Privacy Policy
October 2026
This document is a template and must be reviewed by legal counsel before launch.
1. Who we are
AFTERMATTER operates AFTERMATTER and is the controller of personal data described here. Contact: support@aftermatter.online.
2. Data we collect
Account data (name, email, password hash, profile), workspace and billing data (plan, invoices; card data is handled by our payment provider), content you upload and generate, prompts and settings, connected social account tokens (encrypted), usage and security logs (IP address, device, timestamps), and — only with your consent — first-party analytics events.
3. How we use it
To provide the Service (run generations, store and edit files), process payments, secure accounts (rate limits, fraud prevention), send service emails, provide support, and improve the product. We do not sell personal data.
4. Legal bases
Performance of our contract with you; legitimate interests (security, product improvement); consent (analytics cookies, marketing emails); and legal obligations. These correspond to the bases in the GDPR and Brazil’s LGPD.
5. Processors and sharing
AI model providers (to fulfil your requests, e.g. fal.ai and the model vendors it routes to; sync.so, DreamFace, A2E and ElevenLabs for lip sync and voices; Anthropic for the text assistant), cloud storage and hosting, payment processing (Stripe) and email delivery. Public creations you share to Explore are visible to anyone.
6. Retention
We keep account data while your account exists. Deleted files are purged within 30 days. Billing records are kept as required by law. Security logs are kept for a limited period.
7. Your rights
You can access, correct, export or delete your data, withdraw consent and object to processing. Use your account settings or contact us. You can also complain to your data protection authority (e.g. the ANPD in Brazil).
8. International transfers and security
Providers may process data outside your country under appropriate safeguards. We use encryption in transit, encrypted secrets at rest, access controls, signed URLs for private files, and audit logs.
9. Children
The Service is not intended for people under 18.