Privacy Policy

1. Introduction

This Privacy Policy explains how Pawreel ("we", "us", or "our") collects, uses, discloses, and safeguards personal information when you use our website, web application, and API (collectively, the "Service"). Our Service allows users around the world to create AI-generated short-form animal videos ("animal shorts") from text prompts.

We are based in British Columbia, Canada. We are committed to handling your personal information in accordance with the Personal Information Protection and Electronic Documents Act ("PIPEDA") and, where applicable, providing the transparency and rights expected under international frameworks such as the EU/UK General Data Protection Regulation ("GDPR").

By creating an account, accessing our website, or using our API, you acknowledge that you have read and understood this Privacy Policy.

2. Information We Collect

We collect only the information we need to operate, secure, and improve the Service. The categories of personal information we may collect include:

• Account information: your name, email address, and login credentials (passwords are stored in hashed form by our authentication provider).
• Profile and preferences: any optional information you choose to add to your account.
• User content: the prompts you submit and the videos, images, and other outputs generated through the Service.
• API usage data: API keys, request metadata, endpoints called, response sizes, error rates, and rate-limit counters.
• Billing information: subscription plan, transaction history, and billing email. Full payment card details are entered directly with our third-party payment processors and are not stored on our servers.
• Technical and device data: IP address, browser type and version, operating system, device identifiers, language settings, referring URLs, and timestamps.
• Cookies and analytics data: as described in Section 9 below.
• Support communications: messages, attachments, and other information you provide when you contact us.

3. How We Use Your Information

We use personal information for the following purposes:

• To provide, operate, and maintain the Service, including generating animal shorts from your prompts;
• To create and authenticate your account and keep it secure;
• To operate our API, enforce rate limits, and prevent abuse;
• To process payments, manage subscriptions, and send billing-related communications;
• To respond to your inquiries and provide customer support;
• To monitor for, detect, and prevent fraud, security incidents, abuse, and violations of our Terms;
• To analyze usage trends, measure performance, and improve the quality, safety, and reliability of the Service;
• To send you service-related notices and, where permitted, occasional product updates (you can opt out of marketing communications at any time);
• To comply with our legal obligations and enforce our agreements.

4. Legal Bases for Processing

Under PIPEDA, we rely on your consent (express or implied) to collect, use, and disclose your personal information for the purposes identified above. Where the GDPR or similar laws apply, we also rely on the following legal bases:

• Performance of a contract — to provide the Service you have signed up for.
• Legitimate interests — to secure the Service, prevent abuse, and improve our products, balanced against your rights.
• Consent — for optional cookies, analytics, advertising, and marketing emails.
• Legal obligation — when we must process information to comply with applicable law.

5. How We Share Information

We do not sell your personal information. We share information only with service providers that help us run the Service, and only to the extent necessary for them to perform their functions. These categories include:

• Cloud hosting and infrastructure providers that store data and run our application and API.
• Authentication providers that manage account sign-up, sign-in, and session security.
• AI infrastructure and model providers that process your prompts to generate outputs.
• Payment processors that handle subscription billing and card transactions on our behalf.
• Analytics and product-measurement services that help us understand how the Service is used.
• Communication and support tools used to respond to your requests.

We may also disclose information when required to do so by law, in response to a valid legal request, or to protect the rights, property, or safety of our users, the public, or our business — for example, in connection with a merger, acquisition, financing, or sale of all or part of our assets, in which case affected users will be notified.

6. International Data Transfers

We are based in Canada and our service providers may be located in the United States, the European Union, the United Kingdom, and other regions. Personal information processed by these providers may be stored or accessed outside your country of residence and may be subject to the laws of those jurisdictions, including lawful access by foreign authorities. We choose providers that offer appropriate technical and contractual safeguards consistent with PIPEDA and, where applicable, GDPR transfer mechanisms.

7. Data Retention

We retain personal information for as long as your account is active and for a reasonable period afterward to comply with legal obligations, resolve disputes, prevent abuse, and enforce our agreements. Generated content is retained while it is associated with your account, unless you delete it sooner. Backup copies may persist for a limited time after deletion. When information is no longer needed, we will securely delete or anonymize it.

8. Your Rights and Choices

Subject to applicable law, you have the right to:

• Access the personal information we hold about you;
• Request correction of inaccurate or incomplete information;
• Request deletion of your personal information;
• Withdraw consent for processing that relies on consent (this may affect your ability to use parts of the Service);
• Object to or restrict certain processing, where applicable;
• Request a portable copy of information you have provided to us;
• Manage your cookie preferences at any time using the controls below or the "Cookie settings" link in the footer.

To exercise any of these rights, contact us at support@pawreel.io. We will respond within the timeframes required by applicable law. If you are located in Canada and are not satisfied with our response, you may file a complaint with the Office of the Privacy Commissioner of Canada. If you are in the EU/UK, you may also lodge a complaint with your local data protection authority.

10. Security

We use reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, disclosure, alteration, and loss. These include encryption in transit (HTTPS/TLS), restricted access controls, secure credential storage, and monitoring of our infrastructure. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials and API keys confidential.

11. AI-Specific Disclosures

Prompts you submit and the outputs we generate may be temporarily logged and reviewed for safety, abuse prevention, debugging, and quality improvement. We do not sell your prompts or generated content, and we do not authorize third-party AI providers to use your content to train their public models without a lawful basis. AI-generated outputs may contain inaccuracies, unintended likenesses, or other artifacts; you are responsible for reviewing outputs before publishing them.

12. Children's Privacy

The Service is not intended for children under 13 years of age (or the higher minimum age required by your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email or through the Service. Your continued use of the Service after the changes take effect constitutes acceptance of the updated policy.