Documents

Privacy Policy

Политика конфиденциальности

Politika privatnosti

Last updated: [EFFECTIVE_DATE]

In short
  • We need only the drawing, not your child. We never ask for photos of children.
  • We use the drawing, the hero's name, your child's first name (if you give it) and your email only to make and send your video.
  • Drawings, pictures, videos and names are deleted 30 days after delivery, or earlier if you ask.
  • We don't sell data, don't show ads and don't use your drawings to train AI models.
  • You can ask to see, correct or delete your data: doodlehellostudio@gmail.com.

1Who is responsible for your data

The data controller is Ruslan Sakhautdinov, a private individual, Braće Lučić 4, 21102 Novi Sad, Republic of Serbia, email doodlehellostudio@gmail.com.

This policy follows the EU General Data Protection Regulation (GDPR) and the Serbian Law on Personal Data Protection (ZZPL, “Službeni glasnik RS” No. 87/2018). Our representative in the EU: [EU_REPRESENTATIVE].

2The service is for adults

  • The site is meant for parents and other adults, not for children. Children have no accounts and should not use the site on their own.
  • We don't knowingly collect data directly from children, including children under 13 in the USA. If you think a child has sent us data, write to us and we will delete it.
  • Some data is about your child: the drawing and, if you give it, your child's first name. You give it to us as a parent or with a parent's permission. We keep it to the minimum and delete it soon.

Your child's drawing. A child's drawing can show a name, a school or other personal details. Before it is used, the drawing is checked automatically (by Google Gemini) to see that it is a hand-made drawing and not a photo of a real person or someone else's character. If it looks like a photo of a person, we delete it at once and do not use it. Photos are re-saved without location and camera data. We never use children's drawings for advertising, for training AI models or for public display without your separate consent.

3What data we use

  • Photo of the drawing, your note about it (“who is on the drawing”) and the hero you pick.
  • The hero's name.
  • Your child's first name and how it sounds — only if you give it, for “The hero comes alive” and “Two drawings”, so the hero can say it.
  • The voice language.
  • Your email — to send the video link and to answer you.
  • The hero picture and the video we make.
  • Order details from [PAYMENT_PROVIDER]: order number, product, price, country, date and payment status. Not your card number.
  • Messages you send to support.
  • Claims about a faulty video: the text you write in the “Something's wrong” form or in an email, your email address and the order number, so that we can review the claim by hand and answer you.
  • Technical data: IP address, browser type, time of the request and error logs, to keep the site working and safe.
  • Your language choice, saved in your own browser.
  • Device ID and counters: a random ID saved in your browser (it stays there until you clear it) and your IP address, used only to count free pictures and to prevent misuse. On our server these counters are deleted 24 hours after the last free picture.
  • Consent record: the date and time you ticked the box about starting right away and giving up the 14-day right of withdrawal, and the version of the text, saved with the order.
  • Waiting list: your email, if you ask us to tell you when the cartoon is ready.

We don't ask for photos of your child, a surname, age, date of birth, home address or a password. Tip: if the drawing shows your child's full name, school or address, cover it before taking the photo.

4Why we use it and on what legal basis

  • To make and deliver the free picture and the video you ordered, to review a claim, redo it or refund: the contract with you, or steps you ask for before it (GDPR Art. 6(1)(b); ZZPL Art. 12(1)(2)).
  • Accounting and tax records of orders: our legal obligation (GDPR Art. 6(1)(c); ZZPL Art. 12(1)(3)).
  • Security, preventing misuse of free pictures and fixing errors: our legitimate interest in a safe, working service (GDPR Art. 6(1)(f); ZZPL Art. 12(1)(6)).
  • Showing your video as an example and the waiting list: only with your consent (GDPR Art. 6(1)(a); ZZPL Art. 12(1)(1)). You can withdraw it at any time.

