Legal

Privacy Policy

Last updated: July 15, 2026

In short: we collect the minimum to run OC Studio — your email, the content you create, and basic usage data. Your images and prompts are sent to the AI providers that render them. Payments are handled by Stripe / Link, so we never see your card. We don't sell your data. You can delete your renders anytime and request account deletion.

This Privacy Policy explains how OC Studio ("OC Studio," "we," "us") collects, uses, and shares information when you use the OC Studio website and application (the "Service"). By using the Service you agree to this Policy.

Information We Collect

Account information: your email address and authentication data. Passwords are stored only as salted hashes by our authentication provider; we cannot read them.
Content you create: images and files you upload (including training photos), text prompts and captions, generated images and videos, trained models (LoRAs), and organizational data such as project and character names.
Payment information: processed by Stripe and Link. We receive limited billing metadata (such as plan, status, and the last four digits/brand of a card as shown by the processor) but do not collect or store full payment card numbers.
Usage & device data: log data such as IP address, browser/user-agent, timestamps, actions taken, credit usage, and error diagnostics, used to operate and secure the Service.
Communications: if you join our waitlist or email us, we keep your email and message. Waitlist signups may include a referral or channel source you arrived through.

How We Use Information

To provide the Service — including sending your prompts and images to AI providers to generate, edit, animate, and train on your behalf;
To operate accounts, credits, subscriptions, and referrals;
To secure the Service, prevent abuse, and enforce our Terms and Acceptable Use rules;
To send transactional and service emails (e.g., waitlist welcome, access invites, account and billing notices);
To improve reliability and features (using aggregated or operational data — we do not train AI models on your private content); and
To comply with law and respond to lawful requests.

AI Providers & Service Providers (Sub-processors)

We use trusted third parties to run the Service. Your content is shared with them only as needed to provide the Service:

Provider	Purpose
Supabase	Authentication, database, and file storage (your account, credits, and media)
Railway	Application hosting (US region)
fal.ai	AI image/video generation and model training
Replicate	AI image/video generation (certain models)
RunPod	Cloud compute for advanced/ComfyUI workflows (when used)
Anthropic (Claude)	AI text features (captions, prompt assistance, workflow help)
Stripe / Link	Payment processing and billing (merchant of record)
Resend	Transactional email delivery

These providers process your data under their own terms and privacy policies. When you send content to a generation model, that content is transmitted to the applicable provider to produce your result.

How We Share Information

We do not sell your personal information. We share it only: (a) with the service providers above; (b) if you opt in to the Showcase, the render and caption you submit may be displayed publicly and in marketing; (c) to comply with law, enforce our Terms, or protect rights and safety; and (d) in connection with a merger, acquisition, or sale of assets, subject to this Policy.

Retention & Deletion

We keep your information while your account is active and as needed to provide the Service and meet legal obligations. You can delete individual renders, datasets, and characters at any time in the app. To delete your account and associated content, contact admin@ocstudio.app. Some data may persist for a limited time in backups or with sub-processors, and we may retain records required for legal, tax, or fraud-prevention purposes.

Your Rights

Depending on where you live (e.g., under GDPR or CCPA/CPRA), you may have rights to access, correct, delete, or export your personal information, and to object to or restrict certain processing. To exercise these rights, contact admin@ocstudio.app. We will not discriminate against you for exercising them. If you are in the EEA/UK, our legal bases are contract performance, legitimate interests, consent (where applicable), and legal obligation.

Cookies & Local Storage

We use browser local storage to keep you signed in and remember basic preferences, and minimal cookies/analytics necessary to operate and secure the Service. We do not use third-party advertising cookies.

Security

We use reasonable administrative and technical safeguards, including encryption in transit, scoped access controls, and hashed credentials. No system is perfectly secure, and we cannot guarantee absolute security.

Children

The Service is not intended for anyone under 18, and we do not knowingly collect information from children. If you believe a minor has provided us information, contact us and we will delete it.

International Transfers

We operate in the United States, and our providers may process data in the US and other countries. By using the Service, you understand your information may be transferred to and processed in the US.

Changes

We may update this Policy. Material changes will be posted here with a new date and, where appropriate, notified to you.

Contact

Privacy questions or requests: admin@ocstudio.app.