1.Who we are
AI Animation Ltd is the controller of the personal data described in this notice. We are a company registered in England and Wales under company number 15898434.
Registered office for statutory correspondence only (not a customer-facing location): 59 Greenhill Road, Plymstock, Plymouth, Devon, England, PL9 9FD.
You can contact us about privacy or data protection at hello@aianimation.com. This notice applies to our websites, applications, products, and related services (together, the “Services”).
2.Data we collect
The personal data we collect depends on how you use the Services. It may include:
- Account and contact data: your name, email address, authentication identifiers, profile information, preferences, and organisation or workspace details.
- User Content: prompts, uploaded images, video, audio and other media, generation settings, project information, comments, notes, outputs, and associated metadata.
- Service and technical data: IP address, browser and device information, operating system, referral information, session identifiers, feature usage, timestamps, logs, diagnostics, and security events.
- Billing and subscription data: plan, transaction and subscription identifiers, billing status, and limited billing contact details. Paddle handles payment-card and banking information; we do not store full card or bank details on our servers.
- Communications data: support requests, feedback, survey responses, marketing preferences, and other correspondence with us.
- Recruitment data: name, email address, application details, CV, profile or portfolio information, assessment responses and results, scoring or review status, completion timing, availability, location, and related correspondence if you apply for a role or creative opportunity.
- Data from other sources: information supplied by a social sign-in provider you choose, Paddle, a workspace owner or administrator, or another person who invites you to a project or workspace.
3.How and why we use data
Under UK data protection law, we must have a lawful basis for each use of personal data. Our principal purposes and bases are set out below. The basis that applies can depend on the context.
| Purpose | Lawful basis |
|---|---|
| Create and manage accounts and workspaces; process prompts and uploads; generate, store, and deliver outputs | Performance of our contract with you |
| Administer billing, subscriptions, credits, and required financial records | Contract and legal obligation |
| Provide support and send essential operational messages | Contract and our legitimate interests in supporting users and operating the Services |
| Secure the Services, prevent fraud and abuse, troubleshoot, enforce our terms, and protect users and our legal rights | Our legitimate interests and, where applicable, legal obligation |
| Understand feature usage and improve reliability, performance, navigation, and product design | Our legitimate interests in improving the Services, using proportionate usage information and safeguards |
| Send marketing and use non-essential analytics or tracking technologies | Consent where required, or legitimate interests where the law permits and your rights do not override them |
| Receive and assess job or creative applications and communicate with applicants | Steps taken at your request before a possible contract and our legitimate interests in recruitment and resourcing |
| Comply with law, respond to lawful requests, and establish, exercise, or defend legal claims | Legal obligation and our legitimate interests |
| Use User Content in marketing, case studies, or promotional materials | Your separate permission or consent |
4.User Content and AI processing
We process User Content to provide, maintain, secure, and support the Services. User Content is not publicly displayed by default, but it may be visible to people who have access to the relevant account, workspace, project, or sharing link. Authorised personnel and service providers may access it where reasonably necessary for service delivery, support, security, moderation, or legal compliance.
When you choose an integrated AI model or feature, we send the information needed to fulfil that request—such as your prompt, selected media, generation settings, and relevant context—to the applicable AI provider or routing provider. The provider processes that information and returns the result to us.
Our training position: AI Animation does not use User Content to train general-purpose AI models that we own or operate, or to build public training datasets. If you expressly choose a feature whose stated purpose is to create or train a private or tailored model, we use the content you select to provide that requested feature and meet related security, support, and legal obligations.
We do not use User Content in advertising, marketing, or promotional materials without separate permission.
Provider-specific processing, retention, and model-training terms can vary by model, routing path, plan, and contract. See our AI Provider & Partner Policies page for the principal providers used by the platform.
5.Sharing personal data
We do not sell or rent personal data. We may share personal data only where necessary and proportionate with:
- AI model, media-processing, and routing providers selected to perform the feature you request;
- cloud hosting, storage, authentication, content-delivery, security, communications, support, and software providers;
- recruitment and assessment providers where an application includes an online assessment;
- the recruiting organisation and its authorised reviewers where you apply for an opportunity run for that organisation;
- Paddle for checkout, payment, tax, invoicing, subscription, and merchant-of-record services;
- a social sign-in provider, where you choose that sign-in method;
- workspace owners, administrators, collaborators, or people with whom you choose to share or publish content;
- professional advisers, insurers, auditors, regulators, courts, law-enforcement bodies, or other parties where required or permitted by law; and
- parties involved in a proposed or completed financing, merger, acquisition, reorganisation, or sale of all or part of our business, subject to appropriate confidentiality safeguards.
6.Cookies and similar technologies
We use cookies, local storage, and similar technologies that are necessary for authentication, security, private-media delivery, session continuity, and requested preferences. Disabling these technologies may prevent parts of the Services from working.
