Privacy Policy

The short version. We collect what we need to run Razzmatazz: your account details, the media and text you give us, what you create, your purchases and basic technical data. We use it to make the content you ask for, keep the service safe and get paid. We don’t sell your information, we don’t show ads, and we don’t use your content to train AI models. If you connect TikTok, Instagram or YouTube, we post only what you tell us to and show you how those posts perform. Faces and voices in your media are analyzed only to make the edit you ask for, and any measurements are destroyed within 30 days. You can see, download or delete your information at any time. This summary helps you find your way around; it isn’t a substitute for the full policy below.

Who we are

Razzmatazz is operated by Razzmatazz (“Razzmatazz,” “we,” “us” or “our”). We are the controller of the personal information described in this policy, which means we decide how and why it’s used.

Questions or requests about privacy go to privacy@razzmatazz.ai.

What this policy covers

This policy applies to personal information we process when you use the Razzmatazz mobile apps, visit razzmatazz.ai, contact us or otherwise interact with our services (together, the “Service”). It doesn’t cover how the platforms where you post your content, such as TikTok, Instagram or YouTube, handle your information (even when you post to them from the app), or the app stores and sign-in providers you use. They have their own privacy policies.

Words like “Your Content” and “Outputs” have the meanings given in our Terms of Service.

Information we collect

Information you give us

• Account information. Your email address and, if you sign in with Apple or Google, the name and email address they share with us (and, from Google, your profile photo) and an account identifier, and the name you choose to show in the app. If you use Apple’s “Hide My Email,” we receive a private relay address that forwards to you.
• Your Content. Photos, videos and audio you upload; prompts, stories, scripts and other text you type; the characters you create (including their appearance, style, voice and wardrobe); and the Outputs the Service generates for you. Media you upload may include people’s faces, bodies and voices, and anything else that appears in it.
• Your birthday. When you create an account, we ask for your birthday unless your device has already told us you’re 18 or older. We use it only to confirm your age, and we don’t store it: we keep only the fact that your age was confirmed, when, and how. If the birthday shows you’re under 18, your device keeps it so the check can’t be retried with a different date. It stays on your device.
• Photos. A profile photo you add, and photos added to your workspaces. They’re cropped and resized on your device before they’re uploaded.
• Workspaces. The workspaces you create or join: their names and colors, who’s in each one and with what role, and the email addresses of people invited to them. We also keep a record of changes made in each workspace (such as who renamed it, invited or removed someone, or added credits, and when), which its owner and admins can see.
• Consents and choices. Records of what you agreed to and when, such as consent to features that analyze faces or voices, to automatic renewal of a subscription, and any arbitration opt-out.
• Communications. What you send us when you contact support, report misuse, flag an output, appeal a decision or make a privacy request, along with our replies.

Information collected automatically

• Usage information. The features you use, the jobs you start and their status, credit balance and credit history, and the dates and times of these actions.
• Device and app information. Device model, operating system and version, app version, language, time zone and an app installation identifier. We don’t collect advertising identifiers.
• Log and diagnostic information. IP address, request details, error reports and performance data that our servers and error monitoring tools record.
• Approximate location. Your country or region, inferred from your IP address or app store account, for example to show the right prices and meet legal requirements. We don’t collect precise location.

Information from others

• Sign-in providers. Apple and Google tell us your account identifier and the name and email address you choose to share.
• Your device or app store. With your permission, Apple (through its Declared Age Range feature) or Google Play (through Play Age Signals) tells us whether you’re 18 or older and whether that was declared by you, declared by a parent or guardian, or confirmed by the store. Some laws require us to ask for this signal.
• App stores and payment partners. Apple, Google, Stripe and our subscription management provider tell us about your purchases and subscriptions: the product, price, currency, country, transaction identifiers, renewal and cancellation status, and refunds or chargebacks. We never receive your full card number.
• Social platforms you connect. If you connect a TikTok, Instagram or YouTube account, the platform shares what’s described in “Connected social accounts” below.
• People who report misuse. If someone reports a video you made (for example, one posted on another platform), their report may include information about you.

How we use information

We use personal information only for the purposes below. If you’re in the European Economic Area, the United Kingdom or Switzerland, the law requires us to have a legal basis for each purpose, which is shown in the right-hand column.

Where we rely on legitimate interests, we’ve weighed them against your rights, and you can object (see “Your rights and choices”). Where we rely on consent, you can withdraw it at any time; this doesn’t affect processing that already happened. You don’t have to give us personal information, but we can’t provide the Service without the information needed to run your account and create your content.

AI processing and model training

To create content, we send your prompts, the media you choose and the relevant character details to AI model providers that generate images, video, voice and text on our behalf, and we receive the results. These providers act as our service providers: they may process this information only to provide their services to us, under contracts that require them to protect it.

