1. Who we are
Joyful AI Team (“we”, “us”) operates Content Studio (the “Service”) and decides how and why the personal data described here is processed: we are its controller and the owner of the database that holds it. This policy is part of our Terms of Service. Our contact details are at the end of this page.
2. What we collect
- Account details: your username, email address, password (stored only as a salted hash we cannot reverse), role, plan, team, the invitation you joined with and your settings. If you first sign in with an account of another service we operate, we check your password with that service once and then keep a separate account here.
- Your content: prompts, chat messages, instructions, uploads (such as images and documents), avatar details (names, looks, facts and voice choices), your reviews, fixes, scores and annotations, and everything the Service generates for you — scripts, voices, images, videos and captions.
- Credits and payments: purchases, plans, your credit balance and history, invoices and receipts, and the payment processor’s references. You enter card details into our payment processor, which processes them; we never see or store full card numbers.
- Usage and technical data: the internet (IP) address of your requests, dates and times, the pages and features you use, the requests you make and their results, error reports, and your browser’s type and settings, as recorded in our logs.
- Your agreement to our Terms and this policy: the version, the time and the internet address it came from.
- Messages you send us, and our replies.
You are under no legal obligation to give us personal data, but without it we cannot provide the Service. Please do not put sensitive personal data (for example about health, beliefs or sex life) or other people’s personal data into your prompts or uploads unless you are allowed to share it.
3. How we use it
- to provide and operate the Service: sign you in, carry out what you ask, generate, store and show your content, and publish it where you ask;
- to keep the Service and its users safe: authentication, fraud and abuse prevention, limits, content screening and security monitoring;
- to manage credits, plans and payments, and to issue invoices and receipts;
- to review, score and annotate generated content, and to analyse, develop and improve our services — including evaluating, fine-tuning and training AI models and systems, ours or those trained for us;
- to promote the Service, including by showing examples of content made with it, as our Terms allow;
- to communicate with you about your account, the Service and changes to our terms and, where the law allows or you agreed, about offers;
- to comply with the law, enforce our Terms, and establish, exercise or defend legal claims.
4. Legal bases (where the GDPR applies)
We rely on the performance of our contract with you (to provide the Service, credits and payments); our legitimate interests (security, fraud prevention, improving and developing our services and AI models, promotion and legal claims), which we balance against your rights; your consent where the law requires it, which you may withdraw at any time without affecting earlier processing; and our legal obligations (such as tax and accounting records).
5. AI processing
To generate content, we send the relevant Input — such as prompts, uploaded images, avatar details and scripts — to AI model, voice and media providers that process it for us. Output is generated automatically and may be inaccurate.
Some requests are screened automatically for safety and may be refused; contact us if you believe a refusal was wrong. We do not make decisions with legal or similarly significant effects on you solely by automated means.
7. International transfers
We and our providers process data in Israel and in other countries, including the European Union and the United States, whose laws may differ from those where you live. Where the law requires, we transfer personal data only with appropriate safeguards — such as a transfer to a country recognised as protecting data adequately (Israel is one), the European Commission’s standard contractual clauses, or as Israel’s rules on transfers of data abroad allow.
8. How long we keep it
We keep account data and content while your account is open, and afterwards for as long as the purposes in this policy need — for example to resolve disputes, enforce our Terms, meet legal, tax and accounting obligations (financial records are usually kept for at least seven years) and keep backups. Records of your agreement are kept for as long as they may be needed as evidence.
Content and data used to evaluate or train AI models, and aggregated or de-identified data, may be kept after your account closes; data already reflected in a trained model cannot always be removed from it. Logs are kept for a limited time, then deleted or aggregated.
9. Security
We protect data with measures suited to the risk, including encrypted connections (HTTPS), passwords stored only as salted hashes, signed session cookies and access limited by role. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a security incident affects your personal data, we will notify you and the authorities where the law requires.
11. Your rights
Under Israel’s Protection of Privacy Law, you may ask to review the personal data about you that we hold in a database, and ask us to correct or delete data that is inaccurate, incomplete, unclear or outdated.
Where the GDPR or a similar law applies, you may also ask to access, correct or erase your data, to restrict or object to its processing (including processing based on legitimate interests, and direct marketing), to receive it in a portable format, and you may withdraw consent at any time. You may complain to a data-protection authority — in Israel, the Privacy Protection Authority — or to the authority where you live or work.
To use a right, contact us (see below). We may need to verify your identity, and we will answer within the time the law sets. Where the law allows, we may refuse or limit a request — for example when we must keep data for legal reasons or need it to defend legal claims.
You can opt out of marketing messages at any time, through the link in the message or by contacting us. We send advertising messages only as the law allows.
12. Children
The Service is for adults (18 and over). We do not knowingly collect personal data of children; if you believe a child has given us personal data, contact us and we will delete it.
13. Changes to this policy
We may update this policy. The version in force and its date are shown at the top of this page. When we make a material change, we will ask you to agree to the new version before you continue using the Service, or notify you as the law requires.
14. Contact
Joyful AI Team
Write to us through the studio team that gave you access to the Service; they will pass your message on.