio) may be stored and served by fal.ai or other providers on their CDN or storage systems and accessed via temporary URLs. FalStudio may store references to those URLs, request metadata, and, in some cases, local copies you choose to download or lock in through the Service. Provider-hosted files remain subject to the provider’s retention, deletion, access, and security practices. Those files may become unavailable or be deleted according to the provider’s policies or configuration, which can change and are outside FalStudio’s exclusive control.

Exact providers and models may change. We do not expose fal API credentials to end users. We do not make warranties about fal’s retention periods, training practices, or privacy practices beyond what is stated in fal’s own documentation and legal terms applicable to our API usage. Review fal’s Privacy Policy, API Services Terms, and Data Processing Addendum (or equivalent) for provider-side processing. Planning estimates shown in the product about CDN retention are not guarantees of how long any provider will keep a particular file.

We use service providers to operate FalStudio. Current processors based on configuration:

• fal.ai (Features & Labels, Inc.) (active): AI inference / generative media processing (prompts, references, outputs) FalStudio sends generation requests to fal via server-side APIs. Models (e.g. MiniMax H3 Max) are third-party offerings accessed through fal. FalStudio does not expose fal API keys to end users. Provider policy
• Stripe (active): Payment processing for credit purchases; may process affiliate payouts if Connect is enabled Stripe Connect is enabled for affiliate payouts in this environment. Provider policy
• Neon (active): Managed PostgreSQL database hosting DATABASE_URL points at Postgres (Neon or compatible). Provider policy
• Vercel (active): Application hosting, networking, and related infrastructure FalStudio is designed to run on Vercel. Related logs and edge infrastructure may process request data. Provider policy
• Transactional email provider (active): Account, billing, and optional studio tip emails Sends verification, password reset, retention notices, and (when opted in) weekly Sunday/Thursday studio tip emails. Recipients can unsubscribe from tips anytime.

Better Auth is application software used for authentication; any underlying email or delivery vendors will be listed here when configured.

Personal data may be processed in the United Kingdom, European Economic Area, United States, and other countries where our providers operate (including fal.ai and Stripe). Where a transfer from the UK or EEA requires a safeguard, we rely on appropriate mechanisms such as the UK International Data Transfer Agreement or Standard Contractual Clauses, together with any supplementary measures our providers apply.

We retain account and production data while your account is active. Active paid subscriptions retain productions and FalStudio-stored media for the life of the subscription (subject to these Terms and applicable law). Pay-as-you-go or other non-subscribed accounts that remain inactive may have productions and associated FalStudio media deleted after a notice period (typically around 90 days of inactivity, with advance email warning where we have a valid address). After a deletion request, productions and media under FalStudio’s control are scheduled for purge (typically within 30 days). Credit ledgers, payment records, affiliate commissions, and fraud/security logs may be kept longer as needed for tax, accounting, dispute, and legal obligations, then anonymised where practicable (typically within 90 days after deletion for profile data that is no longer required).

Separately, generation outputs hosted by fal.ai or other AI providers may be retained or deleted on those providers’ systems according to their own retention settings and documentation (which may describe limited default CDN availability). FalStudio does not control provider-side deletion schedules. If you need lasting copies of generated media, download them; do not rely on provider URLs as permanent storage. When you save a take into FalStudio storage, that copy is retained under our account / production retention practices above until you delete it, your subscription/inactivity policy applies, or your account is purged.

When you request account deletion, FalStudio is designed to:

• Ability to sign in
• Active sessions
• Active productions and creatives (scheduled for deletion/anonymisation)
• Uploaded assets and generated media under FalStudio control (scheduled)
• Marketing preferences (if any)

We may retain, where lawful and necessary:

• Immutable credit ledger entries needed for accounting and dispute handling
• Stripe payment records and related identifiers
• Affiliate commission and payout records tied to prior transactions
• Records retained where required by law, fraud prevention, or legal claims

Subject to applicable law, you may have rights to access, correct, delete, restrict, or object to certain processing; data portability; and withdrawal of consent where processing is consent-based. You may also lodge a complaint with a supervisory authority (in the UK, the Information Commissioner’s Office).

To exercise rights, contact support@falstudio.ai. We may need to verify your identity.

The Service is not directed to individuals under 18. We do not knowingly collect personal data from children.

We may update this Policy. Material changes may be notified in-product or by email. The version you acknowledged at signup is stored with your account.