Fablecast Ltd ("Fablecast", "we", "us") is the data controller for personal data processed in connection with the Fablecast platform. This Privacy Policy explains what we collect, why, and your rights under the UK GDPR and Data Protection Act 2018.
1Data We Collect
1.1We deliberately collect a minimal set of personal data. We do not store your uploaded photos, videos, or generated content as part of our own permanent records beyond what is necessary to operate the Service and process your requests (see clause 4 on AI Providers).
We collect:
| Category | Examples | Why we collect it |
|---|---|---|
| Account data | Email address, username, password (hashed) | To create and secure your account |
| Purchase data | Credit purchase history, transaction records | To provide credits, handle refunds, and meet accounting/tax obligations |
| System logs | IP address, device/browser type, timestamps, error logs | Security, fraud prevention, and diagnosing technical issues |
| Support data | Messages you send to ceo@fablecast.co | To respond to and resolve your queries |
1.2We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, contact us using the details in clause 11 and we will delete it.
2How We Use Your Data
2.1We use your data to: provide and maintain your account and the Service; process payments and manage credits; respond to support requests; detect and prevent fraud or abuse; comply with legal and tax obligations; and improve the Service.
2.2We do not sell your personal data, and we do not use it to serve third-party advertising.
3Legal Basis for Processing
3.1We process your data on the following bases: performance of our contract with you (providing the Service you signed up for); our legitimate interests (security, fraud prevention, improving the Service), balanced against your rights; and legal obligation (tax and accounting records).
4Sharing Your Data — AI Providers and Processors
4.1To generate content, the material you submit (such as prompts and uploaded photos) is sent to our third-party AI Providers, currently including Atlas API and Anthropic (Claude API), acting as our data processors under written agreements that require them to protect your data and process it only for the purposes we specify.
4.1aAtlas API is itself an aggregator that provides access to third-party generative models on our behalf, including a video-generation model developed by ByteDance. Atlas has confirmed that only the content of your prompts and uploaded images — not your account identity information, which Atlas retains and does not share with the model provider — is sent to that infrastructure to run the generation. Atlas has also confirmed that this infrastructure does not currently apply a visible or machine-readable watermark to its raw output; any "AI Generated" label you see on content from Fablecast is applied by Fablecast itself, as described in our AI Policy, clause 6.
4.2We also use Stripe to process payments; Stripe acts as an independent controller for payment data in accordance with its own privacy policy, and as our processor for certain billing information.
4.3We may disclose data where required by law, to protect our rights, or to protect the safety of any person.
4.4We do not sell or rent your personal data to third parties for their own marketing purposes.
5International Transfers
5.1Some of our AI Providers and their sub-processors may process data outside the UK and the European Economic Area, including in jurisdictions that do not benefit from a UK or EU adequacy decision. This includes processing carried out, on Atlas's instructions, on infrastructure located outside mainland China by the ByteDance-affiliated provider referred to in clause 4.1a. Where this applies, we require an appropriate transfer safeguard recognised under UK and EU data protection law, such as Standard Contractual Clauses or an International Data Transfer Agreement. A summary of the safeguard in place is available on request to ceo@fablecast.co.
6Data Retention
6.1We retain account and purchase data for as long as your account is active, and for a reasonable period afterwards to meet legal, tax, and accounting requirements (typically up to 6 years for financial records). System logs are retained for a shorter period, typically no longer than 90 days, for security purposes.
6.2Input Content and Output Content processed via AI Providers are handled according to those providers’ own data retention terms, which we will summarise for you on request.
7Security
7.1We use appropriate technical and organisational measures to protect your data, including encryption in transit, restricted access to systems, and regular review of our data-handling practices. No system is completely secure, and we cannot guarantee absolute security.
8Your Rights
8.1Under UK data protection law, you have the right to: access the personal data we hold about you; correct inaccurate data; request deletion of your data (subject to legal retention requirements); restrict or object to certain processing; and request a copy of your data in a portable format.
8.2To exercise any of these rights, contact us using the details in clause 11. We will respond within one month, as required by law.
8.3You have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk if you believe we have not handled your data properly, or to lodge a complaint with your local EU supervisory authority.
9Changes to This Policy
9.1We may update this Privacy Policy from time to time. We will post the updated version on the Service and update the "last updated" date above. Material changes will be notified to you directly where required by law.
10Contact Us
10.1For any questions about this Privacy Policy or your data, contact us at ceo@fablecast.co, or in writing to Fablecast Ltd, 18 Dibdin Apartments, 149 Blackfriars Road, London SE1 8EF.