Privacy Policy

A sole trader established in Czechia operates LizzFlix and is the controller of your personal data in it. Privacy contact: privacy@lizzflix.xyz.

Data protection officer: none appointed, as none is required. EU representative: not required, the controller is established in the EU. UK representative: none appointed.

LizzFlix provides a private-by-default beta workspace for image, video, and voice generation.

Your prompts, uploads, project data, and outputs are private by default, and LizzFlix does not use them to train its own models. The AI providers that run the generations you start process them under their own terms, and some of those terms let the provider use inputs and outputs to improve its models: Runway's terms of use allow it. See AI content for each provider's policy.

• Account data such as email, display name, language, and authentication identifiers.
• Workspace data such as series, episodes, scenes, notes, prompts, dialogue, and job history.
• Uploaded and generated media such as images, audio, and videos.
• Billing and plan data such as credits, purchases, grants, recent usage, and the billing country of your payments.
• Results of AI sorting, if you use it: where the people in your reference images are, and short descriptions of them (section 5).
• Results of safety checks on prompts, uploads, and outputs (section 5).
• Connected-app data such as the AI apps you connect, the access you approved, and when they connected and what they did.
• Operational data such as logs, error reports, and anti-abuse signals. We do not record your screen.

• To create and secure accounts.
• To run generation, rendering, uploads, and background jobs.
• To process billing, prevent fraud, and support disputes.
• To check content against our Acceptable Use Policy and the law.
• To send service emails: sign-in links, receipts, notices about changes to these documents, and spend notices for connected apps.
• To debug failures, improve reliability, and respond to support or legal requests.

• AI sorting: to sort your reference images, small copies of them are analysed by Cloudflare Workers AI and by OpenAI through OpenRouter. The sort finds the people in the images and matches them to the characters you created. It never identifies who a real person is, and we store no face templates: only boxes and short descriptions, which are deleted when the sort result expires after 30 days, unless you keep a description in a character's notes.
• Safety checks: prompts, uploaded images, and generated outputs may be checked by automated classifiers, OpenAI's moderation service and models on Cloudflare Workers AI, for content our rules prohibit. A person reviews a decision on request.
• Production plans: if you approve a production plan, LizzFlix runs its steps for you without further clicks, within the budget you approved. Each step sends the same data to the same providers as when you start it yourself.

LizzFlix uses third-party infrastructure and model providers to deliver the service. Depending on the action you run, your data may be processed by Cloudflare (hosting, database, storage, email, and Workers AI), Vercel (website), Stripe (payments), fal, Runway, ElevenLabs, and OpenRouter (AI generation; OpenRouter passes writing and planning requests to OpenAI's GPT models), and OpenAI (safety checks). fal passes requests to the model makers it works with, such as Google, Kuaishou, MiniMax, Alibaba, ByteDance, Meta, xAI, and OpenAI. Error reports go to Sentry. Google and Apple process sign-in and push notifications when you use them.

Only the fields reasonably necessary for the selected action are sent to a provider. We do not intentionally send your whole workspace to every provider.

Our database and media storage use Cloudflare's European location hint, which is not a guarantee. Requests may be processed in other Cloudflare locations (Smart Placement, Workers AI).

Some providers process data outside the EEA, for example in the United States. Where required, we rely on their transfer mechanisms, such as the EU-US Data Privacy Framework or standard contractual clauses.

We use access controls, environment secrets, provider-scoped credentials, and operational logging to protect the service, but no online system can guarantee absolute security.

Stripe processes your payment details; we do not see your full card number. We keep the billing country of your payment, which Stripe gives us, to choose the currency we charge and for our records. The country your connection comes from may be used to suggest a currency; we do not store it.

We send service emails to your account address: sign-in and password reset links, receipts and purchase confirmations, notices of our decisions about your content, notices about changes to these documents and, if a connected app spends many credits in one day, a spend notice. We send no marketing email.

We keep account, workspace, job, billing, and error records for as long as needed to run the beta, comply with law, defend claims, prevent abuse, and handle support requests.

You can request deletion, access, correction, or export at privacy@lizzflix.xyz or through the contact page.

• Access, rectification, erasure, restriction, objection, and portability where applicable.
• The right to complain to a data protection supervisory authority, in particular in the EU country where you live or work. Our lead authority is Úřad pro ochranu osobních údajů (ÚOOÚ), Pplk. Sochora 27, 170 00 Praha 7, https://uoou.gov.cz.
• Send requests to privacy@lizzflix.xyz or through the contact page.

• When you connect an AI app, such as an AI assistant, through the LizzFlix MCP server, it receives what the access you approved allows: your studio overview; your series, characters, locations, episodes and scenes with their prompts and dialogue; task status; your account email, display name and language; your plan, credit balance and billing history; and short-lived links to your media. With write access it can change your studio and your display name and language, and with spending access it can start paid actions within your balance and create links to buy credits or manage your subscription.
• If a connected app asks to see your reference images, we send it small previews of them, including images of real people you uploaded. The previews go to the AI service of the app you chose, for example Anthropic for Claude.
• The company behind the app processes that data under its own privacy policy; LizzFlix does not control it. You choose the app, so it is not one of our subprocessors.
• If you add an image in a connected app's LizzFlix upload window, the image passes through that app's service to LizzFlix, and we store it as we store images you upload on lizzflix.xyz.
• We record the connection, its access and the actions it takes.
• A connection ends 30 days after the app last used it, and at the latest 90 days after you approved it. You can disconnect an app at any time in Profile, under Connected apps; its access ends immediately.