Privacy Policy

Last updated: December 22, 2025

1. Data Controller

FromSanta is operated by North Pole Labs SRL, Str. Craciunului 25, Bucharest, Romania.

Contact: contact@fromsanta.christmas

2. Information We Collect

Account Data: name, email, authentication identifiers, and session metadata required to maintain your account.

Payment Data: billing name, card details, and related metadata processed exclusively by Stripe. We only receive confirmation tokens.

Video Inputs: kid name, message text, language preference, and clip selections you provide for generation.

Usage Data: device logs, IP address, country, browser, and interactions needed to secure the platform.

3. How We Use Your Information

Deliver and maintain the account experience, including credit balances and clip history.

Process payments, detect fraud, and enforce the Terms of Service.

Generate videos exactly as requested and store them so you can download or rewatch them.

Improve reliability by analyzing high-level, aggregated usage trends.

4. Sharing & Transfers

Stripe acts as our payment processor and receives the data needed to complete transactions.

Hosting, storage, and AI vendors may process prompts and generated content solely to provide the requested video.

We never sell personal data. Transfers outside the EU follow GDPR safeguards such as Standard Contractual Clauses.

5. Data Retention

Account and purchase records are kept for at least 5 years to meet tax and compliance obligations.

Generated videos remain accessible while your account is active. You can delete individual clips from the dashboard.

Backups are purged on a rolling 30-day schedule.

6. Your Rights

You may access, correct, export, or delete your information by emailing contact@fromsanta.christmas.

You can withdraw consent for marketing emails at any time via the unsubscribe link.

Parents or guardians can request removal of a child’s information by contacting us with proof of authority.

7. Security

We use encryption in transit and at rest, enforce MFA for internal tools, and monitor for unusual activity.

Despite safeguards, no system is perfect. Please notify us immediately if you suspect unauthorized account access.

8. Updates

We will update this Privacy Policy when required by law or when we introduce new processing activities.

If the changes are material, we will notify you via email or in-app notice before they take effect.