Privacy Policy

1. Data Controller

The data controller for personal data processed through Ethereal Studio Labs is:

2. Data We Collect

We collect the following categories of personal data:

• Account data: Name, email address, company name, and subscription tier on registration
• Usage data: Platform interactions, campaign builds, credit consumption, and session logs
• Payment data: Billing address and masked card metadata (full card details are never stored)
• Technical data: IP address, browser type, device identifiers, and referral source
• Communications: Emails, support requests, and feedback you send us

3. How We Use Your Data

We use your data to:

• Provide, operate, and improve the Platform
• Process payments and manage subscription billing
• Personalise your campaign environment and Brand Kit
• Send transactional emails (receipts, account notices, service updates)
• Detect and prevent fraud and abuse
• Comply with legal obligations

We do not sell your personal data to third parties.

4. Data Sharing

We share data only with trusted processors necessary to operate the Platform, including:

• Payment processors (for billing)
• Cloud infrastructure providers (for hosting and storage)
• Analytics providers (anonymised, aggregated usage statistics only)
• Legal and regulatory authorities when required by law

All processors are bound by data processing agreements that ensure equivalent protections.

5. Retention

We retain your account data for the duration of your subscription plus 24 months, unless a longer period is required by law. Campaign assets and generated content are retained for 12 months after account closure. You may request earlier deletion (see Your Rights below).

6. Your Rights

Under applicable data protection law (including GDPR), you have the right to:

• Access the personal data we hold about you
• Rectify inaccurate or incomplete data
• Erase your data ("right to be forgotten") in qualifying circumstances
• Restrict processing in certain situations
• Port your data in a machine-readable format
• Object to processing based on legitimate interests
• Withdraw consent at any time where processing is consent-based

Exercise any right by emailing privacy@ethereal-casting.com. We will respond within 30 days.

7. Security

We implement industry-standard security measures including TLS encryption in transit, AES-256 encryption at rest, role-based access controls, and regular security audits. No system is perfectly secure; please notify us immediately at security@ethereal-casting.com if you suspect a breach.

8. Children

The Platform is not directed at persons under 18. We do not knowingly collect data from minors. If you believe a minor has provided us with data, contact us immediately and we will delete it.

9. Policy Changes

We may update this policy from time to time. Material changes will be notified by email or prominent in-platform notice at least 14 days before they take effect.

10. Contact

You also have the right to lodge a complaint with your local supervisory authority. In Sweden: Integritetsskyddsmyndigheten (IMY).