Privacy policy

1. Scope and purpose

This Privacy Policy explains how your personal data is collected, processed, protected, and retained when you access our website, use our photo-to-drawing animation generator, purchase generation credits, or connect third-party platforms such as YouTube.

We take user privacy seriously and handle data conservatively, collecting only what is needed to provide the service.

2. Personal data we collect

We adhere to the principle of data minimization. We collect only the information necessary to deliver our digital animation services:

3. Purpose and legal basis for processing

Your personal data is processed exclusively on lawful grounds:

• Contractual fulfillment: To authenticate your account, process your submitted image, compile animation video files, and update your credit balance.
• Consent: When you connect optional third-party integrations like YouTube to publish generated videos as YouTube Shorts.
• Legitimate interest & legal compliance: To prevent fraud, counter automated abuse, maintain server security, and fulfill statutory accounting requirements.

5. Content ownership and creator media

You retain ownership of the photographs, sketches, and images you upload. Speedpaint does not claim copyright or proprietary title over your uploaded source images or the resulting animation videos generated from them.

You have commercial rights to publish, monetize, license, and distribute the rendered animation videos created on Speedpaint in accordance with our Terms of Service.

6. Sub-processors and infrastructure partners

We engage vetted, industry-standard infrastructure and technology service providers to process data strictly on our behalf:

• Database & Authentication Providers: Secure managed cloud database and authentication infrastructure with encryption at rest and in transit.
• Payment Aggregator: Razorpay (Razorpay Software Private Limited), handling payment transactions in compliance with PCI-DSS standards.
• AI Inference Providers: Third-party artificial intelligence inference routing services including OpenRouter (openrouter.ai), used for processing user-submitted source images to extract sketch contours and linework. Data processing by routing and model providers adheres to the OpenRouter Privacy Policy and OpenRouter Terms of Service.
• Storage & CDN Providers: Secure cloud object storage and content delivery networks used to deliver uploaded media and rendered MP4 video files.
• Transactional Communications: Reliable transactional email delivery for password reset links, verification codes, and receipts.

8. Security measures and data retention

In compliance with applicable Indian information technology and security rules, we implement technical and administrative safeguards:

• Industry-standard TLS encryption across all client-server transmissions.
• User-isolated access controls ensuring only authenticated account holders can access their private creations and support threads.
• Temporary worker rendering files are automatically cleaned up upon successful video generation.
• Uploaded creations remain accessible in your private library until you delete them or request account closure.

9. Cookies and local storage

Speedpaint does not use third-party advertising cookies, behavioural retargeting trackers, or marketing pixels. We utilize only essential first-party storage:

• Authentication session: Secure cookies and cryptographic tokens to keep you logged in.
• Interface preference: Browser local storage to preserve your theme selection (Dark mode / Light mode).

10. Your rights and data choices

As a user, you are entitled to statutory data rights under applicable privacy laws:

• Right to access: Inspect your personal data, creation archives, and billing records in your studio dashboard.
• Right to correction & erasure: Correct inaccurate information or delete any individual creation, linked channel, or your entire account and associated files.
• Right to data portability: Export a structured copy of your profile and creations directly from Settings.
• Right to grievance redressal: Contact our designated Grievance Officer regarding data processing inquiries.
• Right to withdraw consent: Disconnect third-party integrations (such as YouTube) or delete stored media at any time.

11. Children's privacy policy

In accordance with applicable child privacy protections, Speedpaint does not knowingly collect personal data from individuals under 18 years of age without verifiable parental or lawful guardian consent. If you are under 18, you may use Speedpaint only under the supervision of a parent or legal guardian. If we discover that personal data of a minor has been collected without appropriate consent, it will be expunged promptly.

12. Data retention periods

We retain personal data only for as long as it is needed for the purposes described in this policy, or as required by law:

• Account information (email address, username, display name): retained while your account is active and removed within 30 days of account closure.
• Source photos, sketches, and rendered videos: retained in your private library until you delete them or close your account.
• Temporary rendering scratch files: automatically cleaned up from worker nodes after video generation completes.
• Payment and transaction records: retained for the statutory period required by applicable tax and accounting laws.
• Technical and security logs: retained for up to 90 days for security and fraud prevention.

13. International data transfers

Our infrastructure and AI providers may store or process data in data centres located outside your country of residence. Where personal data is transferred internationally, we rely on standard safeguards and encryption in transit.

14. How to access or delete your data

You can exercise your privacy choices at any time:

• Self-service: sign in and open Settings to edit your profile, delete individual creations, disconnect a linked YouTube channel, export your data, or permanently close your account.
• By email: write to mail@speedpaint.org or support@speedpaint.org with the subject line "Data request".
• Google data: you can revoke Speedpaint's access to your Google Account at any time from Google Security Settings. Disconnecting your YouTube channel in Settings removes the stored OAuth tokens from our database.

When you close your account, we delete your personal data and uploaded content, except for records that we are legally required to retain.

16. Changes to this privacy policy

We may update this policy to reflect changes to the Speedpaint app, our data practices, or legal requirements. When we make material changes, we update the "Last updated" date at the top of this page and, where appropriate, notify you by email or in-app. The current version is always available at speedpaint.org/privacy, and continued use of Speedpaint after an update means you accept the revised policy.