MastiReel

MastiReel Privacy Policy

Draft for legal review. This is a working template written to match how the product actually handles data. Have qualified counsel review before publishing. Replace bracketed placeholders.

Effective date: [DATE] Last updated: [DATE]

MastiReel ("the App", "we", "us") is operated by [ACKBiz LEGAL ENTITY NAME], [registered address, India] ("the Company"). This policy explains what data we collect, why, and the choices you have. It applies to the MastiReel mobile app and the MastiReel website.

1. What we collect

Account data

  • Phone number or email address (for sign-in via one-time code).
  • Display name, if you set one.

Content you create

  • The idea text and script edits you type.
  • Characters you create: name, age group, role, language, and - only if you choose to add one - a photograph used to keep the character's appearance consistent.
  • The videos generated for you.

Purchase data

  • Credit balance and transaction history. Payments are processed on our website by a payment processor ([PROCESSOR NAME]); we never receive or store your card details.

Technical data

  • Device model, OS version, app version, language, crash logs, and basic usage events (for example: video created, video failed). We use these to fix problems and improve the App.

We do not collect your contacts, precise location, or background microphone or camera data.

2. Photographs and face data

  • Adding a photo to a character is optional and always your explicit choice.
  • Photos are used for one purpose only: keeping that character visually consistent in videos you generate. We do not use your photos to train our own models, do not sell them, and do not use them for advertising.
  • You must only upload photos of people who have agreed to appear in your videos.
  • Children are treated differently: the App never clones a child's face. Characters marked as children are "look matched" from your text description only.
  • Deleting a character permanently deletes its photo from our systems within [30] days.

3. How generation works (third-party AI providers)

To generate scripts, voices and video, your idea text, character descriptions and (for adult characters with photos) the character photo are sent to AI service providers under contract with us, currently including Google (Gemini and Veo APIs) and Runway. These providers process the data to produce your video and are contractually restricted from using it for other purposes, subject to their own published terms. We choose providers whose policies prohibit training on customer data submitted via paid APIs.

4. How long we keep things

  • Generated videos: stored in your library and auto-deleted from our cloud [30] days after creation. Download anything you want to keep.
  • Ideas and scripts: kept while your account is active so you can reuse them.
  • Character photos: kept until you delete the character or your account.
  • Account and transaction records: kept as required by Indian tax and accounting law.

5. What we share, and with whom

  • AI providers (Section 3) - to generate your content.
  • Payment processor - to process website purchases.
  • Cloud hosting ([PROVIDER]) - to run the service.
  • Analytics (Google Analytics 4, on the website only) - aggregate usage only; we do not sell personal data to anyone.
  • Authorities - only if legally required.

6. Your rights

You can, at any time, from inside the App or by writing to us:

  • Access or export your data.
  • Correct your account details.
  • Delete a character, a video, or your entire account. Account deletion removes personal data within [30] days, except records we must keep by law.
  • Withdraw consent for a photo-based character (the character reverts to description-only).

India: rights under the Digital Personal Data Protection Act, 2023 (DPDP Act) apply, including grievance redressal below. EU/UK visitors: the equivalent GDPR rights apply, with legal bases of contract (providing the service), consent (photos), and legitimate interest (security and improvement).

7. Children

MastiReel accounts are for users 13 and older. Store age rating is 12+. Users under 18 should use the App with a parent or guardian's consent. We do not knowingly collect data from children under 13; if you believe a child has created an account, contact us and we will delete it.

8. Security

Data is encrypted in transit (TLS) and at rest. Access to production data is restricted and logged. API keys for AI providers exist only on our servers - never inside the mobile app. No system is perfectly secure; we will notify you and the authorities of any breach as the law requires.

9. Website cookies

The website uses essential cookies to keep you signed in. It also offers Google Analytics 4, which counts visits and shows us which pages people read, and which sets its own cookies to tell one visit from another.

Analytics only runs if you agree. The first time you visit we ask. Until you accept, Google Analytics is not loaded at all - no request is made to Google and no analytics cookie exists. If you decline, or simply ignore the notice, nothing is loaded.

You can change your mind at any time from Cookie settings in the footer of every page. Withdrawing consent deletes the analytics cookies already on your device.

We turn off Google Signals and ad personalisation, so nothing measured here is joined to your Google profile or used to build advertising audiences. We set no advertising cookies of our own and run no ad networks.

The App itself does not use Google Analytics for website measurement; crash reporting and in-app analytics are described in Section 3.

10. Changes

We will post any changes here and, for material changes, notify you in the App before they take effect.

11. Contact and grievance officer (India)

Grievance Officer: [NAME] Email: [privacy@DOMAIN] Address: [REGISTERED ADDRESS] We respond within the timelines required by the DPDP Act and the IT Rules, 2021.