Privacy policy
What data Sanaa Studio collects, why, who receives it, how long we keep it, and how you can see, correct or delete it.
This policy explains what happens to your data when you use Sanaa Studio: the studio (the web app where you design and render videos), the affiliate site, this website and its contact form. We wrote it to describe what the software actually does today.
Who we are
Sanaa Studio is designed, built and operated by Prone Data Inc., a corporation of the State of Delaware, United States ("we", "us").
For the data described here, we decide why and how it is used (we are the "controller"). The exception is the content of a company or school workspace: the organization decides who joins and what is shared inside it, see Teams and schools.
To ask a question about your data or to use one of your rights, use the contact page and choose "My account or a payment".
The data we collect
When you create an account and sign in
- Your details: email address, name (a company or school gives its own name and a work email), the kind of account (individual, company or school), occupation, country and language. A company or school also gives its sector and size.
- No password: you sign in with a six-digit code we send to your email. We keep only a coded form of that code, for a short time. We store no password, no date of birth and no phone number for users.
- Technical details of your sign-up and sign-ins: the country your network appears to be in (given to us by our network provider or worked out on our servers from your IP address, which we do not store in our database), your browser's user agent, the kind of device (phone, tablet or computer) and your device time zone. We use them to spot unusual sign-ins and to understand where our users are.
- Where you came from: when you sign up, the campaign tags of the link you followed (utm parameters) and the website that sent you.
- Before you confirm: what you typed in the sign-up form is kept until you confirm your email or the code expires.
While you use the studio
- Your content: uploaded images, videos, audio, fonts and 3D models, your projects and scripts, voiceover texts and the audio made from them, the videos and subtitle files you render, and your conversations with the assistant, with the list of the changes it made to your projects. They are stored in cloud storage in private space linked to your account or your workspace.
- Your workspace: members of a company or school see each other's name, email, role, seat and when they were last active, and an activity feed shows who did what.
- Usage: we record product events (which action happened, when, in which account, from which country and kind of device), and when you were last seen and how many times you signed in. Some events include the name you gave to a project, script or voiceover, or a member's display name. Notifications you receive in the studio are stored too.
When you pay
- Billing profile: your billing email and, if you fill it in (companies and schools must), your legal name, address, tax identifier, registration number and the name and title of your representative. We also keep your currency, your invoices and, for companies and schools, your service agreements, and the ledger of your credits.
- Card details: you type them on Stripe's own pages. Sanaa Studio never sees your card number.
If you join the affiliate program
- Your affiliate code and, when you want to withdraw, the bank account you connect through Stripe: Stripe, our payment partner, collects your identity and your bank details on its own pages and keeps them; we keep only the identifier of your connected Stripe account, whether it can be paid, the commissions you earned and your withdrawals.
- We ask for no tax information and no identity documents.
- Affiliates see only the type (individual or company or school), the dates and the earnings of the workspaces they referred, never their names or emails.
When you visit this website
- Anonymous statistics: to know which pages help and how fast they load, the website records a page seen, a click on a "Design now" button (and in which part of the page), how quickly the first page appeared, and script errors. Each record holds the page, the language, the website or campaign that sent you (for the first page of a visit), the country your network appears to be in (from our network provider, or worked out from your IP address on our servers, which is then forgotten), the kind of device and the kind of connection. It holds no cookie, no identifier, no IP address and nothing you typed, and it is not linked to any account. Nothing is recorded if your browser sends "Do Not Track" or Global Privacy Control, or in an automated browser.
When you write to us
- The contact form asks for your name, email, topic and message. We send the message by email to our team, and a confirmation to you. We do not store it in the studio's database; it stays in our team's mailbox. A hidden field and rate limits protect the form from robots.
What we do not collect
- No advertising identifiers, no advertising or analytics cookies, no third-party trackers on this website, and no marketing emails. The emails we send are transactional: sign-in codes, invitations, invoices, payment failures, agreements, affiliate withdrawals, account deletion and the confirmation of a contact message.
