Privacy Policy
Effective date: 3 September 2026
Last updated: 13 September 2026
This Privacy Policy explains how Animatic AI, an unincorporated business operating from the United Kingdom (Animatic, we, us, our), collects and uses personal data through animatic.ai, studio.animatic.ai and related services (the Service).
For the personal data described in this Policy, Animatic AI is the data controller unless Section 5 says that Animatic acts as a processor on a customer's behalf.
1. Personal data we collect
1.1. Data you provide
- Account data: name, email address, authentication information and basic profile information received from a sign-in provider such as Google.
- Customer Content: voiceover audio, scripts, ideas and briefs for script drafts, prompts, reference images, brand assets, logos, colours, taglines and other material you upload or submit.
- Project data: project names, scene descriptions, narration, settings, edits, continuity records and other project metadata.
- Billing data: billing contact details, subscription status, purchase history and limited payment information. Stripe collects and processes full card details; Animatic does not store full card numbers.
- Communications: support requests, feedback and other messages you send us.
1.2. Data collected automatically
- Usage data: projects created, features used, generation requests, Credits consumed, timestamps and interactions with the Service.
- Technical data: IP address, browser and device type, operating system, security events, error reports and server logs.
- Cookies and local storage: authentication-session information, security tokens, preferences such as theme and your cookie choice, support-messenger identifiers, and analytics identifiers where you have accepted analytics cookies.
- Website analytics: pages viewed on animatic.ai, a small set of site interactions (such as viewing pricing or clicking a sign-up button), referrer and campaign parameters, and browser, device and approximate location derived from technical data. Until you accept analytics cookies this is collected without cookies, as described in Section 9.
1.3. Data created through the Service
- transcripts, scene plans, prompts, generated images, motion data, exported video and other generated Output;
- usage, billing and Credit-metering records; and
- moderation, fraud-prevention and diagnostic records.
Customer Content may contain personal data about people other than the account holder. Please submit such data only where you have a lawful basis and all necessary rights and notices.
2. Why we use personal data and our lawful bases
For UK data-protection law, we rely on the following lawful bases:
| Purpose | Typical data | Lawful basis |
|---|---|---|
| Create and administer accounts | Account, authentication and technical data | Performance of our contract with you |
| Provide transcription, planning, generation, editing, storage and export | Customer Content, project data and generated data | Performance of our contract with you |
| Process subscriptions, purchases and Credits | Account, billing and usage data | Performance of our contract; compliance with tax and accounting obligations |
| Provide support and respond to requests | Account, communications, project and diagnostic data | Performance of our contract; our legitimate interest in supporting users and resolving problems |
| Secure the Service and prevent fraud, abuse and prohibited content | Account, technical, usage, Customer Content and moderation data | Our legitimate interests in protecting users, Animatic and third parties; compliance with legal obligations where applicable |
| Diagnose faults and improve reliability and usability | Usage, technical, diagnostic and limited project data where necessary | Our legitimate interests in maintaining and improving the Service |
| Measure how animatic.ai is used and which pages and campaigns work | Website analytics and technical data | Our legitimate interests in understanding and improving our website; your consent for analytics cookies |
| Send service messages | Account and subscription data | Performance of our contract; compliance with legal obligations |
| Send optional product news or marketing | Name, email and communication preferences | Consent where required; otherwise our legitimate interests where electronic-marketing law permits, with an opt-out in every message |
| Establish, exercise or defend legal claims and enforce our Terms | Account, billing, usage, communications and relevant Customer Content | Our legitimate interests in protecting our legal rights; compliance with legal obligations |
Where we rely on legitimate interests, we consider whether those interests are necessary and balanced against your rights. You can object as explained in Section 8.
We do not sell personal data. We do not use Customer Content to train Animatic's or a third party's general-purpose AI models. We may use aggregated or de-identified information that no longer identifies an individual to understand and improve the Service.
3. AI processing and human access
3.1. When you use AI features, relevant Customer Content is sent to the providers identified in Section 4 to perform the requested operation. This can include audio, transcripts, scripts, ideas and briefs, prompts, reference images and scene images.
3.2. We use API or business offerings intended not to use submitted Customer Content to train providers' general-purpose models unless a user expressly opts in. Providers may retain limited data for service operation, security or abuse monitoring under their applicable business terms and configured retention controls.
3.3. Authorised Animatic personnel may access Customer Content where reasonably necessary to provide support, investigate a fault or security incident, enforce the Terms, or comply with law. Access is limited according to role and need.
3.4. We may use automated systems to reject a generation, flag activity or temporarily restrict a feature where content appears to violate law, provider rules or our Acceptable Use terms. These systems do not ordinarily make decisions that produce legal or similarly significant effects. You may ask us to review a material account restriction by contacting contact@animatic.ai.