If we enable non-essential analytics or marketing technologies on our public pages, we will ask for consent before using them where consent is required and provide a way to change or withdraw that choice. You can also control cookies through your browser, although browser controls may not affect other forms of storage.
7.Retention and deletion
We keep personal data only for as long as reasonably necessary for the purposes described in this notice. In deciding how long to keep it, we consider the nature and sensitivity of the data, the purpose for which it is used, security and fraud risks, applicable limitation periods, and our legal, tax, accounting, and contractual obligations.
- Account, profile, and workspace data is generally kept while the account or workspace is active and for a limited period afterwards where needed to close the service, handle disputes, prevent abuse, or comply with law.
- Prompts, uploads, projects, and outputs are generally kept while needed to provide the features you use, until you delete them or request account deletion, or until a shorter feature-specific retention period expires.
- Billing and transaction records may be kept for the periods required by tax, accounting, anti-fraud, and other laws.
- Recruitment applications, assessment results, and related correspondence are kept for a period appropriate to the relevant opportunity, handling queries or disputes, and meeting legal obligations, then deleted or anonymised when no longer needed.
- Technical, security, and support records are kept for periods appropriate to troubleshooting, security, dispute resolution, and legal compliance.
Deleting content removes it from normal account views and starts our active-system deletion process. It does not necessarily remove all historical storage versions, protected backups, security or deletion telemetry, or provider copies immediately. Any retained copies are isolated from ordinary use and may remain where needed for system integrity, recovery, security, legal obligations, fraud prevention, dispute resolution, or legal claims. Anonymous data that can no longer identify an individual may be retained for longer.
8.International transfers
Our providers and users operate internationally, so personal data may be transferred to or processed in countries outside the United Kingdom or European Economic Area, including the United States and countries in which our AI providers operate. Those countries may have different data protection laws.
Where required, we use recognised safeguards such as adequacy regulations or decisions, the UK International Data Transfer Agreement or UK Addendum, and European Commission Standard Contractual Clauses, together with appropriate supplementary measures. You can contact us for more information about safeguards relevant to your data.
9.Security
We use technical and organisational measures designed to protect personal data against accidental or unlawful loss, alteration, access, disclosure, or destruction. Measures include access controls, authentication, encryption in transit, private-media delivery controls, logging, monitoring, and provider due diligence, as appropriate to the risk.
No internet transmission or storage system is completely secure. Please protect your account credentials and contact us promptly if you believe your account or data has been compromised.
10.Your rights
Depending on applicable law and subject to relevant conditions and exemptions, you may have the right to:
- ✓access personal data we hold about you
- ✓correct incomplete or inaccurate data
- ✓request deletion of your personal data
- ✓restrict certain processing
- ✓object to processing based on legitimate interests
- ✓receive eligible data in a portable format
- ✓withdraw consent at any time
- ✓request applicable safeguards for significant automated decisions
- ✓complain to a supervisory authority
To exercise a right, email hello@aianimation.com. We may ask for information needed to verify your identity and protect your account. Withdrawing consent does not affect processing that was lawful before withdrawal.
You may complain to the Information Commissioner’s Office (ICO), the UK supervisory authority. Its address is Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, and its telephone number is 0303 123 1113. If you are elsewhere, you may also have the right to complain to your local data protection authority.
11.Children
The Services are designed for adult and professional creators. They are not directed to anyone under 18. You must be at least 18 years old and have reached the age of legal majority where you live to create an account, use the Services, or submit personal data through them.
If you believe someone under 18 has provided personal data contrary to these requirements, contact us and we will investigate and take appropriate action, which may include deleting the data or account.
12.Automated decisions
The Services use automated systems to generate and transform creative content at your request. Those creative tools do not make decisions about your eligibility, legal rights, or access to opportunities.
Where a role or creative opportunity includes an online assessment, our assessment system may automatically score objective responses against the answer keys, scoring rules, and pass threshold configured for that assessment. For an assessment configured as a hard gate, a result below the threshold may prevent that application from being submitted. Responses that require judgement may instead be referred for human review.
To administer an assessment, your name, email address, and answers are sent to the assessment system used for that listing, currently The Chair, so that it can deliver and record the assessment and, where applicable, calculate a result. The answers and resulting score or review status are returned to AI Animation and may be shared with the recruiting organisation and its authorised reviewers.
If an automated assessment result affects you, you can contact hello@aianimation.com to ask for human review, explain your circumstances, or contest the result. We will consider the request and respond in accordance with applicable data protection law.
13.Changes to this notice
We may update this notice when our Services, providers, or legal obligations change. We will publish the revised notice with a new “Last updated” date. Where a change materially affects how we use personal data, we will provide an additional prominent notice or direct communication where appropriate. If a new use requires consent, we will ask for that consent separately.
14.Contact us
Privacy and data-protection enquiries can be sent to hello@aianimation.com.
AI Animation Ltd · Company number 15898434