Legal
Privacy Policy
What Gasp collects, why we collect it, who else processes it, and how to get a copy or have it deleted.
Draft, pending legal review. This document is placeholder copy written to describe how Gasp actually works. It has not been reviewed by a lawyer and is not yet binding.
Last updated
1. What we collect
- Account data — email address, display name, handle, avatar, and role. Sign-in itself is handled by Clerk; we never see your password.
- Creator data — scripts, character descriptions, shot prompts, generated images and video, and the moderation verdicts attached to them.
- Viewing data — which episodes you watched, your play position, likes, and unlocks. Signed-out viewers are counted against a random, device-local id stored in your browser (
gasp.sid) rather than an account. - Payment data — the amount, currency, product, and Stripe identifiers of a purchase. Card numbers go to Stripe directly and never touch our servers.
- Operational data — request logs, model call costs, error traces, and webhook receipts.
2. Why we use it
To run your account and entitlements, to generate and deliver episodes, to enforce the Content Guidelines, to detect abuse and control generation spend, to process payments, and to send transactional email such as invites and receipts.
Where the law requires a legal basis, we rely on performance of the contract for the service itself, our legitimate interest in security and abuse prevention, and consent for anything optional.
3. Who else processes it
- Clerk — authentication and account records.
- Convex — the application database and functions.
- fal.ai and the model providers behind it — prompts and reference images, to generate images and video.
- OpenRouter — script and shot drafting, and text moderation.
- Mux — video encoding, storage, and signed playback.
- Stripe — payments and subscriptions.
- Resend — transactional email.
We do not sell personal data. Providers may process data outside your country; where that happens we rely on their standard contractual clauses.
4. How long we keep it
Account data lasts as long as the account. Unpublished drafts and generated assets are kept while the account is active. Ledger and payment records are retained for as long as tax and accounting law requires. Logs and webhook receipts are rotated on a short schedule.
5. Your rights
Depending on where you live you may request access, correction, deletion, portability, or restriction of your data, and you may object to processing based on legitimate interest. Write to privacy@gasp.example and we will respond within the period the applicable law allows.
Deleting your account removes your published series from the library. Copies may persist in backups for a limited window.
6. Children
Gasp is not intended for anyone under 13, and mature series require an 18+ confirmation. If we learn that we hold data about a child below the minimum age we delete it.
8. Contact
Privacy questions and requests: privacy@gasp.example.