What we do with your data, and why
| What we do | Why we may do it |
|---|---|
| Create your account, sign you in, run the studio, store your content, render your videos, generate voiceovers and subtitles, run the AI assistant (write scripts, build designs, 3D scenes and montages with you, suggest templates, prepare render settings) | To provide the service you asked for (contract) |
| Take payments, issue invoices and agreements, manage credits, prorate and renew plans | To perform the contract and to meet our legal and accounting duties |
| Pay affiliates and apply referral codes | To perform the affiliate program |
| Keep the service secure: rate limits, one-time codes, spotting unusual sign-ins, preventing abuse | Our legitimate interest in a safe service |
| Count sign-ups, countries and usage, and see what is used, to improve the studio and this website | Our legitimate interest in improving the service |
| Count visits, clicks and page speed on this website, and catch its errors | Our legitimate interest in improving the website |
| Send the emails listed above | To provide the service (contract) |
| Answer your message from the contact form | Your request, and our legitimate interest in answering it |
| Comply with the law and answer valid legal requests | Legal obligation |
We do not sell your data, and we do not use it for advertising.
Who receives your data
Only the providers below, for the purposes given, and our team as far as their role requires (our staff can see accounts, invoices, billing profiles and member lists to run the service).
| Provider | What for | What it receives |
|---|---|---|
| Stripe | Payments, invoices, subscriptions | Your billing email, name, address, language and a reference to your workspace, the plan and amounts. Card data goes to Stripe directly. |
| ElevenLabs | AI voiceovers | The text of the voiceover (up to 5,000 characters), the chosen voice and language. It sends back the audio and its timing. |
| OpenAI (or the provider set for our AI assistant) | The assistant, in every section | Your prompts and a short summary of the conversation. For scripts, the open script (up to 6,000 characters). In the editors and the montage, a text description of the open project (its texts, layout and settings, and the names, types and sizes of your files, never the files themselves) and the list of our published templates. For render settings, the length of the project and your plan limits. We do not send your name or email. |
| Cloudflare | Storage of your files (R2) and delivery, network country | Your stored files, and the requests to our servers. |
| Email delivery provider | Sending our emails | The address and content of each email. Provider: Hostinger. |
| Hosting provider | Running our servers and database | Everything stored on our servers. Provider: Hostinger. |
| Google Fonts | Fonts of the 2D editor that are not built in | When you use such a font, your browser asks Google for it, so Google receives your IP address and browser details. |
These providers have their own privacy policies. Content you write for a voiceover or the assistant is processed by them, so do not put in it what you would not want them to receive.
We may also share data if the law requires it, to protect our rights or users, or if the company is sold or merges; in that case we will tell you.
Cookies and similar storage
We use one cookie, and a few items your browser stores for the site to work. We use none for advertising or for tracking you across sites.
| Name | Where | What it holds | How long |
|---|---|---|---|
Cookie sanaa_session | Studio and affiliate site | A random token that keeps you signed in (we store only a coded form of it). Not readable by scripts, sent only to our API. | 30 days, renewed while you use it; ends when you sign out |
sanaa-session (local storage) | Studio and affiliate site | A copy of your account details (including your email), so pages open faster | Until you sign out |
sanaa-preferences (local storage) | All our sites | Your theme, colour mode and language | Until you clear it |
sanaa-ref (local storage) | Any of our sites opened with a referral link | The affiliate code of the link, so the discount is filled in at checkout; the last link wins | 90 days |
sanaa-site-campaign (session storage) | This website | The campaign tags of your visit, added to the links to the studio | Until you close the tab |
sanaa-site-visit (session storage) | This website | A flag that tells the first page of your visit from the next ones, so visits can be counted without an identifier | Until you close the tab |
| Site files (browser cache, kept by the website's service worker) | This website | Copies of the pages you opened and of the site's fonts, scripts and images, so they open faster and pages you have seen still open without a connection. Prices, forms and anything about your account are never saved there | Until a new version of the site replaces them or you clear them |
Studio settings (local storage: sanaa-settings, sanaa-tabs, sanaa-inspector-closed, sanaa-cache:currencies) | Studio | The layout of the panels, the sections you opened, and the list of currencies | Until you clear it |
| Upload records (local storage, written by the upload library) | Studio | The address and fingerprint of a big upload, so it can resume | Until the upload ends |
You can clear these in your browser; you will be signed out and lose your preferences.