We don’t use Your Content (your uploads, prompts, characters or Outputs) to train AI models. The AI model providers that generate your content receive only what’s needed for each request, and they process it under their own terms. Depending on the provider, those terms may allow it to keep what it receives for a limited time (for example, to monitor for abuse) or to use it to improve its own models. Wherever a provider lets us turn off storage or training, we do. We may use aggregated or de-identified information that doesn’t identify you or reveal Your Content, such as how often a feature fails, to improve the Service.

Outputs carry a visible AI label and machine-readable provenance information (such as C2PA Content Credentials and other embedded disclosures) that identify them as AI-generated. This provenance information describes how the content was made; it doesn’t include your name or email address.

Faces, voices and biometric information

This section is our notice about biometric information, and our publicly available written policy, including our retention schedule and destruction guidelines, for any data we process that is a biometric identifier or biometric information under applicable law (for example, the laws of Illinois, Texas, Washington and Colorado).

What we do. Some features, such as recasting a person in a video you upload, need AI models to analyze the faces, bodies or voices that appear in your media. This analysis may involve measuring facial geometry or voice characteristics. We do this only to produce the specific edit or content you asked for.

What we don’t do. We don’t create or keep face templates, faceprints or voiceprints to identify or recognize anyone. We don’t use this information to identify, verify, authenticate or track anyone, or to infer characteristics about anyone. We don’t sell, lease, trade or otherwise profit from it. We don’t disclose it to anyone except the service providers who process it to perform the job for us, or where required by law or valid legal process.

Consent. Before your first use of a feature that analyzes faces or voices, the app asks for your explicit consent, which you give by an electronic signature (tapping to agree after reading the notice). Our Terms require that you have permission from every identifiable person who appears in media you upload. You can withdraw your consent at any time by emailing privacy@razzmatazz.ai; after that you won’t be able to use those features.

Retention schedule and destruction. Any facial geometry, face or voice measurements or similar data generated while a job runs is used only for that job. It is permanently destroyed when the job ends (whether it succeeds, fails or is canceled), and in any case no later than 30 days after it was created. This is sooner than any deadline the law sets. Destruction means deleting the data from our systems and our service providers’ systems so it can’t be recovered.

The media itself. Photos, videos and audio you upload are kept as Your Content until you delete them or your account (or earlier, if the app tells you uploads are deleted automatically after a set period). Some laws treat images of faces and recordings of voices as biometric information in themselves, so we protect them to the same standard: we use them only to provide the Service to you, and after you delete them they’re permanently destroyed from our live systems within 30 days and from backups within a further 30 days.

Security and incidents. We store, transmit and protect this information using a reasonable standard of care that is at least as protective as the way we handle our other confidential and sensitive information. We maintain an incident response protocol, and if a security incident affects this information, we’ll notify you and the relevant authorities as the law requires.

Connected social accounts

You can connect a TikTok, Instagram or YouTube account to post from the app and see how your posts perform. Razzmatazz isn’t a social network: other people can’t see your content in the app unless you add it to a workspace you share with them.

What we receive. With the permissions you approve on the platform’s consent screen, the platform gives us your account identifier, username, display name, profile picture and account type, and access tokens that let us act for you within those permissions. For each video you publish through Razzmatazz, we receive its post identifier, link and publishing status, and the metrics the platform provides for it, such as views, likes, comments, shares and watch time. We receive these as totals: we don’t request who viewed or engaged with a post, the content of comments, your followers’ information or your messages.

How we use it. Only to publish the content you choose, where and when you choose, and to show you how it performs. We never post without your instruction. We don’t sell this information, use it for advertising, or use it to train AI models.

Disconnecting. You can disconnect an account at any time in the app. When you do, or when you revoke our access on the platform, we revoke and delete the access tokens right away and delete the other information we received from that platform within 7 days. You can also revoke access directly: for Google and YouTube at Google’s security settings, and for Instagram and TikTok in the connected apps section of their settings.

YouTube. Razzmatazz uses YouTube API Services to publish videos and read their metrics. By connecting YouTube you agree to the YouTube Terms of Service, and Google’s handling of your information is described in the Google Privacy Policy. Razzmatazz’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Automated decisions

Our moderation systems automatically check prompts, uploads and Outputs, and may block a request that appears to break our rules. We don’t make decisions about you that have legal or similarly significant effects based solely on automated processing: decisions to suspend or terminate an account are reviewed by a person. If you think an automated system got something wrong, contact safety@razzmatazz.ai and a person will review it.

How we share information

We don’t sell your personal information and we don’t share it for targeted advertising. We share it only as follows.

