Privacy policy — version 2026-09-17

DRAFT — written by the product team from what the software does today. It has not been reviewed by a lawyer. The words in square brackets are facts the operator still has to supply.

1. Who we are

TalkSlate ("the service") is operated by [OPERATOR NAME], [OPERATOR ADDRESS] ("we", "us"). You can reach us at [SUPPORT CONTACT]. This policy explains what we collect when you use the service, why, who processes it for us, how long we keep it and what you can ask of us.

2. What we collect

• Your account: email address, display name, and your password, which we store only as a one-way hash.
• Your acceptance of our terms: which version you accepted, when, and the IP address you accepted it from.
• Your sign-in sessions, so that you stay signed in and can be signed out everywhere.
• What you give us to make a video: the documents you upload, the web pages you import by address, and the questions you ask our web research step together with the results it found.
• Pictures you upload of products and places. Uploading pictures of people is switched off for the whole service unless we turn it on.
• What the service makes for you: scripts, shot plans, pictures, video clips, narration, captions and finished films.
• Your credits: every credit added and spent, and the payments we record when you buy credits.
• An audit trail of important actions on your account, such as deletions and administrator changes.
• Crash reports from your browser when a page fails: the error, the page address without its query, your browser type and, when you are signed in, your account id.
• Provider keys, if you add your own: stored encrypted, and used only for your own work.

3. Why we use it

• To make your videos: your material is sent to the AI providers below so they can write, draw, film and narrate it.
• To bill credits: to show your balance, charge for each step you approve and record payments.
• To keep your account secure: sign-in, sessions, rate limits, the audit trail and crash reports.
• To answer you when you contact us for support.

4. Who processes it for us

Each provider receives only what it needs for its step. [PROVIDER DATA-USE STATEMENT]

• OpenAI (United States): writes scripts, shot plans and other text from your material. https://openai.com/policies/privacy-policy/
• Replicate (United States): runs the picture and video models, including ByteDance's Seedance (video) and Seedream (pictures). https://replicate.com/privacy
• ElevenLabs: makes the narration and voices. https://elevenlabs.io/privacy-policy
• Tavily: runs web research, only when you start a research step. https://www.tavily.com/privacy
• Amazon Web Services, Mumbai region (ap-south-1): stores your files, our database and its backups. https://aws.amazon.com/privacy/
• [MAIL PROVIDER]: sends account emails such as password-reset links.
• Google Fonts: serves the typefaces our pages use, so your browser contacts Google when a page loads. https://developers.google.com/fonts/faq/privacy
• Razorpay: takes your payment (cards, UPI, netbanking or wallets, as your bank allows), in its payment window inside the studio or through a payment link. https://razorpay.com/privacy-policy/

5. Transfers outside India

Some of these providers process your data outside India, mainly in the United States. We send them only what each step needs.

6. How long we keep it

• Your account and your work: until you delete them, or until you delete your account.
• Backups: removed automatically 35 days after they are made, plus up to 7 days for the deleted copy to be purged.
• After you delete your account: we keep your credit history, your payments and the record of which terms you accepted, with your account anonymised, for [ACCOUNTING RETENTION PERIOD], because we need them for our accounts and to show what you agreed to.

7. Your rights

• Correction: ask us to correct anything that is wrong.
• Erasure: delete your account yourself under Settings, in "Delete my account". This erases your films and everything you uploaded. You can also delete a single film.
• A copy of your data: ask the grievance officer below.
• Grievances: complain to the grievance officer below.
• Nomination: name a person who may exercise these rights for you if you die or cannot act yourself, by writing to the grievance officer.

8. Grievance officer

[GRIEVANCE OFFICER NAME], [GRIEVANCE OFFICER EMAIL]. We acknowledge a complaint within [GRIEVANCE ACK TIME] and resolve it within [GRIEVANCE RESOLUTION TIME].

9. Security

Passwords are stored only as hashes, provider keys are encrypted, connections use HTTPS, and your files sit in private storage that is reached through short-lived links. No system is perfectly secure.

10. Age

You must be at least 18 years old, or the age of majority where you live, to use the service, as our Terms of Service say.

11. Changes

When we change this policy, we change the version at the top of this page.