Privacy Policy

1. Data Controller

Mini Studio, Inc. is the data controller responsible for your personal data. If you have questions about how your data is processed, you can reach us at:

Email: hello@ministudio.com

2. Information We Collect

When you use our services, we may collect the following categories of personal data:

• Account & Contact Information: Your name, email address, and payment details, collected when you create an account or place an order.
• Support & Messenger Data: Messages you send through our support tools, along with related metadata such as page URL, device/session identifiers, and your account identity when you are signed in.
• Uploaded Images: Photographs of individuals (including children) that you provide for the purpose of generating custom video content.
• Usage & Analytics Data:Information about how you interact with our platform, including pages visited, features used, and session duration. This data is only collected when you provide consent (see Section 9 — Cookies & Tracking).
• Device & Technical Data: IP address, browser type, operating system, and device identifiers, collected automatically through essential cookies and server logs.
• Location Data: Country-level geolocation derived from your IP address, used solely to determine applicable privacy regulations and display the appropriate consent experience.
• Marketing Preferences & Engagement Data: Your consent status for marketing communications, the date and method of consent, and engagement data (such as email opens, clicks, and unsubscribes) when you receive marketing emails from us.

3. Legal Basis for Processing (GDPR, Art. 6)

We process your personal data on the following legal bases:

• Performance of a contract (Art. 6(1)(b)): Processing your account information, uploaded images, and payment data to create and deliver the custom video content you order.
• Consent (Art. 6(1)(a)): Collecting analytics data, enabling optional visitor support tools through non-essential cookies on approved public pages, and sending marketing and lifecycle communications (such as product updates, special offers, abandoned cart reminders, and re-engagement emails). You may withdraw consent at any time through our Cookie Settings (see Section 9) or through the unsubscribe link in any marketing email.
• Legitimate interests (Art. 6(1)(f)): Maintaining platform security, preventing fraud, improving our services, and providing customer support, including support within authenticated product surfaces. We balance these interests against your rights and freedoms.
• Legal obligation (Art. 6(1)(c)): Retaining transaction records and responding to lawful requests from authorities.

4. How We Use Your Information

We use the information we collect to:

• Create and deliver custom video content as ordered by you.
• Process payments and manage your account.
• Communicate with you about your orders, service updates, or support inquiries.
• Send you marketing and lifecycle communications — including product updates, special offers, abandoned cart reminders, and re-engagement emails — where you have given consent or, where permitted by applicable law, on the basis of an existing customer relationship. You may opt out at any time via the unsubscribe link in any such email.
• Respond to questions submitted through our support messenger and contact channels.
• Improve our platform, diagnose technical issues, and develop new features.
• Analyze aggregated, anonymized usage patterns to improve our services (only with your consent for non-essential tracking).
• Comply with legal obligations and enforce our terms of service.

5. Storage and Retention of Personal Data

• Uploaded images are used solely for generating the custom video content you order. Images are stored for as long as you maintain an active account and can be deleted at any time from your library or by contacting us.
• Account data is retained for the lifetime of your account. When you delete your account, we initiate a 30-day grace period after which all personal data, uploaded images, generated assets, and associated records are permanently deleted.
• Analytics datacollected via cookies is retained according to each provider’s standard retention period (see the cookie table in Section 9) and is only collected with your consent.
• Support conversation data may be retained for as long as needed to respond to your request and maintain customer-support records.
• Marketing consent records and engagement data are retained for as long as you remain subscribed, plus up to 3 years after your last interaction or unsubscribe, to demonstrate compliance and prevent re-enrollment without consent.
• Transaction records may be retained for up to 7 years to comply with tax and accounting obligations.
• We do not use uploaded images to train machine-learning models, whether our own or those of third parties.

6. Third-Party Processors & Sharing

We do not sell, rent, or license your personal data or images to any third party. We share data only with trusted service providers (processors) who assist in delivering our services, and only to the extent necessary:

Each processor is bound by data-processing agreements and processes data only on our instructions. For details on each provider’s privacy practices, please refer to their respective privacy policies.

7. International Data Transfers

Mini Studio is based in the United States. If you are located in the European Economic Area (EEA), the United Kingdom, or another jurisdiction with data-transfer restrictions, your personal data may be transferred to and processed in the United States or other countries where our processors operate.

We ensure appropriate safeguards are in place for these transfers, including Standard Contractual Clauses (SCCs) approved by the European Commission and any additional measures required to protect your data in accordance with applicable law.

