Privacy Policy
Effective July 13, 2026
This policy explains what FanFind Studio (the "Service", operated by FanFind) collects, why, and what happens to it. The short version: we collect what the product needs to work, we do not sell it, and the most sensitive thing you give us, the photos you upload, can be deleted by you at any time.
1. What we collect
- Account data. Your email address and a hashed password. We never store your password itself.
- Character photos. The photos you upload to train an AI character. These are the most personal content in the Service and are handled as described in section 2.
- Generated media. The stills and videos produced by your jobs, plus a copy of each source video used for the side-by-side review view.
- Usage data. Job records (what you recreated, when, and its status), your watched accounts, and settings.
- Billing data. Payments are processed by Stripe. We store your Stripe customer id, plan, and subscription status. We never see or store your card number.
2. How photos and media are processed
- Uploaded character photos are screened automatically before training. Screening sends each photo to Anthropic's AI vision API, which checks for content we do not allow (for example apparent minors or public figures). Rejected photos are flagged to you with the reason.
- One frame from each source video is sent to the same API to describe the scene and read any on-screen text. Faces are not identified.
- Training photos are sent to fal.ai, our generation provider, to train your character's model. The trained model is stored by us and used only for your jobs.
- Media is stored on Cloudflare R2. Object addresses are long random keys that are practically unguessable, and nothing about your account is browsable publicly.
3. Who processes data for us
| Processor | What they handle |
| Stripe | Subscription payments and invoices |
| Cloudflare R2 | Storage of photos, stills, and videos |
| fal.ai | Character training and video generation |
| Anthropic | Automated photo screening and scene description |
| Resend | Transactional email (for example password resets) |
We do not sell your data, share it with advertisers, or use it to train AI models of our own.
4. Cookies
The Service uses a single session cookie to keep you signed in. There are no analytics trackers, advertising cookies, or third-party scripts.
5. Retention
- Account data and job history are kept while your account exists.
- Media for recreations you reject is deleted from storage about 14 days after rejection. Unpicked candidate stills are deleted about 7 days after you pick one.
- When your account is deleted we remove your account data, photos, trained models, and generated media from our systems.
6. Your rights
Email contact@fanfind.net from your account address to request a copy of your data, correct it, or delete your account and everything in it. We answer within 30 days. If you are in the EU or UK you also have the right to complain to your local data protection authority; our legal bases for processing are the contract we have with you and our legitimate interest in keeping the Service safe.
7. Security
Passwords are hashed with a per-user salt. Access to production systems is restricted. No system is perfectly secure, so if a breach affecting your data ever occurs we will notify you.
8. Age
The Service is for adults. We do not knowingly collect data from anyone under 18, and accounts found to belong to minors are deleted.
9. Changes
If this policy changes materially we will notify you by email or in the app before the change takes effect.
10. Contact
Privacy questions and requests: contact@fanfind.net.