Privacy Policy

This policy explains how TakeWeaver (“we”, “us”) collects, uses and shares personal data when you use takeweaver.ai, the Studio, the phone shoot pages and our MCP connection for AI assistants (the “service”). “Personal data” means information about a person who can be identified.

TakeWeaver is run from India. We decide how and why your personal data is processed, which makes us the data fiduciary under India's Digital Personal Data Protection Act, 2023, and the controller under the GDPR where it applies. Our Terms and Conditions explain the rules for using the service.

Information you give us

• Account details: your email address and, if you sign in with Google, the name and profile picture Google shares with us.
• Your content: prompts, scripts, chat messages with the Studio agent, and the photos, videos, audio, 3D models and reference clips you upload. These can include the faces and voices of you and other people.
• Phone shoot: when you use your phone as a camera, the video it records and the phone's motion while recording. Your browser asks for permission before it gives us the camera or motion sensors.
• Messages to us: what you send when you email us for support, a refund or a complaint.

Information the service creates

• Your projects: worlds, shots, camera moves and characters, and everything generated for you, such as pictures, videos, voice lines and prompts written by the agent.
• Quality checks: when a take is checked automatically, a transcript of its speech and notes on its frames.
• Credits: your balance, and a record of each generation and what it cost.

Payment information

Dodo Payments processes all payments. We receive your Dodo customer ID, the product, amount, currency, status and date of each payment, and the email address used. We never receive or store full card numbers or UPI details.

Usage and device information

• Product analytics: the pages you view, the features you use and the credits you spend, linked to your account once you sign in. We use PostHog for this.
• Technical data: your IP address, browser and device type, and an approximate location worked out from the IP address. These appear in our hosting providers' logs and in error reports.

Likeness checks

Some models accept a real person's face only after that person completes a liveness check. The check is run by BytePlus, ByteDance's cloud service: the person opens a link and follows the steps on BytePlus's page. BytePlus processes the face data and keeps the verified face in a private group under our account, which is then used to render that character. We receive only whether the check succeeded. This happens only when someone chooses to take the check.

We don't use faces to identify anyone, and we don't build face templates ourselves. A photo you upload is used only as a picture reference for the generations you ask for.

• To run the service: create your account, sign you in, store your projects, run the Studio agent and make the generations you ask for. We need this to provide the service you signed up for.
• For credits and billing: hold, charge and return credits, apply your plan, and keep payment records. This is part of providing the service, and tax law requires the records.
• For safety and security: prevent fraud and abuse, enforce our Terms, protect accounts, and respond to complaints and legal requests. We do this because of our legitimate interest in a safe service, and where the law requires it.
• To improve the product: understand which features are used and where people get stuck. We do this because of our legitimate interest in building a better product.
• To talk to you: sign-in links, service and billing messages, notice of important changes, and replies to your emails. We send marketing emails only if you opt in, and you can unsubscribe at any time.

Under India's DPDP Act, we process your data for these purposes with the consent you give when you create an account and use the features, and for the legitimate uses the Act allows. You can withdraw consent at any time (see Your rights and choices), though we may then be unable to provide some or all of the service.

We don't sell your personal data, we don't use it for advertising, and we don't use your content to train AI models.

• When you generate something, we send what that generation needs (the prompt, and any reference pictures, video or audio) to the provider that runs the model. Depending on the model, that is OpenRouter (which passes requests to model makers such as Anthropic, OpenAI, Google, ByteDance and ElevenLabs), fal.ai, or BytePlus.
• The Studio agent runs on Claude, GPT or Gemini through OpenRouter, and reads your project, chat and attachments to do its work.
• Providers process your content to produce the result under their own terms and privacy policies. Some keep inputs and outputs for a limited time to monitor for abuse.
• Some providers keep a reference picture in a private asset library under our account, so the same character can be reused across shots.
• Providers run automated safety filters that may refuse a request, for example a photorealistic face. A refusal stops that generation and returns its credits; it has no other effect on you. We make no automated decisions that have legal or similarly significant effects on you.

We share personal data only with the service providers that help us run TakeWeaver, and only for the purposes in this policy:

We also share personal data:

• with AI assistants you connect through our MCP connection, which can read your projects as you;
• for legal reasons: to comply with the law or a valid legal request, or to protect the rights, safety and property of our users, the public or us;
• in a business transfer: if TakeWeaver is merged, sold or reorganised, in which case this policy keeps applying to your data or we tell you first;
• with your consent, in any other case.

We are based in India, and our providers store and process data in other countries, mainly the United States, and also Singapore and elsewhere. When your data leaves your country, we rely on our providers' contractual commitments to protect it, including standard contractual clauses where they offer them for transfers from the EU and the UK.

• Account and projects: as long as your account is open. You can delete individual films and assets at any time in the app.
• After you delete your account: we delete your personal data and content from our active systems within 30 days, and from backups as they expire.
• Payment records: as long as tax and accounting law requires, which in India can be up to 8 years.
• Logs and analytics: for limited periods, after which they are deleted or anonymised.
• We may keep information longer when we need it to resolve a dispute, enforce our Terms or comply with the law.
• AI providers keep any copies under their own retention rules.

We encrypt data in transit (HTTPS), control access to our database and file storage, and limit access to the people who run TakeWeaver. Payment details stay with Dodo Payments. No system is perfectly secure. If a breach affects your personal data, we'll tell you and the authorities as the law requires.

Depending on where you live, you have the right to:

• access your personal data and get a copy of it;
• correct or update it;
• delete it, or your whole account;
• take it with you in a portable format (you can download your exports in the app, or ask us);
• withdraw your consent, or object to processing based on our legitimate interests, such as analytics;
• nominate someone to exercise your rights if you die or become unable to (in India);
• complain to us, and then to a regulator.

To use any of these rights, email support@takeweaver.ai from your account's email address. We may need to confirm it's you, and we'll reply within 30 days.

India

If we don't resolve your complaint, you can take it to the Data Protection Board of India.

European Economic Area and United Kingdom

You can complain to the data protection authority where you live or work.

California

You have the right to know what personal information we collect, use and disclose, and to have it deleted or corrected. We collect identifiers (such as your email and IP address), commercial information (your purchases), internet activity (how you use the service) and audio and visual information (your uploads and results), for the purposes described above. We don't sell personal information or share it for cross-context behavioural advertising, and we won't treat you differently for using your rights.

We don't use advertising cookies. You can block or delete cookies in your browser settings; blocking essential cookies signs you out.

TakeWeaver is for adults aged 18 and over. We don't knowingly collect personal data from children. If you believe a child has given us personal data, contact us and we'll delete it. Our Terms allow a child's likeness to be uploaded only by their parent or legal guardian.

Users can upload pictures, video and voice recordings of other people, and our Terms require them to have those people's permission. Content in a workspace is private to that workspace. If you appear in content on TakeWeaver without your consent, email support@takeweaver.ai with the details. We'll look into it and remove the content where appropriate.

We'll post any changes to this policy here with a new date. If a change significantly affects how we use your personal data, we'll tell you by email or in the app before it takes effect.

Questions, requests and complaints about your personal data: support@takeweaver.ai. TakeWeaver, India.

Our Grievance Officer can be reached at the same address. We acknowledge complaints within 24 hours and aim to resolve them within 15 days.