8. Rights and Permissions

• The likeness of any individual, including children, is used strictly to create the custom video content you order. We do not claim ownership of the likeness depicted in uploaded images.
• We will not use any likeness or personal image for promotional or marketing purposes without your express, written consent.

9. Cookies & Tracking Technologies

We use cookies and similar technologies to operate our platform and, where applicable, to enable support tools and understand how you use it. Our approach differs based on your location:

• Regulated jurisdictions(EU/EEA/UK): Non-essential cookies are blocked by default. Analytics SDKs and optional visitor support tools do not load until you explicitly click “Accept” on our consent banner (opt-in).
• Other jurisdictions: Non-essential cookies are enabled by default. You may opt out at any time through our Cookie Settings.

Essential Cookies (always active)

These cookies are necessary for the platform to function and do not require consent:

Analytics Cookies (consent required)

These cookies are only set after you provide consent:

Functional Support Cookies / Storage

We use Intercom to offer support on approved public pages (/contact, /about, and film detail pages under /films/[slug]) including when you are signed in, and within the authenticated /minitube experience.

Managing Your Cookie Preferences

You can change your cookie preferences at any time by clicking the “Cookie Settings” link in the footer of any page. Withdrawing consent is as easy as giving it—a single click will disable all non-essential cookies and prevent optional analytics and visitor support tools from loading on subsequent page views.

You may also control cookies through your browser settings. Note that disabling essential cookies may impair the functionality of the platform.

10. Parental / Guardian Responsibility

Our platform is intended for use by adults (parents and guardians) who create personalized video content for children. We do not knowingly collect personal data directly from children under the age of 13 (or the applicable age in your jurisdiction).

If you upload images of a child, you affirm that you are the parent or legal guardian of that child, or that you have obtained the necessary permissions to use their likeness for the specified purpose. If we learn that we have collected personal data from a child without appropriate parental consent, we will take steps to delete that information promptly.

11. Data Security

We implement industry-standard measures to protect your data, including:

• Encryption of uploaded images and personal data during transit (TLS) and at rest.
• Secure payment processing through PCI-DSS-compliant third-party providers.
• Access controls and authentication to limit internal access to personal data.
• Regular security reviews to maintain data protection standards.

While we take reasonable precautions, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security of your data.

12. Your Rights Under GDPR and Applicable Law

If you are located in the EEA, the UK, or another jurisdiction that grants similar rights, you have the following data-protection rights. We will respond to requests within 30 days (or the period required by applicable law):

• Right of access (Art. 15): Request a copy of the personal data we hold about you.
• Right to rectification (Art. 16): Request correction of inaccurate or incomplete personal data.
• Right to erasure (Art. 17): Request deletion of your personal data. You can delete your account and all associated data directly from your account settings, or contact us for assistance.
• Right to restriction (Art. 18): Request that we limit how we process your data in certain circumstances.
• Right to data portability (Art. 20): Request your personal data in a structured, commonly used, machine-readable format (JSON), including your uploaded media assets.
• Right to object (Art. 21): Object to processing based on legitimate interests. We will cease processing unless we demonstrate compelling legitimate grounds.
• Right to object to direct marketing (Art. 21(2)): You have an absolute right to object to the processing of your personal data for direct marketing purposes at any time. Once you object, we will stop processing your data for marketing.
• Right to withdraw consent (Art. 7(3)): Where processing is based on consent (e.g., marketing communications, analytics cookies, or optional visitor support cookies), you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
• Right to lodge a complaint: You have the right to lodge a complaint with your local data-protection authority (supervisory authority) if you believe your data has been processed unlawfully.

To exercise any of these rights, contact us at hello@ministudio.com.

13. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the CCPA, including the right to know what personal information we collect, the right to delete your personal information, and the right to opt out of the sale of personal information. We do not sell your personal information.

California residents also have the right to opt out of marketing communications at any time. You can do this by clicking the unsubscribe link in any marketing email we send you.

To exercise your CCPA rights, contact us at hello@ministudio.com.

14. Automated Decision-Making

We use AI-based tools (including Fal.ai and Google Gemini) to generate custom video content from your uploaded images. This processing is necessary to perform the contract with you (delivering the content you ordered). No fully automated decisions with legal or similarly significant effects are made about you based on this processing.

15. Contact Us

If you have questions or concerns about this Privacy Policy or how we handle your data, please contact us:

Email: hello@ministudio.com

For GDPR-specific requests, please include “GDPR Request” in your subject line so we can prioritize your inquiry.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any material changes will be posted on this page with an updated effective date. Where required by law (for example, where changes affect processing based on consent), we will notify you and, if necessary, obtain fresh consent before the changes take effect.

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.