Service providers

We use service providers to run the Service, under contracts that require confidentiality and security. Other than AI model providers (see “AI processing and model training”), they may use personal information only to provide their services to us. We use these kinds of providers:

To ask about the providers we use, email privacy@razzmatazz.ai.

App stores, sign-in providers and payment networks

When you sign in with Apple or Google, or buy through the Apple App Store, Google Play or Stripe, those companies process your information under their own privacy policies as independent controllers. For example, Apple and Google handle payment for in-app purchases, and we receive only the transaction details described above. When you buy on our website, you’re taken to a checkout page hosted by Stripe, which uses cookies for payment processing and fraud prevention under Stripe’s privacy policy.

With members of your workspaces

When you’re in a workspace with other people, they can see what’s in it: its content, its photo, its credit balance and history, and the name, email address, profile photo and role of everyone in it. Its owner and admins can also see its change history. When someone invites you, the inviter’s email address is shown to you with the invitation. We don’t email invitations yet: you see an invitation in the app when you sign in with the address it was sent to.

Safety and legal reasons

We may disclose information if we believe in good faith it’s necessary to: comply with the law, legal process or a lawful government request; report apparent child sexual abuse material to the National Center for Missing & Exploited Children (NCMEC), as the law requires; protect the safety of any person or prevent fraud or abuse; investigate or enforce our Terms; or protect our rights and property and those of our users and others. Where the law allows, we’ll tell you about requests for your information.

Business transfers

If we’re involved in a merger, acquisition, financing, reorganization, bankruptcy or sale of assets, personal information may be transferred as part of that deal, subject to this policy or to protections at least as strong.

At your direction

We share information when you tell us to. When you publish from the app, we send the video, caption and settings you choose to the platform you pick, and it becomes visible there to the audience you choose, under that platform’s terms and privacy policy. The same applies when you download content and share it yourself.

Aggregated or de-identified information

We may share information that is aggregated or de-identified so that it can’t reasonably be linked to you. We won’t try to re-identify it.

Cookies, tracking and advertising

The razzmatazz.ai website doesn’t set cookies and doesn’t use analytics, advertising or tracking tools. Our servers keep basic logs, including IP addresses, to deliver and secure the site. The app doesn’t contain advertising tools and doesn’t collect advertising identifiers. We don’t track you across other companies’ apps or websites.

Global Privacy Control and Do Not Track. We honor Global Privacy Control (GPC) signals as a request to opt out of the sale or sharing of personal information for the browser or device that sends them. Because we don’t sell or share personal information, or track you across sites, we treat Do Not Track signals the same way and there’s nothing more we need to change.

Where we process information

We’re based in the United States, and we and our service providers process personal information in the United States and in other countries where they operate. Those countries may have data protection laws different from yours.

When we transfer personal information from the European Economic Area, the United Kingdom or Switzerland to countries without an adequacy decision, we use safeguards the law recognizes: the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum or Agreement, their Swiss equivalents, and, where a provider is certified, the EU-US Data Privacy Framework and its UK and Swiss extensions. You can ask for a copy of the relevant safeguards by emailing privacy@razzmatazz.ai.

How long we keep information

We keep personal information only as long as we need it for the purposes in this policy, and then delete or de-identify it.

We may keep information longer if the law requires it, or if it’s needed for an active investigation, legal claim or legal hold.

Security

We protect personal information with technical and organizational measures appropriate to the risk, including:

• encryption in transit (TLS) and encryption at rest provided by our hosting and storage providers;
• database rules that let each user read only their own records;
• time-limited, single-purpose links for uploading and downloading media;
• access controls and least-privilege access for our team and systems, with credentials kept out of source code; and
• monitoring and logging to detect and respond to misuse.

No system is completely secure, and we can’t guarantee the security of information. If a data breach affects your personal information, we’ll notify you and the relevant authorities as the law requires. Keep your sign-in methods secure and tell us at support@razzmatazz.ai if you suspect unauthorized access.

Your rights and choices

Your choices in the app

• See and delete content. You can view and delete your characters, uploads and Outputs in the app at any time.
• Disconnect social accounts. In the app, go to Settings, then Connected accounts. See “Connected social accounts” for what happens next.
• Delete your account. In the app, go to Settings, then Account, then Delete account, or follow our Delete account instructions.
• Emails. Service messages, such as sign-in codes and receipts, are part of the Service. If you opt in to news or offers, you can unsubscribe with the link in any of those emails.