5Generative AI

The drawing is analysed, and the hero picture, the video and the voice are created, automatically by generative AI models of our service providers (section 6). Results are marked as AI-generated. This is not a decision about you with legal or similarly significant effects (GDPR Art. 22). We don't use your drawings, names or videos to train AI models, and we use our providers only under terms that don't allow them to train on your data. [CHECK_PROVIDER_TRAINING_TERMS]

6Who processes data for us

These providers work for us under data processing agreements and use the data only to do their job for us:

  • fal.ai — Features & Labels, Inc., USARuns the models that make the hero picture, the video and the voice. Receives the drawing photo, the hero description and name, your child's first name and the voice language. fal.ai may pass the request to the company that made the model, under fal.ai's terms.
  • Google — Gemini API, Google LLC, USALooks at the drawing and suggests who the hero is. Receives the drawing photo and your note.
  • [HOSTING_PROVIDER]Hosts the site and stores the files until they are deleted.
  • [EMAIL_PROVIDER]Sends the emails with the video link. Receives your email address and the link.

[PAYMENT_PROVIDER] handles the payment, taxes and receipts as Merchant of Record. For payment data it is an independent controller under its own privacy policy: [PAYMENT_PROVIDER_PRIVACY_URL].

7Data sent outside Serbia and the EU

Some providers are in the USA. We send data there only with safeguards required by law: the EU–US Data Privacy Framework where the provider is certified, or standard contractual clauses (of the European Commission and of the Serbian Commissioner for Personal Data Protection).

8How long we keep data

  • Drawing photo, your note, hero picture, video, hero name, child's first name: deleted automatically 30 days after the video is delivered. If you only made the free picture: 30 days after it was made. You can delete everything earlier with the “Delete” button on the video page or by writing to us. Please download the video before that.
  • Example videos you allowed us to show: until you withdraw your consent.
  • Email and order details: as long as tax and accounting law requires, [ACCOUNTING_RETENTION_YEARS] years.
  • Support messages: up to 12 months after the last message.
  • Claims (text, email, order number, our decision): [CLAIMS_RETENTION].
  • Server logs: up to 30 days.
  • Free-picture counters (device ID, IP address): 24 hours after the last free picture.
  • Consent record (about starting right away): together with the order details.
  • Waiting list: until we send the one email about the cartoon, or until you unsubscribe.

9Cookies

We don't use advertising or analytics cookies. The site saves only your language choice (and, in the video maker, the device ID for the free pictures) in your browser. Fonts are served from our own server, so your browser does not contact Google Fonts. The [PAYMENT_PROVIDER] checkout may use its own cookies that are needed for payment and fraud prevention. If we ever add analytics, we will update this policy and ask for consent where the law requires it.

10How we protect data

Encrypted connection (HTTPS), access only for the operator, private video links that are hard to guess, and automatic deletion. No method is 100% safe. If a data breach puts you at risk, we will tell you and the authority as the law requires.

11Your rights

You can ask us to:

  • show you what data we have about you and give you a copy;
  • correct it;
  • delete it;
  • limit its use, or object to use based on our legitimate interest;
  • give it to you in a common file format (portability);
  • withdraw your consent at any time (this doesn't affect what was done before).

Write to doodlehellostudio@gmail.com. It's free. We answer within 30 days. To protect you, we may ask you to write from the email used for the order.

You can complain to a supervisory authority. In Serbia: the Commissioner for Information of Public Importance and Personal Data Protection (Poverenik), Bulevar kralja Aleksandra 15, 11000 Belgrade, www.poverenik.rs. In the EU or the UK: the data protection authority of your country.

We don't sell or share personal data for advertising.

12Changes

We may update this policy. The date at the top shows the latest change. If we change how we use your data in an important way, we will say so on the site before it applies.

13Contact

Ruslan Sakhautdinov, Braće Lučić 4, 21102 Novi Sad, Serbia. Email: doodlehellostudio@gmail.com.