Privacy Policy — Chuttamalle Studio

About this service

This notice describes Chuttamalle Studio at chuttamalle.org. This site is independent of the artists, music producers and operators of other Chuttamalle websites.

Accounts and local previews

We process your email, name, password hash, session information and account activity to provide sign-in and protect the service. Selecting a photo or video in the editor creates a preview on your device; selection alone does not upload it.

Uploaded photos and videos

When generation is enabled and you confirm a request, reference photos and video clips are uploaded for storage, content screening and AI processing. Photos can reveal your face and likeness. Only upload material you own or are authorized to use. AI services may process media outside your country. The configured generation service is KIE.ai, with its upstream content checker enabled; media storage uses a separate private Cloudflare R2 bucket when enabled. Temporary signed links permit the configured processing service and the signed-in owner to retrieve media. Anyone holding a signed link can use it until it expires. Uploads and paid generation stay unavailable until the required services are configured and verified.

Payments and credits

When enabled, Waffo processes checkout. We keep order identifiers, payment status and the credit ledger. We do not store full payment card numbers. Payment providers handle payment details under their own notices.

Cookies and providers

Essential cookies support login and language preferences. We have not carried advertising or analytics identifiers over from the reference site. Cloudflare processes network requests to deliver and protect the website. Additional analytics will require a separate configuration and an updated notice where appropriate.

Retention, access and deletion

Accounts, orders and credit records are kept as needed to operate the service, handle support and maintain required records. Media expires under a two-day R2 lifecycle rule. Signed download links last up to one hour and are generated after an account ownership check. Storage lifecycle processing delays may extend retention; this is not an exact deletion deadline. Download completed videos promptly. Do not upload sensitive material that you do not want processed. You may request access, correction or deletion through account support. A deletion request may not remove transaction records we need to retain or third-party copies you have shared.

Security and updates

We use HTTPS, access checks and separate service credentials. No system can guarantee absolute security. Material changes to this notice will be reflected in its update date.