This Privacy Policy explains how Zoromi Studio ("Zoromi", "we", "us"), a Maryland company, collects, uses and shares personal information when you use zoromi.studio and our related apps and services (the "Service"). By using the Service, you agree to this Policy. If you do not agree, do not use the Service.

1. What we collect

Information you give us: your email address, display name and password (stored only in hashed form), or your Google sign-in profile (name and email); what you create and upload - stories, prompts, character cards, images, audio and video, including any people, faces and voices in them - and the Output generated for you; works you submit to Zoromi Theater; messages you send to support, including screenshots; reports you send us, including, for urgent reports, your name and contact email; and, if you are a creator or promoter, the information described under "Creators and promoters" below.

Payments: our payment providers (such as Stripe) collect your payment details. We receive and keep records of your purchases - amounts, dates, refunds and the provider's reference numbers - but not your full card number.

Creator identity checks: where a payout method requires an identity check through Persona, we ask you to verify your identity with Persona before your first payout by that method. Persona collects your government ID photo and selfie and, with your express consent, creates facial comparison data to check that they match. It also processes device and usage information to help prevent fraud. Zoromi stores verification references, results and dates linked to your account, rather than ID images, selfies, facial comparison data or extracted ID details. Persona processes verification data for us, using service providers where needed. Before you provide this information, you will see the applicable retention periods and be asked for consent. See Persona's Privacy Policy.

Creators and promoters. If you are a creator or promoter, we may collect and retain additional information, including:

Account and location information: Whether you are acting as an individual or a business, your country of residence or business registration, as applicable, and related information you provide or that our service providers report to us.
Payout information: Your selected payout method, payout account identifiers and status, and related payment records. Our payment service providers may collect and process bank account details and other information needed to enable payments.
Tax information: Tax form types, submission and verification status, relevant dates, tax classifications, withholding determinations, and tax reporting records. Our tax and payment service providers may collect additional information, including legal names, addresses and tax identification numbers.
Verification and eligibility records: Identity verification results, relevant dates, accepted terms and versions, eligibility decisions, and records of how and when those decisions were made.
Earnings and referral records: Revenue shares, referral attribution, commissions, fees, refunds, adjustments, amounts withheld, outstanding balances, and payments.

We use this information to determine eligibility for revenue sharing and payments, administer earnings and payouts, prevent fraud, resolve disputes, and comply with applicable tax, accounting and legal obligations.

We may share relevant information with our payment, tax and identity-verification service providers and, where required by law, with tax authorities and other government authorities.

We may retain relevant records for as long as reasonably necessary for these purposes, including to comply with applicable legal obligations and resolve disputes, even after an account is deleted.

Information collected automatically: your device and browser type, an IP address shortened to its network part, the pages you visit and the site that sent you, an approximate country worked out from your device's time zone, and cookies and similar browser storage that we use to run the Service and count visits, and cookies set by advertising measurement tags (see section 5). Our web servers' security logs record full IP addresses, which we keep for about 14 days.

Information from others: Google, when you sign in with it; payment providers; people who report content to us; and other users, when what they upload includes you.

2. How we use it

We use personal information to: provide, run and maintain the Service, including generating content for you; process payments and refunds; keep the Service safe and lawful - including automated and human review of inputs and content, preventing fraud and abuse, and protecting children, which can include reporting to authorities such as NCMEC; respond to your requests, for which our staff may view your account and projects; analyze how the Service is used and why generations fail, to fix and improve it; send you messages about your account and purchases and, where allowed, marketing you can unsubscribe from; comply with law, enforce our Terms and protect our rights and those of others; and as part of a merger, sale or other business transfer.

Service providers who work for us, including: AI model providers for text, images, video, voice and safety review, which receive your prompts, uploads (including faces and voices) and Output to generate or check content; hosting, storage and content-delivery providers; email delivery; payment, tax and identity-verification providers; and customer-support tools.

AI providers receive content needed for the features you use. Depending on the provider, our agreement and the service settings, they may also retain or use it to improve their services, including to train models. Their policies and our agreements govern that processing, subject to applicable law.

AI assistants you connect, when you connect them (see section 4).

Advertising platforms, to measure our advertising (see section 5).

The public, for works you publish or share through the Service, such as in Zoromi Theater. When you publish a work in Zoromi Theater, we show your account name and profile picture with it, and we and those we license the work to may use them, and any image of you that appears in the work, with the work, including to promote it on and off Zoromi.

Authorities and others, when we believe the law requires it, or to protect the safety, rights or property of you, others, Zoromi or the Service, including reports about child safety.

A buyer or successor in a merger, acquisition, financing or sale of assets.

Others with your consent.

We do not sell your personal information for money.

4. AI assistants you connect

You can connect an AI assistant, such as ChatGPT or Claude, to your Zoromi account by signing in through the assistant or by giving it an API key you create in your account settings. A connected assistant can read your account information and content and, with your permission, ask us to create images and videos for you, which are charged to your API balance, a separate prepaid balance in US dollars.

We keep records of the requests a connected assistant makes on your account, such as when it made them and what it asked for, to run, secure and support the Service and to bill for it. What you share with an assistant is handled by the company that runs it under its own privacy policy.

You can disconnect an assistant or delete an API key at any time in your account settings. Deleting your account also deletes its keys and connections.

