Foteza — Privacy Policy
Effective Date: 6, 2026

Foteza Inc. ("Foteza," "we," "us," or "our") is committed to protecting your privacy. This Policy explains what we collect, how we use it, who we share it with, and your rights. It applies to everyone using the Platform, whether as a Creator/Business using Fozi AI Director, or as a Creative applying to filming campaigns.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

  1. AT A GLANCEJuly
    ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

Data Linked to Your Identity: account info, content you create or upload, social media account identifiers and automation settings, portfolio content, Stripe payout identifiers, campaign activity, subscription/purchase status, support communications.

Data Used Only to Provide the Service: camera and microphone input during an active Fozi AI Director session (sent to our AI providers solely to generate that session's coaching); voice samples you submit to create a synthetic coaching voice.

What We Don't Do: We do not sell your personal information to data brokers or advertisers. We do not access your camera or microphone outside of a filming session you initiate. We do not share your automation Contacts with other Foteza users. We do not share individual Shopify customer data with Creatives — only aggregate totals.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
2. INFORMATION WE COLLECT
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

2.1 Account Information: name, business name (or Creative profile info: photo, bio, location, specialisations, equipment), email, phone, age (for eligibility), account creation date.

2.2 Fozi AI Director Data (Creators/Businesses): camera frames and audio captured during an active filming session, transmitted to Anthropic (scene/content analysis) and ElevenLabs (spoken coaching voice synthesis) solely to generate that session's coaching; voice samples you submit to create a synthetic coaching voice and the resulting voice identifier; saved session summaries and shot lists. We do not retain raw camera/microphone streams beyond what's needed to render a response and any clip you explicitly save.

2.3 Recorded & Portfolio Content: video, audio, images, captions, and scripts you record or upload, stored in Firebase Storage; for Creatives, portfolio images/reels/pitch videos and campaign deliverables.

2.4 Social Media & Automation Data (Creators/Businesses): account identifiers and OAuth access tokens for connected social accounts (Instagram, Facebook, TikTok, YouTube, X, LinkedIn), managed through our infrastructure provider, Zernio; comment-to-DM automation settings and performance stats; Contacts (platform usernames and message counts for people who interact with your automations); scheduled/published post content.

2.5 Advertising Data: ad account identifiers/tokens for connected ad platforms (e.g., Meta Ads); campaign configuration, targeting, and performance data. We do not store your ad platform's payment details.

2.6 Stripe Connect Data (Creatives): Stripe Connected Account ID and payout history. We do not store raw banking credentials — these are held by Stripe.

2.7 Campaign Activity (Creatives): applications, accepted campaigns, deliverables, filming session timer data, goal-tracking/earnings analytics; for App Install campaigns, your unique campaign link and attributed install count (as reported by Apple); for Shopify campaigns, your unique discount code and aggregate purchase counts/order values attributed to it — we do not share individual customer names or emails with you, only aggregate totals.

2.8 Social Media Performance Data (Creatives): when you link TikTok, Instagram, or YouTube, we access video performance metrics (views, likes, comments, shares) and profile info (handle, follower count), refreshed every 24–48 hours. You can disconnect at any time in Settings → Connected Accounts.

2.9 AI Deliverable Review Data (Creatives): deliverable videos may be analyzed by AI tools (currently Anthropic's Claude) to generate a quality score shared with the reviewing business; we may use aggregated, anonymized results to improve our systems.

2.10 Subscription & Billing Data: Apple ID subscription status and transaction identifiers (Creators/Businesses); Stripe payout records (Creatives). We do not receive or store raw payment card details.

2.11 Usage & Device Data: device type, OS version, app version, crash/diagnostic logs, in-app actions.

2.12 Push Notification Data: device push tokens (via Firebase Cloud Messaging) for alerts and product updates. Disable anytime in device Settings.

