Stobo AIStobo AILegal

Privacy Policy

Last updated: June 6, 2026

This Privacy Policy explains how Stobo AI ("we", "us", "our") collects, uses, shares, and protects information when you use our website at stoboai.com and related services (the "Service"). By using the Service, you consent to the practices described below.

1. Information We Collect

1.1 Information you provide

  • Account data: email, password (hashed), display name, country, security question answer.
  • Payment data: handled by our payment processor Scalev. We never store full credit-card numbers on our servers.
  • Creative content: scripts, prompts, shotlist edits, and storyboard images you generate or upload.
  • Communications: support tickets, feedback, and any messages you send us.

1.2 Information collected automatically

  • IP address, country/region, browser type, device type, operating system.
  • Usage events: pages visited, features used, time spent, error logs.
  • Cookies and similar technologies for session management and analytics (see Section 5).

1.3 Information from third parties

  • Google OAuth profile (email, name, profile picture) when you sign in with Google.
  • Payment confirmation events from Scalev webhooks.

2. How We Use Your Information

  • To operate, maintain, and improve the Service.
  • To process payments, manage subscriptions, and prevent fraud.
  • To send transactional emails (password resets, payment receipts, reward notifications).
  • To send marketing emails (only if you have opted in — you can unsubscribe at any time).
  • To analyze usage patterns and improve AI generation quality.
  • To comply with legal obligations and enforce our Terms of Service.

3. How We Share Your Information

We do not sell your personal data. We share information only with:

  • AI providers (Anthropic, Google) to generate text and images from your prompts. Inputs are sent over encrypted channels and not used by those providers to train their public models (per their enterprise terms).
  • Payment processor (Scalev) for billing and fraud prevention.
  • Cloud infrastructure (Cloudflare R2 for image storage, Hostinger for email).
  • Legal authorities when required by law or to protect our rights, users, or the public.

4. Data Retention

  • Account data: retained for the lifetime of your account, plus 90 days after deletion for audit/legal purposes.
  • Creative content (scripts, storyboards): retained while your account is active; deleted projects are permanently removed from R2 within 30 days.
  • Payment records: retained for 7 years to comply with tax and accounting law.
  • Server logs: retained for up to 90 days for security monitoring.

5. Cookies & Tracking

We use cookies and similar technologies for:

  • Essential cookies: authentication, session management, security.
  • Analytics cookies: aggregated usage stats to improve the Service. We use Meta Pixel for marketing attribution.

You can disable cookies in your browser, but the Service may not function correctly without essential cookies.

6. Your Rights

Subject to applicable law (GDPR, Indonesia's PDP Law, etc.), you may have the right to:

  • Access a copy of your personal data.
  • Correct inaccurate data.
  • Delete your data (subject to retention obligations in Section 4).
  • Restrict or object to certain processing.
  • Receive your data in a portable format (JSON export).
  • Withdraw consent for marketing emails at any time via the unsubscribe link.

To exercise these rights, email stobo@bunzovisuals.com. We respond within 30 days.

7. Children's Privacy

The Service is not directed to children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it.

8. Security

We protect your data with industry-standard measures: TLS encryption in transit, bcrypt password hashing, access logs, principle-of-least-privilege internal controls, and regular security reviews. No system is 100% secure, but we take reasonable steps to safeguard your information.

9. International Data Transfers

Our infrastructure is global (Cloudflare R2, Anthropic/Google AI). Your data may be processed in jurisdictions outside your country, including the United States. Where required, we rely on standard contractual clauses or equivalent safeguards.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via email or in-app notice at least 14 days before they take effect.

11. Contact & Data Controller

The data controller of your personal information is PT Bunzo Kreatif Indonesia, a limited liability company duly registered in the Republic of Indonesia.

Questions about this policy? Contact us at stobo@bunzovisuals.com.