Privacy Policy

[Company name] ("Santa Says", "we") makes personalized Christmas videos from Santa. This policy explains what we collect, why, and how long we keep it. We keep it simple: we collect only what we need to make your video, and we delete it on a schedule.

Who uses Santa Says

Our service is for adults 18 and older. Children do not use the site or create accounts. An adult (a parent or a family member or friend) tells us about the child the video is for.

What we collect

• About you: your email address and payment confirmation. Payments are processed by Stripe. We never see or store your full card details.
• About the child: first name, age, an optional pronunciation note, and the details you choose for the story (for example an achievement, a kind deed, a wish, or what they love, and your town for Santa Got Your Letter).
• A photo (optional, parents and legal guardians only): if you are the child's parent or legal guardian, you may upload one photo. We place it inside the video as a picture (for example on a page of Santa's book). We do not use it for facial recognition, do not animate the child's face, and do not use it to train AI models. Orders from family or friends cannot include a photo.
• Basic site data: standard technical information such as browser type and pages visited, to keep the site working and secure.

How we use it

• To create and deliver your video and printable keepsake.
• To email you about your order (confirmation, "your video is ready", and replies to your questions).
• To check that text entered in the order form is appropriate for a children's video. Our team may review videos before they are sent.
• We do not sell your information and do not use the child's information for advertising.

Who we share it with

Only service providers that help us make and deliver the video, under contracts that limit their use of the data: payment (Stripe), hosting and storage (Vercel, Supabase, Railway), email delivery (Resend), AI voice and text generation (ElevenLabs, Anthropic), and site analytics (PostHog). The child's photo is never sent to any AI service.

How long we keep it

• Photos: deleted automatically 7 days after upload.
• Videos and order details: your video link works until January 31 of the following year. After that we delete videos and the child's details. Please download your video to keep it.
• Payment and email records: kept as required for accounting and legal purposes.

Your choices

You can ask us to delete your order data at any time by replying to any of our emails or writing to help@example.com. If you live in a state with privacy rights (such as California), you may have additional rights to access or delete your information. Contact us and we will help.

Security

We use reasonable technical measures to protect your data, including encrypted connections and limited access.

Changes

If we change this policy, we will update the date above.

Contact

help@example.com, [postal address].