Your privacy rights

Depending on where you live, you may have the right to:

• Access and portability: know what personal information we have about you and get a copy, in a portable format where required;
• Correction: correct inaccurate information;
• Deletion: have us delete your information;
• Restriction and objection: limit how we use your information, or object to processing based on legitimate interests;
• Withdraw consent: withdraw consent you’ve given, such as for face and voice features;
• Opt out: opt out of the sale or sharing of personal information, targeted advertising, and profiling that produces legal or similarly significant effects (we don’t do any of these);
• Limit use of sensitive personal information: we use sensitive personal information only to provide the Service you ask for and for other purposes the law permits, so there’s nothing further to limit; and
• Non-discrimination: exercise these rights without being treated differently. We won’t deny you the Service, charge you a different price or give you a different quality of service because you exercised a privacy right.

We’ll honor these requests for all users, wherever you live, to the extent we reasonably can, subject to the exceptions the law allows (for example, we’ll keep purchase records we’re required to keep).

How to make a request

Email privacy@razzmatazz.ai from the email address on your account, or use the options in the app. To protect you, we’ll verify your request, usually by confirming you control the email address on your account; for some requests we may ask for more information. We’ll only use information you provide for verification to verify your request.

Authorized agents. You can have an authorized agent make a request for you. We’ll ask for proof that you gave the agent signed permission, and we may ask you to verify your identity directly with us, unless the agent has a valid power of attorney.

Timing. We respond within the time the law requires: generally within one month in the European Economic Area, the United Kingdom and Switzerland (extendable by two months for complex requests), and within 45 days in US states (extendable by 45 days where permitted). We’ll tell you if we need more time and why.

Appeals

If we decline to act on your request, we’ll explain why. You can appeal our decision by emailing privacy@razzmatazz.ai with the subject line “Privacy appeal” within a reasonable time after our decision. A person who didn’t make the original decision will review it, and we’ll respond in writing within the time the law requires (generally 45 to 60 days), explaining what we did and why. If we deny your appeal, you can contact your state’s Attorney General to submit a complaint.

US state privacy notice

This section adds information required by the privacy laws of California and other US states with comprehensive consumer privacy laws, including Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia, and others as their laws take effect. It serves as our notice at collection for California residents.

Categories of personal information

In the past 12 months, we have collected the following categories of personal information. We collect them from you, from your device and use of the Service, and from the sign-in providers, app stores, payment partners and social platforms described above.

We don’t collect precise geolocation, and we don’t create profiles or draw inferences about your characteristics. We use sensitive personal information only for purposes the law permits without offering a right to limit, and we don’t use it to infer characteristics about you.

Disclosures

In the past 12 months, we have disclosed each category above for business purposes to the service providers listed in “How we share information,” and, where required, to law enforcement, NCMEC or other authorities. We have not sold or shared personal information, including sensitive personal information, and we have no actual knowledge of selling or sharing the personal information of anyone under 16. We don’t process personal information for targeted advertising or for profiling that produces legal or similarly significant effects.

California “Shine the Light”

We don’t disclose personal information to third parties for their own direct marketing purposes.

Nevada

We don’t sell covered information as Nevada law defines it. You can still email privacy@razzmatazz.ai with any request.

Consumer health data (Washington, Nevada and Connecticut)

Some state laws, such as Washington’s My Health My Data Act, treat images of faces and recordings of voices from which an identifier template can be extracted as “biometric data,” a type of consumer health data. We don’t collect any other kind of health data. To the extent those laws apply to media you upload:

• we collect it from the media you choose to upload, only to provide the feature you request, and only with your consent;
• we share it only with the service providers who process it to provide the Service (hosting, storage and AI model providers) and as the law requires, and never sell it;
• you can access or delete it, and withdraw your consent, as described in “Your rights and choices”; and
• the rest of this policy, including “Faces, voices and biometric information,” describes how we handle and protect it.

European Economic Area, United Kingdom and Switzerland

If you’re in the European Economic Area, the United Kingdom or Switzerland, Razzmatazz is the controller of your personal information, and the legal bases we rely on are listed in “How we use information.” You have the rights described in “Your rights and choices.” You also have the right to lodge a complaint with the data protection authority where you live, work or think a violation happened: in the EEA, see the list of authorities; in the UK, the Information Commissioner’s Office; and in Switzerland, the Federal Data Protection and Information Commissioner. We’d appreciate the chance to address your concern first, so please contact us.

Children

The Service is only for people 18 and older. We don’t knowingly collect personal information from anyone under 18, including children under 13. We confirm age when an account is created, and if the check shows someone is under 18, we delete the account and its information right away. If we learn in any other way that we’ve collected information from someone under 18, we’ll delete it and close the account. If you believe a minor has given us information, contact privacy@razzmatazz.ai.

Changes to this policy

We may update this policy from time to time. We’ll post the updated policy here and change the date at the top. If a change is material, we’ll tell you in advance by email or in the app. If a change would let us use personal information we’ve already collected in a materially different way, we’ll ask for your consent where the law requires it.

Contact us

Email privacy@razzmatazz.ai with any question, request or complaint about privacy.