Privacy Policy

This Privacy Policy explains how SPACEFOX, UNIPESSOAL LDA (“we”, “us”, “our”), the operator of the Spellzi AI film studio (the “Service”), collects, uses, stores and protects your personal data, in accordance with the EU General Data Protection Regulation (GDPR).

This policy applies to international users. Users in the Russian Federation are covered by the Russian policy at spellzi.com/ru/policy.

1. Data we collect

• Account data: email address, username
• Payment data: information needed to process payments, handled by our payment processor; we do not store your full card details
• User content: text prompts, scenarios, reference materials you upload (images, audio, video) and the films, scenes and images generated from them
• Usage data: how you interact with the Service
• Technical data: IP address, browser type, cookie data

2. How we use your data & legal bases

We process your personal data on the following GDPR legal bases (Art. 6):

• Performance of a contract — to provide the Service, process payments and grant credits
• Legitimate interests — to operate, secure and improve the Service and prevent fraud
• Consent — for optional analytics and marketing, where applicable
• Legal obligation — to comply with accounting, tax and other legal requirements

3. Sharing & processors

We do not sell your personal data. We share it only with processors acting on our behalf under appropriate agreements:

• Payment processing: Stripe Payments Europe, Ltd. and its affiliates
• Hosting & cloud storage: to store your projects and generated content
• AI model providers: your prompts and uploaded references may be sent to third-party video- and image-generation services to perform the generation you request
• Authorities: where required by law

4. International transfers

Some processors may operate outside the European Economic Area. Where personal data is transferred internationally, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses or an adequacy decision.

5. Data retention

We keep personal data only for as long as necessary for the purposes described here, or as required by applicable law. You may delete your content at any time; when you delete your account, associated content is removed.

6. Your rights

Under the GDPR you have the right to:

• Access the personal data we hold about you
• Rectify inaccurate data
• Erase your data (“right to be forgotten”)
• Restrict or object to processing
• Data portability
• Withdraw consent at any time (without affecting prior processing)
• Lodge a complaint with a supervisory authority — in Portugal, the Comissão Nacional de Proteção de Dados (CNPD, cnpd.pt)

To exercise any right, contact us at support@spellzi.com.

7. Cookies

We use cookies to operate and improve the Service and for analytics. You can disable cookies in your browser settings, though this may affect functionality.

8. Changes to this policy

We may update this Privacy Policy. The current version is always available on this page; the “last updated” date below reflects the latest revision.

9. Contact

For any questions about your personal data or this policy, contact support@spellzi.com.

Last updated: 24 October 2026