Privacy Policy

When you sign up: your email address, display name, and authentication metadata managed by our auth provider (Supabase). When you use the product: the actor photos, voice samples, scripts, and generated videos you produce; the prompts you submit; and the events emitted by your renders (queued, running, completed, failed).

When you pay: the transaction record from our payments provider (PayKickStart at launch; Stripe later). We do not see or store full card numbers.

To provide the Service: render videos against the providers you select, debit your prepaid balance, deliver completion notifications by email, and let you re-play or re-download your renders.

To keep the Service safe: rate-limit submissions, detect abuse, and comply with our acceptable-use policy.

We do not sell your data. We do not use your content to train models.

To run the Service we share data with the following sub-processors:

• Supabase (database, authentication)
• Cloudflare R2 (file storage)
• Cloudflare (CDN, WAF, bot protection)
• Railway (application hosting)
• kie.ai (image and cinematic video generation)
• Replicate (talking-video and auto-cast generation)
• HeyGen (studio actor catalog and admin-override rendering)
• Deepgram (voice-sample transcription for voice cloning)
• Mailgun (transactional email)
• PayKickStart (payments)
• Sentry and Better Stack (error monitoring and uptime)

You can:

• Access or export your data. Email privacy@magicactors.com with the subject “Data export request.” We respond within 30 days with a JSON snapshot of your account.
• Delete your account. Use the “Delete my account” control under Settings → Data & account. You will receive a confirmation email; clicking the link permanently flags the account for deletion, and we purge the underlying rows within 30 days.
• Correct your data. Edit your profile under Settings, or email us for fields you cannot change yourself.
• Object or restrict processing. Email privacy@magicactors.com describing what you would like restricted. We respond within 30 days.

We use only essential cookies (your authentication session). We do not set advertising or analytics cookies by default. If we add product analytics later, you will be asked to opt in.

Account data lives for as long as your account exists. After you delete your account, soft-deleted rows persist for 30 days (to support undo-by-support requests) before being purged. Backups roll over within a further 30 days.

MagicActors is not directed at children under 16. If you believe a child has signed up, email privacy@magicactors.com and we will delete the account.

If this policy changes materially, we will email registered users at least 14 days before the change takes effect.