2.13 Location (Creatives): approximate city/region to match you with local campaigns. We do not continuously track background GPS location.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
3. HOW WE USE YOUR INFORMATION
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

• To operate and personalise the Platform for you.
• To power Fozi AI Director's real-time coaching, scripts, and voice output.
• To run your comment-to-DM automations and post scheduling.
• To create and manage connected ad campaigns, where used.
• To match Creatives with relevant campaigns and display your profile to businesses considering your application.
• To process and issue Stripe payouts, generate Shopify discount codes, and track purchase/earnings attribution.
• To AI-screen deliverables on behalf of reviewing businesses.
• To verify subscription status and unlock paid features.
• To send account notices, alerts, and product updates.
• To maintain the security and integrity of the Platform.
• To comply with legal and tax obligations.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
4. SHARING OF INFORMATION
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

We share data only with the service providers needed to operate the features you use:

• Anthropic (Claude): camera frames, scene descriptions, conversational context during Fozi sessions, and Creative deliverable content for AI quality scoring. See anthropic.com/privacy.
• ElevenLabs: text to be spoken and, if you opt in, a voice sample used to synthesise your coaching voice. See elevenlabs.io/privacy.
• Zernio: social account identifiers/tokens, post content, automation settings, and Contacts data, to operate posting, scheduling, and comment-to-DM automation.
• Meta and other connected ad platforms: ad campaign data sent to the platform's API when you create or manage ads.
• Stripe: for Creative payout processing. See stripe.com/privacy.
• Shopify: your unique discount code is sent to the business's store via the Admin API; purchase attribution flows back via webhook, not directly to you.
• Businesses (Creatives only): your profile (name, photo, bio, portfolio, handles, specialisations) is visible to businesses when you apply to their campaigns. Your earnings, banking details, and contact information are never shared with businesses.
• Firebase / Google Cloud: authentication, database, serverless functions, and file storage, stored in the us-central1 region (Iowa, USA). See policies.google.com/privacy.
• Apple: subscription purchases and transaction validation. See apple.com/legal/privacy.
• TikTok, Meta (Instagram), YouTube: accessed via their APIs to retrieve performance data for accounts you link.

We do not sell your personal information to any third party, and we do not share your automation Contacts with other Foteza users or unrelated third parties.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
5. FOZI AI DIRECTOR — CAMERA, MICROPHONE & VOICE DATA
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

5.1 Camera and microphone access are used only while you have an active filming session open, and only to generate that session's coaching. You can revoke camera/microphone permission at any time in your device Settings, which disables this feature.

5.2 If you submit a voice sample to create a synthetic coaching voice, ElevenLabs processes it under their own terms to generate a voice model; Foteza stores only the resulting voice identifier, not a copy of your raw recording, once processing completes.

5.3 Camera/microphone data transmitted during a session is used solely to generate that session's coaching response and is not used by Foteza to train our own models. Review Anthropic's and ElevenLabs' own privacy terms for how they handle data sent to their APIs.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
6. DATA RETENTION
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

• Account data: retained while active and for 90 days after a deletion request.
• Recorded/uploaded/portfolio content: retained until you delete it or close your account.
• Fozi session summaries: retained while your account is active.
• Voice identifiers: retained while active; deleted on account deletion.
• Contacts and automation data: retained while the related automation is active, and for a reasonable period after, unless you delete it sooner.
• Deliverable files (Creatives): retained for 12 months after campaign completion.
• Earnings, payout, and subscription records: retained for 7 years for tax and accounting compliance.
• Social media performance snapshots (Creatives): retained for 2 years for earnings dispute resolution.
• AI review scores: retained for the life of the associated deliverable record.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
7. YOUR RIGHTS
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

Depending on your jurisdiction, you may have the right to access, correct, delete, export, or restrict processing of your personal data. Contact us at support@foteza.com to exercise these rights.

7.1 Account Deletion. Request deletion by emailing support@foteza.com or using Delete Account in Settings. We process requests within 30 days. Earnings, payout, and subscription records are retained for 7 years for tax compliance as described above.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
8. SECURITY
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

We use TLS encryption in transit, Firebase Security Rules, encrypted storage, and limited employee access controls. No system is perfectly secure; keep your account credentials secure and notify us immediately at support@foteza.com if you suspect unauthorised access.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
9. INTERNATIONAL DATA TRANSFERS
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

Foteza is based in Canada and uses service providers located in the United States (including Firebase/Google Cloud, Anthropic, ElevenLabs, Zernio, Stripe, and Apple). By using the Platform you understand your information may be processed and stored in countries other than your own, which may have different data-protection laws.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
10. CHILDREN
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

The Platform is not directed at anyone under 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us information, contact support@foteza.com and we will delete it.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
11. CHANGES TO THIS POLICY
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

We may update this Policy. We will notify you via the app or email at least 7 days before material changes take effect.

━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
12. CONTACT
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

Foteza Inc.
Email: support@foteza.com