Legal
Privacy Policy
Last updated: May 2026
1. Data We Collect
We collect account information (email address, name), payment information processed via Stripe — we never store card numbers directly — generated content metadata, and anonymous usage analytics. We collect only the data necessary to deliver and improve our services.
2. How We Use Data
Your data is used for service delivery, billing and payment processing, transactional email notifications via Resend, and aggregate analytics to improve platform performance. We do not sell your personal data to third parties.
3. Legal Basis (GDPR)
The data controller is StudioMunich, Munich, Germany. Our legal bases for processing are: contract performance (delivering services you have paid for), legitimate interest (improving platform security and reliability), and consent where specifically required. You may withdraw consent at any time.
4. Data Retention
Account data is retained for the duration of your account plus 12 months following closure. Payment records are retained for 7 years as required by German tax law. Generated content is retained for 90 days then automatically deleted unless explicitly saved by the user.
5. EU Data Residency
All data is stored in EU-region infrastructure, including Supabase EU and Vercel EU. We do not transfer personal data outside the European Economic Area except where covered by Standard Contractual Clauses or equivalent safeguards.
6. Third-Party Processors
We use the following processors, each operating under a Data Processing Agreement: Stripe (payments), Resend (transactional email), HeyGen (avatar rendering), ElevenLabs (voice synthesis), Anthropic (script generation), fal.ai (image and video generation). All processors are contractually bound to process data only as directed by us.
7. Your Rights (GDPR)
Under GDPR you have the right to access, rectify, erase, and port your personal data, and to object to certain processing. To exercise these rights, email bookings@studiomunich.digital. We will respond within 30 days.
8. Erasure Request
To request erasure of your personal data, email bookings@studiomunich.digital with the subject line “Erasure Request.” We process erasure requests within 30 days. Please note that VoiceIDVault consent records may be retained as required by talent agreements, even following account closure.
9. Cookies
For information about how we use cookies, please see our Cookie Policy.
10. Contact
For privacy enquiries, contact us at bookings@studiomunich.digital.
Questions? bookings@studiomunich.digital