Privacy Policy
Last Updated: April 13, 2026
Table of Contents
1. Introduction
This Privacy Policy describes how stickfigure.video ("we", "our", "us") collects, uses, stores, and protects your personal data when you use our artificial intelligence-powered animated video generation service.
We are committed to respecting your privacy and protecting your personal data in accordance with the European Union's General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA) of the United States.
By using our service, you accept the practices described in this policy. If you do not accept these practices, please do not use our service.
2. Data Collected
We collect the following types of personal data when you use our service:
2.1. Identification Information
- Email Address: Collected during your registration via Clerk (our authentication provider) to create and manage your user account.
2.2. Fraud Prevention Data
- Digital Fingerprint: We collect technical information about your device and browser (IP address, browser type, operating system, screen resolution, installed plugins) to prevent fraud, abuse, and ensure the security of our platform.
2.3. User Content
- Reference Images: The images you upload to serve as style references when generating your videos.
- Texts and Scripts: The texts you provide for voice and script generation for your videos.
2.4. Navigation Data
- Essential cookies for managing your user session
- Information about your use of the platform (pages visited, actions taken)
3. Data Usage
We use your personal data only for the following purposes:
3.1. Content Generation
- Reference Images: Your images are transmitted to the Google Gemini API exclusively for style analysis and generating consistent images for your videos. Google Gemini processes these images in accordance with its own privacy policy.
- Texts and Scripts: Your texts are transmitted to ElevenLabs exclusively for generating synthetic voices (text-to-speech) for your videos. ElevenLabs processes this data in accordance with its own privacy policy.
3.2. Other Uses
- Account management and authentication
- Tracking your credits and transactions
- Fraud and abuse prevention
- Service improvement
- Customer support and communication
Important: We never sell your personal data to third parties. We only share your data with our service providers (Google Gemini, ElevenLabs, Clerk, Lemon Squeezy) solely in the context of providing our services.
4. Payments
All financial transactions are securely managed by our payment provider, Lemon Squeezy.
4.1. Payment Information
- We do NOT store ANY credit card informationon our servers. All payment data is collected, processed, and stored directly by Lemon Squeezy, which is PCI-DSS certified (Payment Card Industry Data Security Standard).
- We only receive transaction information (amount, date, status) for managing your credits and billing.
4.2. Payment Security
Lemon Squeezy uses bank-level encryption technologies to protect your payment information. For more information on payment security, consult Lemon Squeezy's privacy policy.
5. Data Retention
We retain your personal data only as long as necessary for the purposes described in this policy:
5.1. Generated Videos
- The videos you generate are stored on our servers (Cloudflare R2) to allow you to download them at any time.
- Videos may be automatically deleted after a period of inactivity of 90 days without download.
- You can request immediate deletion of your videos at any time by contacting us or using the deletion function in your account.
5.2. Other Data
- User Account: Retained as long as your account is active. You can delete your account at any time.
- Transaction Data: Retained in accordance with legal obligations (generally 7 years for accounting data).
- Reference Images and Texts: Automatically deleted after video generation, unless you choose to keep them for future projects.
7. User Rights
In accordance with GDPR and CCPA, you have the following rights regarding your personal data:
7.1. Right of Access
You have the right to request a copy of all personal data we hold about you.
7.2. Right to Rectification
You can correct or update your personal data at any time through your account settings or by contacting us.
7.3. Right to Erasure ("Right to be Forgotten")
You can request the deletion of your personal data. We will delete your data as soon as possible, unless we have a legal obligation to retain it.
7.4. Right to Data Portability
You can request to receive your data in a structured and commonly used format.
7.5. Right to Object
You can object to the processing of your personal data in certain cases, particularly for direct marketing.
7.6. Right to Restrict Processing
You can request the restriction of processing of your data under certain circumstances.
How to exercise your rights?
To exercise any of these rights, contact us at the email address indicated in the "Contact" section below. We will respond to your request within a maximum of one month.
8. Security
We implement appropriate technical and organizational security measures to protect your personal data against loss, misuse, unauthorized access, disclosure, alteration, or destruction.
8.1. Security Measures
- Encryption of data in transit (HTTPS/TLS)
- Encryption of sensitive data at rest (OAuth tokens, etc.)
- Secure authentication via Clerk
- Secure storage on Cloudflare R2 with restricted access
- Monitoring and detection of suspicious activities
- Regular and secure backups
8.2. Sharing with Third Parties
We share your data only with our trusted service providers who are contractually obligated to protect your data:
- Clerk: Authentication and user account management
- Supabase: Secure database
- Cloudflare R2: File storage
- Google Gemini: Image processing
- ElevenLabs: Voice generation
- Lemon Squeezy: Payment processing
9. Contact
For any questions regarding this Privacy Policy or to exercise your rights, you can contact us:
Email: bragsoufian@gmail.com
We commit to responding to your requests as soon as possible, and at the latest within one month in accordance with GDPR.
Supervisory Authority
If you reside in the European Union and believe that we have not processed your data in accordance with GDPR, you have the right to file a complaint with the supervisory authority in your country of residence.
This privacy policy may be updated occasionally. We will inform you of any significant changes by email or via a notification on our platform.