Privacy Policy

This Privacy Policy explains how mail-santa.com ("we," "us," or "our") collects, uses, discloses, and protects personal information when you use our website and services that generate personalized Santa videos using AI (the "Services"). 1) Information We Collect Information you provide Email address (for delivery and support) Child's first name, age range, and gender (for personalization) Custom details/photos/audio you choose to supply for the video Support communications (e.g., messages you send us) Payment info Payments are processed by Stripe. We do not store full card numbers or CVV. Stripe may store limited payment details as needed to process your transaction. Automatically collected Device and usage data (IP address, browser type, pages viewed, timestamps, referrer/UTM), cookies and similar technologies (see "Cookies"). 2) How We Use Personal Information We process personal information to: Create and deliver your personalized video Operate, maintain, and improve the Services (including safety, QA, and performance) Process payments, detect and prevent fraud/abuse Send transactional emails (order confirmations, delivery links, support replies) Provide customer support and enforce our Terms Comply with legal obligations Where required by law, we rely on one or more legal bases (e.g., performance of a contract, legitimate interests such as service security/fraud prevention, consent where applicable, and compliance with law). 3) AI Processing and Service Providers To generate the video, we may transmit relevant inputs (e.g., the child's first name/age and your prompts; images/audio if provided) to AI service providers acting as our processors/service providers. We do not permit providers to use your content for advertising. All providers are bound by confidentiality and security commitments. 4) Data Storage, Security, and Retention We implement reasonable technical and organizational measures to protect personal information. No system is 100% secure. Delivery links expire 1 hour after issuance. If an expired link is accessed by the original purchaser (logged in or via the original secure token), a fresh link is automatically issued and the 1-hour expiry resets (rolling window). We may rate-limit anomalous requests. Link renewal does not extend the underlying file retention period. Retention: Source assets you upload (photos/audio/text): retained indefinitely unless you request deletion or we must delete for legal/safety reasons. Final videos: scheduled for deletion on March 1 of the calendar year following delivery (e.g., a video delivered in 2025 is deleted on March 1, 2026). Account/support records and operational logs: typically 12–24 months. Payment/transaction records: retained as required by tax/accounting laws (often 5–10 years, depending on jurisdiction). We may retain limited data to comply with law, resolve disputes, or enforce agreements. 5) Sharing and Disclosure We share personal information only as needed to provide the Services or as required by law: Processors/Service Providers: Stripe (payments) Email delivery provider (transactional emails) Hosting/CDN, analytics, anti-fraud, customer support tools AI service providers (for generation and rendering) Legal and safety: to comply with legal process, enforce Terms, or protect rights, safety, and security. Business transfers: in connection with a merger, acquisition, financing, or sale of assets (your information may be transferred, subject to this Policy). We do not sell your personal information. We do not share children's personal data for advertising. 6) Children's Privacy Our Services are intended for parents/guardians to create content for their children. We do not knowingly collect personal information directly from children under 13 (or under the age defined by local law). Orders must be placed by an adult. If you believe a child has provided personal information directly to us, contact us and we will take appropriate action. 7) International Transfers We may process and store information in countries other than yours. Where required, we use appropriate safeguards for international transfers (e.g., standard contractual clauses, or other legally recognized mechanisms). Providers involved in delivery and AI processing may operate globally. 8) Your Privacy Choices and Rights Depending on your location, you may have rights to: Access the personal information we hold about you Correct inaccurate information Delete personal information (subject to lawful exceptions, and note our default indefinite retention of source assets unless you request deletion) Object to or restrict certain processing Portability (receive a copy in a commonly used format) Withdraw consent where processing is based on consent To exercise these rights, email support@mail-santa.com. We may request additional information to verify your identity. You also have the right to lodge a complaint with your local data protection authority where applicable. Deletion requests: you can request deletion of uploaded assets and generated videos at any time; we will delete associated files unless retention is required by law or for security/fraud prevention. 9) Cookies and Tracking We use cookies and similar technologies for core functionality (e.g., session, security), analytics, and performance. You can control cookies via your browser settings. Some features may not function properly without essential cookies. A separate Cookie Policy may provide more detail. 10) Communications Transactional emails (order, delivery, service notices) are necessary to provide the Services. If we offer marketing emails, you can opt in and unsubscribe at any time via the email footer or by contacting us. 11) Data Minimization by Design Provide only the child data necessary to personalize the video (e.g., first name). Avoid uploading sensitive data unless essential. We apply moderation and technical controls to prevent misuse. 12) Changes to This Policy We may update this Privacy Policy from time to time. We will post the updated version with a new "Last Updated" date. For material changes, we will provide additional notice where feasible. 13) Contact Us Questions or requests: support@mail-santa.com