Privacy Policy

1. Who is responsible

This Privacy Policy explains how Wyattly LLC ("we", "us"), a Wyoming limited liability company at 30 N Gould St Ste R, Sheridan, WY 82801, USA, collects and uses personal information when you use Explainimate (the "Service"). We are the controller of that information. Questions go to [email protected].

2. What we collect

1. Account details: your email address, name, password (stored only as a hash) and, if you sign in with Google, the basic profile Google shares with us (name, email address and profile picture).
2. What you put into a video: the topics, prompts, scripts and notes you type, the settings you choose, and any image you upload, such as a photo of your hand.
3. What the Service makes for you: scripts, scene plans, drawings and narration audio, saved as projects in your account. The video file you export is encoded in your browser and saved on your device; it is not uploaded to us.
4. Credits and payments: your credit balance and how credits were used, your plan, and orders. Stripe sends us a customer ID, the status of your subscription and payments, and your billing email; we never receive your full card number.
5. Security and abuse prevention: your IP address, a browser fingerprint recorded at sign-up, and the result of a Cloudflare Turnstile check. If you write scripts without an account, we count them against a salted, one-way hash of your IP address rather than the address itself.
6. Where you came from: the marketing parameters (utm_*) on the link you arrived through, kept with your account.
7. Usage and device data: pages you visit, features you use, browser and operating system, collected through analytics as described in section 6.
8. Messages: what you send us by email or through the feedback form, and the emails we send you.

3. Why we use it

• To provide the Service (performance of our contract with you): create and save your projects, generate scripts, drawings and narration, keep your credit balance, and process purchases.
• To keep the Service safe (our legitimate interests): stop fraud, spam and abuse, enforce limits on free use, and stop the same person from claiming free credits more than once.
• To improve the Service (our legitimate interests, or your consent where the law requires it): understand which features are used and fix problems.
• To communicate with you: send verification codes, password resets, receipts and important notices about your account or these policies. We send marketing emails only if you have agreed to receive them, and you can opt out at any time.
• To meet legal obligations: keep tax and accounting records and respond to lawful requests.

We do not sell your personal information, and we do not use your projects to train AI models.

4. Who processes it for us

We share information only with providers that help us run the Service, and only what each needs:

Each provider handles data under its own privacy terms and its agreement with us. We may also disclose information if the law requires it, to protect people's safety or our rights, or to a buyer as part of a merger or sale of the business, which would remain bound by this Policy.

5. How long we keep it

• Projects stay in your account until you delete them. Deleting a project deletes it and its stored audio files.
• Your account stays until you delete it from your account settings. Deleting your account deletes your account details, projects, orders and credit history from our database.
• A record of deleted accounts: to stop free credits being claimed again, we keep a keyed, one-way hash of a deleted account's email address, browser fingerprint and IP address for 180 days. The hash cannot be turned back into the original details.
• Usage records (what each generation used, which is how charges and limits are worked out) are kept while your account exists. Records of anonymous script writing hold only the hashed identifier described in section 2, never the IP address itself.
• Payment records: Stripe keeps records of your payments for as long as tax and financial laws require. Our own copy of your orders is deleted with your account.
• Analytics data is kept according to Google Analytics retention settings, and is aggregated so that it no longer identifies you.

6. Cookies and similar technologies

Visitors from the European Economic Area, the United Kingdom and Switzerland, and visitors whose region cannot be determined, see a cookie banner, and Google Analytics does not store analytics cookies for them unless they accept. You can change your choice at any time with the Cookie Settings link at the bottom of every page, and you can also block cookies in your browser. Essential cookies are needed for the Service to work.

The Service also keeps some data in your browser's own storage: a copy of your projects that is kept in sync with your account, the form you are filling in, and a script under review (for up to a day), so a refresh or a dropped connection does not lose your work. This data stays on your device. Clearing your browser data removes it; what is saved in your account is not affected.

7. Your rights

Depending on where you live, you may have the right to access your personal information, correct it, delete it, receive a copy in a portable format, restrict or object to certain processing, and withdraw consent you have given. You can delete projects and your account yourself in the Service; for anything else, email [email protected]. We will reply within 30 days and may need to confirm your identity first.

• EU, EEA and UK residents can also complain to their local data protection authority.
• California residents have the right to know what personal information we collect, use and disclose, to delete it, to correct it, and not to be treated differently for using these rights. We do not sell or share personal information for cross-context behavioural advertising.

8. Security

We use encrypted connections (HTTPS), hash passwords, keep stored files private, and limit internal access to what each task needs. No system is perfectly secure, so we cannot guarantee that information will never be accessed without permission. If a breach affects you, we will tell you as the law requires.

9. International transfers

We are based in the United States, and our providers may process information in the United States, the European Union and other countries. When information about people in the EEA, UK or Switzerland is transferred, we rely on safeguards such as the European Commission's Standard Contractual Clauses offered by our providers.

10. Children

The Service is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has given us information, email us and we will delete it. Users between 13 and 18 need a parent's or guardian's permission.

11. Changes to this Policy

We may update this Policy. The date at the top of this page shows the latest version. If a change materially affects how we use your information, we will tell you by email or in the product before it takes effect.

12. Contact

Wyattly LLC, 30 N Gould St Ste R, Sheridan, WY 82801, USA Email: [email protected]