How long we keep it
| Data | How long |
|---|---|
| Sign-in codes and unfinished sign-ups | Removed about one day after they expire |
| Sessions | Expire 30 days after last use; the record is removed 30 days later |
| Notifications you have read | 90 days |
| Unfinished uploads | 24 hours |
| Your content (projects, uploads, renders, voiceovers, scripts, assistant conversations) | Until you delete it or delete your account. If your plan ends, your files stay; only your storage limit changes |
| A copy of a project as it was before an assistant step, kept so the step can be undone | 14 days |
| Your account, billing profile, invoices and agreements inside the studio | Until you delete your account |
| Website statistics (pages seen, clicks, page speed, errors) | 400 days, then deleted automatically |
| Usage events of the studio | As long as your account exists. They are deleted with it |
| Contact messages | One year, then we delete them: messages received by email in our team's mailbox, and conversations with the support team in the studio |
| Server logs | Up to one year. They do not contain IP addresses |
| Backups | As long as your account exists |
| Records we must keep by law, such as accounting records | 3 years. Our payment partner Stripe keeps the invoice and payment records for this period, including after your account is deleted |
Your choices and rights
Depending on where you live (for example under the GDPR in Europe and the UK, or the data protection laws of African countries), you may have the right to:
- see the data we hold about you and receive a copy. There is no download button yet: ask us through the contact page and we will do it by hand. We answer within 24 to 48 hours.
- correct it. You can edit your name, occupation, country and language in your profile. Your sign-in email cannot be changed yet; ask us if you need it.
- delete it: see the next section.
- object to, or ask us to limit, some uses of your data, and withdraw a consent you gave.
- complain to your data protection authority if you think we handled your data wrongly.
We may need to check that you are the owner of the account before we act, for example by writing to its email address.
Deleting your account
In the studio, open your profile, choose to delete your account and type your name to confirm. It cannot be undone. This is what happens:
- Any paid subscription is canceled first, without a refund. If it cannot be canceled, the deletion does not go through and you can try again.
- Your account, your workspace and everything in it are removed: projects, scripts, voiceovers, renders, assistant conversations, notifications, credits, billing profile, and the invoices and agreements stored in the studio. Your files are then erased from storage.
- If you own a company or school workspace, the accounts of its members that were created for it are deleted too. A person who joined with their own individual account only loses the membership.
- We send an email to each person removed.
What can remain: an anonymous record used for our statistics (kind of account, plan, country, sector and size, how long the account lived, and the reason you gave if any); the records of the affiliate program we need to pay other affiliates; what our providers keep under their own policies (for example Stripe's payment records); and backups for as long as stated above.
Teams and schools
- Companies and schools: the owner and admins decide who joins, with which role and seat. Members see each other's basic details. A student in a school has their own account, created through the school's invitation with a name and their own email address. Supervisors can see the student's name, email, role and when they were last active, and can remove the student from the school; they cannot delete the student's own account.
- Deleting a school or company deletes the accounts of its members that were created for it, as described above.
Where your data is processed
We are based in the United States, and our providers process data in the United States and in other countries, including outside the country where you live. Where the law requires it, these transfers rely on the safeguards our providers offer, such as standard contractual clauses.
How we protect your data
- Sign-in codes are single-use, expire after ten minutes, allow a limited number of attempts and are stored only in a coded form. Sign-in and sign-up answer the same way whether or not an address has an account, so nobody can use them to find out who is a member.
- Sessions use a random token stored only in coded form, in a cookie that scripts cannot read. Sessions end when you sign out, when an account is suspended or deleted.
- Requests are limited per address to slow down abuse, and a browser request that changes data is accepted only from one of our own sites.
- Your files sit in private storage. They are opened with links that expire after 15 minutes, and every file belongs to one account or workspace. Uploads are checked for their real type and size.
- Access inside a workspace follows roles (owner, admin, editor, viewer), and our staff have roles that limit what they can see and change.
- Payments and card numbers are handled by Stripe.
- The country of an IP address is looked up in the GeoLite2 database, created by MaxMind (https://www.maxmind.com), that is part of our software: no request is made to anyone.
- Encryption in transit: all traffic to the studio, the affiliate site and this website uses HTTPS. We do not claim that stored data is encrypted by our application; storage and database encryption depend on our providers.
No service is perfectly secure. If a breach affects your data, we will tell you as the law requires.
Changes to this policy
When we change what this policy means, we update the date at the top, and we tell you in the studio or by email when the change matters for you. Small corrections do not change the date.
Contact
Use the contact page. You can also read our terms of service.