We collect only what we need to run Auteur, bill fairly, and keep the platform safe. We don't sell your data.
01Scope
This Privacy Policy explains how Auteur ("we", "us") handles personal data when you visit auteur.sh, join our waitlist, or use the Auteur platform, API, and CLI (the "Service"). It should be read with our Terms of Service. Where we process content on behalf of a business customer, that customer is the controller and we act as its processor.
02Data we collect
- Waitlist data — your email address, what you plan to make, and the page section you signed up from.
- Account and billing data — name, email, organization, workspace settings, and billing details. Card data is handled by our payment processor; we do not store full card numbers.
- Production content — prompts, scripts, workflow specs, uploaded assets, feedback at review gates, and generated Outputs.
- Likeness and voice data — images, video, or audio of identifiable people you upload. We process this only to fulfil your request, never to identify individuals, and only with the consent you represent you have obtained.
- Usage and metering data — runs, generations, compute consumed, API calls, and logs needed for billing, security, and moderation.
- Device and analytics data — IP address, browser, pages viewed, referrer, and interaction events collected via cookies and similar technologies.
- Communications — messages you send us and support requests.
03How we use data
- To provide, operate, and maintain the Service and run your productions;
- To meter usage, bill subscriptions and usage-based fees, and prevent fraud;
- To moderate content, enforce our policies, and comply with legal reporting obligations;
- To manage the waitlist and send early-access invitations and product updates (you can unsubscribe anytime);
- To understand and improve the website and Service through aggregated analytics;
- To secure our systems and respond to legal requests.
04Legal bases (EEA/UK)
We process personal data on the basis of contract performance (providing the Service), legitimate interests (security, analytics, moderation, product improvement), consent (marketing emails, non-essential cookies), and legal obligation (tax, law-enforcement reporting).
07Retention
We keep waitlist data until you ask us to remove it or the waitlist ends. Account data is kept while your account is active. Production content is deleted within 30 days after account closure unless you delete it sooner. Billing records are kept as long as tax law requires, and content tied to policy enforcement may be preserved as legally required.
08Your rights
Depending on where you live (including under the GDPR, UK GDPR, CCPA/CPRA, and Canada's PIPEDA), you may have the right to access, correct, delete, or port your data, object to or restrict processing, withdraw consent, and opt out of targeted advertising. To exercise these rights, email hello@auteur.sh. We will not discriminate against you for doing so. You may also complain to your local data protection authority.
09International transfers
Our providers may process data in the United States and other countries. Where required, we rely on safeguards such as Standard Contractual Clauses for transfers out of the EEA, UK, or Switzerland.
10Security
We use encryption in transit, access controls, and least-privilege practices to protect your data. No system is perfectly secure; we will notify you of breaches affecting your data as required by law.
11Children
The Service is not directed to anyone under 18, and we do not knowingly collect their personal data. If you believe a minor has provided us data, contact us and we will delete it.
12Changes and contact
We may update this policy and will note the date above; material changes will be communicated by email or in the Service. Questions or requests: hello@auteur.sh.