Privacy Policy
Last updated: September 18, 2026
At HowFaa AI Studio ("HowFaa", "we", "us", or "our"), operated by OneSign Concept Limited, we are deeply committed to protecting the privacy, creative confidentiality, and data sovereignty of filmmakers, creators, and studio teams worldwide.
This Privacy Policy explains how we collect, process, store, and safeguard your personal information and creative assets when you use our platform, studio floor, and public web properties, in compliance with the Nigeria Data Protection Act (NDPA), General Data Protection Regulation (GDPR), and applicable data privacy statutes.
1. Information We Collect
We collect only the information necessary to provide, secure, and personalize our AI film production suite:
1. Account Information: Name, email address, password hashes, studio or production company name, and preferred locale/market.
2. Creative Assets & Inputs:
- Scripts, series bibles, dialogue, scene beats, and character dossiers.
- Reference images, mood boards, and location photography.
- Voice reference audio files uploaded for character vocal matching.
3. Transactional & Billing Data: Payment transaction references, plan tier, invoice records, and wallet balances. Note: We do not store raw credit card numbers or banking secrets on our servers; payments are processed securely through certified gateway partners (e.g. Paystack, Flutterwave, Stripe).
4. Telemetry & Production Logs: API request timestamps, generation latency, device browser types, operating system, and error logs to ensure pipeline reliability.
2. How We Use Your Data
Your information is utilized strictly for the following purposes:
- Executing the Production Pipeline: Directing AI engines to generate imagery, voice performance, animation, lip-sync, and final multi-track render masters.
- Continuity & Project Memory: Storing character visual seeds, vocal profiles, and franchise lore in your secure Series Bible so recurring characters maintain visual and audio consistency across episodes.
- Account & License Management: Managing authentication, plan allocations, wallet billing, and commercial certificate verification.
- Platform Health & Security: Monitoring engine latency, detecting automated abuse, and maintaining system uptime.
3. AI Processing & Creative Confidentiality
- No Unapproved Training: We do not feed your unreleased scripts, private film footage, or custom voice clones into public foundational models.
- Ephemeral Worker Execution: Heavy video rendering, voice synthesis, and audio post-production tasks are dispatched to ephemeral, sandboxed GPU worker clusters. Temporary asset buffers are automatically cleaned upon master render compilation.
- Access Controls: Studio team members can only access projects within their designated workspaces. HowFaa engineering personnel never inspect creator manuscripts or private master cuts unless explicitly requested by the creator for technical support.
4. Data Sharing & Third-Party Processors
We never sell, rent, or monetize your personal information or creative intellectual property. We share data only with trusted infrastructure providers bound by strict data protection agreements:
- Cloud Infrastructure & Storage: Encrypted object storage (Cloudflare R2, AWS S3) and secure database hosting (Supabase/PostgreSQL).
- Payment Processors: PCI-DSS certified payment gateways for subscription and top-up execution.
- AI Neural Providers: Specialized inference endpoints for rendering imagery and voice under enterprise data confidentiality terms.
5. Data Retention & Creator Rights
1. Retention: We retain your projects, scene states, and media assets for as long as your account remains active or as required to comply with financial accounting obligations.
2. Your Rights: Under applicable data protection legislation (including NDPA and GDPR), you have the right to:
- Access & Portability: Export your finished films, raw audio stems, scripts, and production logs at any time.
- Correction: Update inaccurate personal or studio profile information.
- Deletion ("Right to be Forgotten"): Delete individual projects or request permanent deletion of your studio account and all associated media assets.
6. Security & Encryption
We employ multi-layered industry standards to protect your data:
- TLS 1.3 end-to-end transport encryption for all data in transit.
- AES-256 encryption for database volumes and stored media assets.
- Strict role-based access control (RBAC) and audited administrative authentication.
7. Cookies & Local Storage
We use essential session cookies and local storage to:
- Keep you securely authenticated to the studio console.
- Persist creator preferences (such as dark/obsidian workspace themes and sidebar collapse state).
- Remember regional market localization settings (e.g. Nollywood / African Creator personalization).
- You can manage or disable cookies through your browser settings, though certain studio features may function with reduced performance.
8. Updates to This Policy
We may update this Privacy Policy periodically to reflect enhancements to our AI engines or legal requirements. Material revisions will be highlighted on the platform and accompanied by an updated "Last Updated" timestamp.
9. Contact Data Protection Officer
If you have questions about your privacy, data rights, or wish to submit a data erasure request:
- Email: privacy@howfaa.com
- Attention: Data Privacy & Governance Team, OneSign Concept Limited, Lagos, Nigeria