5. Advertising measurement

We advertise the Service on other websites and apps. To measure how that advertising performs, we and our advertising partners use cookies, tags and similar technologies on our website, and our servers send our partners information about sign-ups and purchases. This can include your device and browser details, the pages you visit and the actions you take on our website, whether you came from one of their ads, a hashed (one-way coded) form of identifiers, such as your email address or account ID, and purchase details, such as the amount and currency. Our partners handle this information under their own privacy policies.

You can turn advertising measurement off with the button below, or from Your Privacy Choices in the site footer. When it is off, we do not load advertising pixels, and our Google tag runs only in a mode that does not use advertising cookies. If you are signed in, it is turned off for your account: this applies in any browser where you are signed in, and we stop sending your sign-ups and purchases to our advertising partners. If you are not signed in, it applies only to this browser until you sign in or create an account in it. We do not respond to Do Not Track signals; we honor Global Privacy Control.

Loading…

6. Where your information is processed

Zoromi is based in the United States. Your information may be transferred to, stored and processed in countries outside the one where you live, including the United States, which may not have the same data protection laws as yours. By using the Service, you consent to this transfer.

7. How long we keep it

We keep personal information for as long as your account is open and as long as we need it for the purposes above. Some records are deleted automatically sooner. Records of requests from connected AI assistants are kept for 13 months. Records that you confirmed you may use a picture of a real person are kept as evidence, including after your account is deleted. We may keep information longer where the law requires it, to resolve disputes, to enforce our Terms, to protect safety (for example, child-safety reports and the material related to them, as long as the law requires), or in backups until they are overwritten.

Identity checks: Persona keeps your ID images and selfie only as long as needed to complete the check and as the law requires. Facial comparison data is deleted when it is no longer needed for the check, and in any case within 3 years of your last interaction with Zoromi.

Retention periods for copies held by AI providers vary by provider and service. Those copies are subject to the applicable provider policies, our agreements and legal requirements. You can contact support@zoromi.studio about a deletion request.

8. Your choices

You can see and change your account details in your account settings. You can delete your account on your account page or by writing to support@zoromi.studio. Deleting your account deletes the account and the content we hold for it - books, videos, uploads, projects, your library, messages and support tickets. We keep what section 7 allows, including payment, payout and tax records, works published in Zoromi Theater for the people who bought them, and, for an account closed for a serious breach of our Terms, a one-way fingerprint of its email address so that we can recognise it if it returns. While a safety review or a payment dispute on the account is open, we may be unable to delete it. You can unsubscribe from marketing emails with the link in each message. You can disconnect an AI assistant or delete an API key in your account settings at any time. You can turn advertising measurement off as described in section 5.

9. Security

We use reasonable measures to protect personal information, but no method of storage or transmission is completely secure, and we cannot guarantee the security of your information.

10. Children

The Service is for adults 18 and older and is not directed to children. Family workshop accounts must be created and run by a parent or guardian. If we learn that an account belongs to someone under 18, we may close it.

11. US state privacy rights

Depending on where you live in the United States, you may have rights to ask what personal information we have about you, to correct it, to delete it, or to opt out of certain sharing. Where a law gives you such a right, you can use it by writing to support@zoromi.studio; we may need to verify who you are, and we will respond as that law requires. We will not discriminate against you for using these rights. Advertising measurement (section 5) may count as "sharing" personal information under California law; you can opt out with the button under Advertising measurement or from Your Privacy Choices in the site footer, or with a Global Privacy Control signal. Section 5 explains what each covers.

12. If you are in the European Union or the United Kingdom

This section applies only if you are in the European Economic Area or the United Kingdom, and only as far as EU or UK data protection law requires.

Who is responsible: Zoromi is the controller of your personal information. Contact: support@zoromi.studio.

Why we may use it (legal bases): to perform our contract with you - running your account, generating content, processing payments; our legitimate interests - keeping the Service safe and secure, preventing fraud and abuse, protecting children, improving the Service, enforcing our Terms, and displaying, distributing and promoting works published in Zoromi Theater, on and off Zoromi, with creators' account names, profile pictures and images of those creators appearing in their works, including sharing these with licensees for those purposes, where this processing is necessary for our or our licensees' legitimate interests and is not overridden by individuals' rights and interests; your consent - for marketing emails where consent is required, and your explicit consent for the facial comparison in creator identity checks; and legal obligations - tax and accounting records, and reports the law requires.

What you must give us: an email address and password, or a Google sign-in, to have an account, and payment details to buy. Tax information and identity verification may be required to receive payments. Without them you cannot use those parts of the Service.

Automated decisions: our automated safety systems may block a request or hide content. You can ask for a person to review the decision by writing to support@zoromi.studio.

Your rights: you may ask us to access, correct or delete your personal information, to restrict its use, or to give you a copy in a portable form. You may object at any time to our use of your information based on our legitimate interests, and to direct marketing. Where we rely on your consent, you may withdraw it at any time, as easily as you gave it, without affecting what we did before. To use these rights, write to support@zoromi.studio. You may also complain to your local data protection authority - in the UK, the Information Commissioner's Office (ICO).

Transfers: your information is transferred to and processed in the United States and other countries outside the EEA and the UK (see section 6).

13. Changes to this Policy

We may change this Policy at any time. Changes take effect when posted here with a new date. Where the law requires it, we will give you notice of material changes.

14. Contact

Questions or requests: support@zoromi.studio.

Privacy Policy