AI Director Privacy Policy

1. Introduction

MATA AI ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. MATA AI is a trade name operated by Daniel Isaac Mata Padilla, an individual conducting business under Mexican law.

This Privacy Policy explains how we collect, use, store, and protect information when you use AI Director, our AI-powered video generation service.

2. Information We Collect

2.1 Information You Provide

• Text Prompts: Descriptions and instructions you provide for video generation
• Images: Reference images you upload for creative direction
• Storyboards: Sketches and visual guides you create or upload
• Configuration Data: Video settings (duration, aspect ratio, resolution, platform)
• Payment Information: Processed securely by Stripe (we never store complete credit card numbers)

2.2 Automatically Collected Information

• Technical Data: IP address, browser type, device information, operating system
• Usage Data: Pages visited, features used, generation history, interaction patterns
• Browser Storage: Session data stored locally for functionality (sessionStorage, localStorage)
• Cookies: Essential cookies for service functionality

3. How We Use Your Information

We use collected information for:

• Service Delivery: Processing your video generation requests
• Payment Processing: Completing transactions through Stripe
• Customer Support: Responding to inquiries and resolving issues
• Service Improvement: Analyzing usage patterns to enhance features and performance
• AI Model Improvement: Using aggregated, anonymized data to train and improve AI models (only with consent)
• Legal Compliance: Meeting legal obligations and protecting rights
• Communication: Sending order confirmations, delivery notifications, and important service updates

4. Data Storage and Security

4.1 Storage Locations

• Session Storage: Temporary generator state stored locally in your browser (cleared when session ends)
• Local Storage: Pending orders temporarily stored for payment recovery
• Secure Servers: Video generation requests and results stored on encrypted servers
• Cloud Storage: Generated videos temporarily hosted for delivery (deleted after 30 days)

4.2 Security Measures

• SSL/TLS encryption for all data transmission
• Encrypted storage for sensitive data
• Secure payment processing via Stripe (PCI DSS compliant)
• Regular security audits and updates
• Access controls and authentication systems
• Automated backup systems

4.3 Data Retention

We retain your data for the following periods:

• Input Content (prompts, images): Deleted immediately after video generation, unless you consent to longer retention
• Generated Videos: Available for download for 30 days, then permanently deleted
• Transaction Records: Retained for 7 years for tax and legal compliance
• Usage Analytics: Anonymized and aggregated indefinitely for service improvement

5. Third-Party Services

5.1 Stripe Payment Processing

All payments are processed through Stripe, Inc. When you make a payment, Stripe collects and processes your payment information according to their Privacy Policy. We receive only:

• Confirmation of successful payment
• Last 4 digits of card number
• Transaction ID and amount
• Billing email address

5.2 Analytics Services

We use privacy-focused analytics (Plausible) that do not use cookies or collect personal identifiable information. See Plausible's Privacy Policy.

5.3 AI Processing Partners

Video generation may utilize third-party AI infrastructure providers who process your content according to strict data protection agreements. Your content is encrypted during processing and never used for training their models.

6. Your Privacy Rights (GDPR)

Under GDPR and applicable data protection laws, you have the right to:

• Access: Request a copy of personal data we hold about you
• Rectification: Request correction of inaccurate personal data
• Erasure: Request deletion of your personal data (subject to legal retention requirements)
• Data Portability: Receive your data in a machine-readable format
• Object: Object to processing of your personal data
• Withdraw Consent: Withdraw consent for data processing at any time
• Restriction: Request restriction of processing in certain circumstances
• Lodge a Complaint: File a complaint with your local data protection authority

To exercise these rights, contact us at hi@mataai.studio. We will respond within 30 days.

7. Data Sharing and Disclosure

We do not sell your personal data. We may share data in these limited circumstances:

• Service Providers: Trusted partners who assist in operations (e.g., Stripe, hosting providers)
• Legal Requirements: When required by law, court order, or government regulation
• Business Transfers: In connection with merger, acquisition, or sale of assets (with continued privacy protection)
• Protection of Rights: To enforce our terms, protect our rights, or ensure safety

8. International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA). We ensure adequate safeguards are in place through:

• Standard contractual clauses approved by the European Commission
• Data processing agreements with third parties
• Compliance with GDPR and applicable data protection laws

9. Children's Privacy

AI Director is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 18, we will delete it immediately.

10. AI-Specific Privacy Considerations

10.1 Content Processing

Your prompts and uploaded content are processed by AI models to generate videos. This processing is ephemeral and your content is not permanently stored in the AI system.

10.2 Model Training

We do NOT use your specific content (prompts, images, videos) to train AI models without your explicit consent. If you choose to participate in model improvement:

• You will be asked for explicit consent
• Data will be anonymized before use
• You can withdraw consent at any time

10.3 Generated Content Rights

While you receive usage rights to generated videos, we may use anonymized metadata (without your specific content) for service analytics and improvement.

11. Cookies and Tracking

AI Director uses minimal cookies and browser storage:

• Essential Cookies: Required for service functionality (authentication, session management)
• SessionStorage: Temporary storage of generator state (auto-deleted when you close browser)
• LocalStorage: Pending order recovery (only when payment initiated)

We do not use advertising cookies or third-party tracking cookies.

12. Data Breach Notification

In the event of a data breach affecting your personal information, we will:

• Notify affected users within 72 hours (as required by GDPR)
• Provide details about the breach and affected data
• Explain steps taken to mitigate the breach
• Offer guidance on protecting yourself
• Report to relevant authorities as required by law

13. Changes to This Privacy Policy

We may update this Privacy Policy periodically. Material changes will be communicated via:

• Email notification to registered users
• Prominent notice on the AI Director platform
• Updated "Last Updated" date at the top of this policy

Continued use after changes constitutes acceptance of the updated policy.

14. Contact Information

For privacy-related questions or to exercise your rights, contact us at:

Data Protection Officer

For GDPR-related inquiries, you may contact our Data Protection Officer at hi@mataai.studio.