4. Who receives personal data
We disclose data only as needed for the purposes described in this Policy:
| Recipient | Role and purpose | Data typically involved |
|---|---|---|
| Clerk | Authentication and account/session management | Name, email, profile information, authentication tokens and technical data |
| Stripe | Payment processing, billing and fraud prevention; Stripe may act as an independent controller for some processing | Billing details, email, transaction and purchase information |
| Cloudflare | Hosting, database, file storage, content delivery, security and rate limiting | Account, Customer Content, project, usage and technical data in transit or storage |
| OpenAI | Image generation, transcription, script drafting, content moderation and other language-model processing | Audio, transcripts, ideas and briefs, scripts, prompts, reference images, scene information and generated Output as required by the feature |
| Fish Audio and ElevenLabs | Text-to-speech narration generated from scripts | Script text, the chosen voice and delivery settings, and the generated narration audio |
| Replicate | Depth estimation, segmentation and other selected inference features | Scene images and feature parameters |
| Sentry | Error monitoring for the Service | Error and crash reports (stack traces, environment/release tags and opaque user, project or job identifiers where available); cookies, authorisation headers, request/response bodies and email addresses are filtered out before sending |
| PostHog (EU Cloud) | Product and website analytics to understand usage and improve the Service; data is processed in the EU | In Studio, a closed set of usage events (for example account, upload and export milestones) with limited properties such as plan tier, identified only by your internal account ID. On animatic.ai, the website analytics described in Section 1.2 |
| Intercom | Support messenger on animatic.ai and in Studio | Messages you send us through the messenger and any name or email you give it, plus limited session data such as the current page, browser and device and, in Studio, app version, plan and your internal account ID |
We may also disclose relevant data:
- to professional advisers, insurers, auditors or service providers that help us operate and protect the Service;
- where required by law, court order or a competent authority;
- where reasonably necessary to protect the rights, property or safety of Animatic, our users or others, or to investigate fraud or a violation of our Terms;
- in connection with a proposed or completed sale, incorporation, financing, reorganisation or transfer of the business, subject to appropriate confidentiality and data-protection measures; or
- when you direct or authorise us to do so.
Providers are bound by applicable contracts and data-protection obligations. Where a provider acts as an independent controller, its own privacy notice also applies to that processing.
5. Customer Content containing third-party personal data
If you use Animatic for a business or organisation and submit personal data about other people, you may be the controller of that data and Animatic may act as your processor. You are responsible for providing required privacy information, identifying a lawful basis, and ensuring that your instructions to Animatic are lawful.
Where an Article 28 data-processing agreement is required, contact contact@animatic.ai before submitting that data so appropriate processor terms can be put in place. Do not use the Service for large-scale special-category, biometric-identification, health, criminal-offence or similarly sensitive processing unless we have expressly agreed suitable terms and safeguards in writing.
6. International transfers
Animatic operates from the United Kingdom. Some providers process data in the United States or other countries outside the UK.
Where UK data-protection law requires a transfer safeguard, we rely as applicable on UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to approved standard contractual clauses, or another lawful transfer mechanism. We also assess supplementary technical and organisational safeguards where required.
You may request further information about the relevant safeguard, including a copy where available subject to necessary redactions, by contacting contact@animatic.ai.
7. Retention
We keep personal data only for as long as reasonably necessary for the purpose for which it was collected, applying the following criteria:
- Account data: while the account is active and afterwards only as needed to complete deletion, resolve disputes, prevent fraud or comply with law.
- Projects and Customer Content: while retained by you in the Service. Content placed in Trash remains recoverable for the period displayed in the Service, unless you permanently delete it sooner. After permanent deletion, active copies are removed or made inaccessible through the normal deletion process; residual copies may remain temporarily in backups until those backups are overwritten.
- Billing and transaction records: for the period required by tax, accounting, chargeback and financial-record laws.
- Security, fraud and moderation records: for as long as reasonably necessary in light of the severity of the event, risk of recurrence and applicable limitation periods.
- Support communications: for as long as needed to resolve the request, maintain an appropriate support history and establish or defend legal claims.
- Technical and diagnostic logs: for the period reasonably needed to operate, secure and troubleshoot the Service, after which they are deleted or de-identified unless required for an active investigation.
We may retain information for longer where required by law, a legal hold or a live dispute. We may retain aggregated or de-identified information that no longer identifies an individual.
8. Your rights
Depending on applicable law and the circumstances, you may have rights to:
- access personal data we hold about you;
- correct inaccurate or incomplete data;
- request deletion of data;
- restrict certain processing;
- receive certain data in a portable format;
- withdraw consent at any time, without affecting earlier lawful processing; and
- complain to a data-protection authority.
Right to object: where we process your personal data on the basis of legitimate interests, you may object to that processing. You may object to direct marketing at any time, and we will stop using your data for that purpose.
To exercise a right, contact contact@animatic.ai. We may need to verify your identity. We will respond within the period required by applicable law, normally one month for UK requests, subject to lawful extensions.
UK users may complain to the Information Commissioner's Office. We would appreciate the opportunity to address your concern first, but you do not have to contact us before approaching the ICO.
9. Cookies and local storage
We use essential cookies and local storage for authentication, security and basic preferences, including remembering your cookie choice. We do not use advertising or cross-site tracking cookies.
Analytics on animatic.ai. We use PostHog to understand how the site is used. Until you accept analytics cookies, it runs without cookies: nothing is stored on your device for analytics, and the random identifier it uses exists only for the page you are viewing, so we cannot recognise you from one page or visit to the next. If you accept analytics cookies, PostHog also stores an identifier in a cookie and local storage so that visits can be connected over time. If you decline, measurement continues without cookies. You can change your choice at any time by clearing this site's cookies and local storage in your browser, and you can object to cookie-free measurement by contacting us.
Support messenger. The Intercom messenger on animatic.ai and in Studio uses cookies and local storage to keep your conversation available and to recognise you when you return to it.
In Studio, PostHog and Intercom may also set cookies or use local storage for the purposes described in Section 4.
10. Security
We use technical and organisational safeguards designed to protect personal data, including encrypted transmission, access controls and restricted handling of credentials. No system can be guaranteed completely secure. Please keep your account secure and retain independent copies of important source material.
11. Children
The Service is intended only for people aged 18 or over. We do not knowingly collect personal data from children through the Service. If you believe a child has provided personal data, contact us so we can investigate and take appropriate action.
12. Changes to this Policy
We may update this Policy to reflect changes to the Service, providers or law. If a change materially affects how we use personal data, we will provide reasonable advance notice through the Service, by email or by another appropriate method unless an urgent legal or security change requires otherwise.
13. Contact
Controller: Animatic AI
Email: contact@animatic.ai