1. In short
- We collect what we need to run your account, make your films and bill you. Nothing is sold.
- Your prompts and references are sent to AI model providers only to generate what you asked for.
- Dictated audio is translated and discarded. We never store it.
- Each company's data sits in its own isolated database schema.
- This website uses no analytics or advertising trackers.
The data fiduciary (controller) is [Luzarc legal entity name], [registered address], India. We follow the Digital Personal Data Protection Act, 2023 and, for people in the EU and UK, the GDPR.
2. What we collect
- Account
- Your name and email address. If you sign in with Google, the basic profile Google shares. If you use a passkey, its public key only; your fingerprint or face never leaves your device.
- Company and team
- Your company name, workspaces, who belongs to each, their roles, and invitations sent.
- Your content
- Scripts, prompts, uploaded images and references, the characters, locations, objects and styles you create, and the images and video generated for you.
- Dictation
- When you press Dictate, up to 30 seconds of audio is sent for translation and then discarded. We keep the resulting text and the language detected.
- Billing
- Credit purchases, balances and a record of what each job cost. Card and bank details are handled by our payment provider and never reach us.
- Security and usage
- Sign-in times, IP address, browser, and an audit log of administrative actions, kept to protect accounts and investigate misuse.
3. How we use it
- To provide the service: plan and render your films, keep film memory, and share work within your workspaces.
- To bill you accurately and keep financial records the law requires.
- To secure accounts, prevent abuse and enforce our terms.
- To send service emails such as sign-in codes, invitations and receipts. We do not send marketing email without your consent.
We rely on your consent, on performing our contract with you or your company, and on legal obligations. You can withdraw consent at any time; it does not affect processing already done.
4. How AI processing works
To make an image or a shot, Luzarc sends the prompt, and any reference pictures the shot needs, to the model provider that runs the model you chose. Language tasks such as planning shots and enhancing prompts go to a language model in the same way. The provider returns the result; we download it into your account's storage and do not keep the provider's link.
We do not use your content to train any model. Providers process it under their own terms, which generally prohibit training on API inputs; the model list in the app shows which provider serves each model.
5. Who processes it
We share data only with the providers below, and only what each needs.
| Provider | Purpose | Data |
|---|---|---|
| Amazon Web Services | Hosting, database and file storage | All service data |
| fal | Image and video generation | Prompts, reference images |
| OpenRouter | Language models for planning and prompts | Scripts, prompts |
| Sarvam AI | Speech translation for Dictate | Dictated audio (not stored) |
| Razorpay | Payments | Billing contact, payment details |
| Email delivery provider | Sign-in codes, invitations, receipts | Name, email address |
Some providers process data outside India. Where they do, we rely on their contractual commitments to protect it. We disclose data to authorities only when the law requires.
6. How long we keep it
Your content stays while your account is open. When you delete a film or asset, it is removed from the service and from backups within 30 days. When an account closes, content is deleted 30 days after closure. Billing records are kept for 8 years, as Indian tax law requires. Security logs are kept for 180 days.
7. How we protect it
- Each company's data lives in its own database schema, and every request is bound to one company before it touches data.
- Workspace access is checked on every request and every live update.
- Data is encrypted in transit, and any model-provider keys you give us are encrypted at rest.
- Administrative actions are written to an audit log.
If a breach affects your personal data, we will notify you and the Data Protection Board of India as the law requires.
8. Your rights
You can ask to access, correct or erase your personal data, withdraw consent, nominate someone to act for you, and raise a grievance. People in the EU and UK can also object to processing, restrict it, and ask for a portable copy. Email privacy@luzarc.com and we will reply within 30 days.
If your account belongs to a company, some requests are handled together with that company's administrators, who control its workspaces.
10. Children
Luzarc is for people aged 18 and over. We do not knowingly collect data from children, and we delete it if we learn we have.
11. Changes
We will post changes here and update the date above. For material changes we will also tell you by email or in the app.
12. Contact
Privacy questions and requests: privacy@luzarc.com.
Grievance Officer: [name], grievance@luzarc.com, [postal address]. If you are not satisfied with our response, you can complain to the Data Protection Board of India.