Privacy Policy

Last updated: October 15, 2026

This policy explains what personal data Meyandy LLC (Phoenix, Arizona, United States) collects when you use X-Celant, why, who processes it, and the rights you have, including under the GDPR if you are in the European Economic Area and under applicable African data-protection laws.

1. Data we collect

Account data: email address, name, password (stored hashed by our authentication provider), language preference and plan.
Content: media you upload, projects, prompts you write, and the scripts, voiceovers, images, music and clips generated for you.
Billing data: subscription status, invoices and a customer reference handled by Stripe. We never see or store your card number.
Usage data: production activity, exports, feature usage and technical data (IP address, browser type) needed for security and rate limiting.
Visitors of the atelier without an account: the atelier opens a session for them without an email address, and keeps the photos they upload and what is made from them (see Retention).
The atelier's free starts: for each free start, the fingerprint (SHA-256) of the xc_device cookie and a fingerprint of the IP address made with a secret key, so that no list of addresses can reverse it. We never keep the address itself. For an account, the count is kept with the account instead.
The free trial: a one-way fingerprint of your email address (SHA-256 with a fixed prefix of ours), made after writing the address in lower case, without what follows a + before the @, and without dots for a Gmail address. It is linked to no account and cannot be turned back into the address.

2. Made-for-you orders sent without an account

What we receive: your name, email address and business name, and if you give them a phone or WhatsApp number and a website; your brief (what you sell and to whom, your notes, your choices of format, voice, style and length, your brand preferences); the photos, videos and documents you send, which may show recognisable people, and an optional link to a longer video; your confirmation that you may send these files, and, if you accept it, the gallery licence with its version; a fingerprint of your IP address made with a secret key.
Why: to make your ad, send you its preview, take your payment, deliver the files and answer you (steps you ask for before a contract, then the contract itself); to give one free place per person, comparing phone numbers by their digits, and to prevent abuse (legitimate interest); to show your ad in our gallery, only if you accepted the gallery licence (your consent, which you can withdraw at any time).
Who handles it: your files go through the same production chain as every ad, run by our team, including the AI providers described in section 4. We email you about your order (brief received, preview, payment, access to your files).
How long: there is no automatic deletion yet. A brief you have not paid for, its files and your contact details are kept until you ask us to delete them, by writing to hello@contact.x-celant.com, or until we delete the order. An order you paid for is kept with its files, so that you can download them again from My orders, and as a billing record. An ad shown in the gallery stays there until you withdraw the licence.

3. Why we process it

to provide the service and fulfil your requests (contract);
to bill plans, credit packs and orders (contract, legal obligation);
to secure the service, prevent abuse and enforce limits (legitimate interest);
to give each person the free trial only once, and each device one free start in the atelier per day (legitimate interest: preventing abuse of what is free);
to send service emails such as receipts and important changes (contract);
to improve the product using aggregated, de-identified usage statistics (legitimate interest).

We do not sell your personal data and we do not use it for third-party advertising.

4. Processors we rely on

These companies process data for us, each only for its own task and under its own data-protection commitments:

hosting and delivery of the site;
database, sign-in and file storage;
sending and receiving emails;
the anti-bot check on sign-in, sign-up and the start of the atelier;
payments and billing (your card number is entered with the payment provider and never reaches us);
the machines that compute and render the videos, which handle your media;
AI generation and language models: when a production runs, the prompt or media it needs is sent to the provider that makes that part (writing, voice, music, pictures, video, reading your media), and only what the task needs is sent;
the social network you connect, if you connect one, to publish on your behalf.

The list of these companies by name, with their country, is sent on request to hello@contact.x-celant.com.

5. International transfers

We are a US company and our providers process data primarily in the United States and the European Union. Where required, transfers are protected by safeguards such as the EU Standard Contractual Clauses implemented by our processors.

6. Retention

Account and active content data: kept while your account is active.
Incomplete uploads: removed after their 24-hour operational window.
After you delete your account: it is locked at once and an active subscription is canceled. Its data and files are erased as soon as nothing of yours is still running, usually within minutes of the request and within 30 days at most; the deletion receipt shows where it stands. The receipt itself is kept, without any of your content, so that the deletion can be checked.
Backups kept by our providers disappear as they rotate, within 90 days at most.
Made-for-you orders: see section 2.
Visitors of the atelier without an account: their photos and creations are erased seven days after they are made, and the session itself once nothing is left, eight days after it opened.
The fingerprints of the atelier's free starts (device and IP address): erased three days after the day they were recorded at the latest.
The trial fingerprint of an email address: kept after the account is deleted, so that the trial cannot be claimed twice.
Billing ledger entries may be kept for up to seven years where tax or accounting law requires it, after removing identity and free-form metadata.
A withdrawal from a contract (name, email address, the contract and its reference) is kept as the two letters it produces, your acknowledgment and ours, in our sending records, like every letter we send.
Copies of the emails we send you are kept in our sending records; a letter not yet sent is canceled when the order it belongs to is deleted.
Rate-limit records (a fingerprint of the IP address or of the account) are erased within two days. We keep no application log of our own; our host keeps its request logs under its own rules.

7. Your rights

Depending on your jurisdiction (GDPR, UK GDPR, CCPA, or African data-protection laws such as those of UEMOA member states), you may have the right to access, correct, delete, export or restrict the processing of your personal data, and to object to processing based on legitimate interest. You can exercise most of these directly in your account settings, or by writing to hello@contact.x-celant.com. You also have the right to lodge a complaint with your local supervisory authority.

8. Security

Data is encrypted in transit, storage buckets are private with per-user access rules, database access is protected by row-level security, and payment webhooks are signed and verified. No system is perfectly secure; notify us immediately at the address above if you suspect unauthorized access to your account.

9. Children

The service is not directed to children under 16 and we do not knowingly collect their data.

10. Cookies

We use cookies only to make the service work and to keep the choices you make, never for advertising or to follow you. The Cookie Policy lists each of them, with what your browser keeps without a cookie.

11. Changes and contact

We will notify you of material changes to this policy by email or in-app before they take effect. Data controller: Meyandy LLC, Phoenix, Arizona, United States (hello@contact.x-celant.com).