1. Purpose of the Policy
This Policy aims to inform users about:
- The types of personal data we collect
- The purposes and legal basis of processing
- The data retention period
- The rights of data subjects
- The measures we implement to protect personal data
2. Data Controller
Company Name: EVA AI TECH LTD
Address: 128, City Road, London, EC1V 2NX, United Kingdom
Contact Email: support@mystage.ai
Websites: https://mystage.film, https://mystage.ai, https://www.mystage.social
3. EU Representative
Name: Vasileios Pazopoulos
Contact Email: support@mystage.ai
4. Information We Collect
When using the platform, we collect and process the following personal data:
4.1 Data You Provide
- Full name
- Email address
- The content you submit to produce a video (intake answers, uploaded photos and voice samples) and your consent records
These data are collected when you register, contact us, or use our services.
4.2 Automatically Collected Data
- IP address
- Device and browser type
- Date and time of access
- Cookies and analytics data
5. Purpose and Legal Basis of Processing
The processing of your personal data is carried out for the following purposes:
- To provide the video-production services you request
- To communicate with you in case of technical or operational issues
- To handle support or communication requests
- To improve the user experience of the platform
- To comply with legal obligations
Legal Basis for Processing:
- Your consent
- Performance of our contract to deliver the services you purchase
- The Company's legitimate interest in ensuring the proper and secure operation of the platform
6. Data Retention
Your personal data are retained for as long as your account is active and for as long as necessary to provide the services, unless a longer retention period is required to comply with legal obligations (for example, retaining paid-invoice records where tax law requires) or to resolve disputes. You may delete your account at any time from your account settings; after a short grace period the deletion is irreversible. After the expiration of the applicable retention period, the data are securely deleted.
7. Data Transfers & Sub-processors
The Company does not sell, rent, or transfer your personal data to third parties, except where:
- It is necessary for the provision of our services (e.g., hosting providers, technical support providers, and the AI sub-processors used to produce your video — each listed on our sub-processors page, bound by a Data Processing Agreement and an approved cross-border transfer basis)
- Required by applicable law or competent regulatory authorities
- You have provided explicit consent
In the event of data transfers outside the European Union, we ensure that appropriate safeguards are implemented in accordance with the GDPR.
8. Data Security
The Company implements appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, loss, or destruction. These measures include, but are not limited to:
- Encryption
- Access control mechanisms
- Regular evaluation and testing of security procedures
9. Data Subject Rights
Under the GDPR, you have the following rights:
- Right of access
- Right to rectification
- Right to erasure
- Right to restriction of processing
- Right to object to processing
- Right to data portability
- Right to withdraw consent at any time
- Right to lodge a complaint with the competent supervisory authority
To exercise your rights or submit a complaint, you may contact us at support@mystage.ai. We will respond within thirty (30) days, in accordance with GDPR requirements.
10. Cookies and Tracking Technologies
We use two kinds of cookies, and we treat them differently.
- Strictly necessary cookies — sign-in sessions, security, and your language preference. The service cannot work without these, so they are set without consent.
- Analytics cookies — set by Google Analytics 4 (provided by Google Ireland Limited) to measure how the site is used. These are set ONLY after you accept them.
Analytics cookies are denied by default. When you first visit, a banner asks you to accept or reject them, and rejecting is as easy as accepting. Until you accept, Google Analytics is loaded in a consent-denied mode in which it stores nothing on your device and receives no identifiers. Refusing changes nothing about the service you receive.
Analytics data covers pages viewed, approximate location derived from a truncated IP address, device and browser type, and the referring site. It is never used to advertise to you and is never sold. Google acts as our processor for this data and is listed on our Sub-processors page.
You can change or withdraw your choice at any time using the "Cookie settings" link in the site footer. Your choice is stored in a first-party cookie and expires after 180 days, at which point we ask again. You may also manage cookies through your browser settings.
11. Children's Privacy
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that we have collected data from a minor, we will delete such data immediately.
12. Updates to This Policy
This Privacy Policy may be updated periodically. Any modifications will be published on our websites with an updated revision date. Continued use of the platform following such changes constitutes acceptance of the revised Policy.
13. Contact Information
For any questions or requests regarding this Privacy Policy, please contact us:
Email: support@mystage.ai
Website: https://mystage.film