Privacy Policy

1. Information We Collect

a) Information You Provide Directly

• Account registration information: name, email address, company name (if applicable), and contact details.
• Billing information: processed and stored by Stripe, our third-party payment processor. We do not store your full payment card details on our servers.
• Communications: any messages, feedback, or support requests you send to us.
• Content inputs: briefs, creative direction, brand materials, and other inputs you provide in connection with the Service.

b) Information Collected Automatically

• Usage data: pages visited, features used, session duration, and interaction logs.
• Device and browser information: IP address, browser type, operating system.
• Cookies and similar tracking technologies: see Section 6 below.

c) Content and Platform Data

• Content outputs: AI-generated outputs, content packages, and materials produced through the Service.
• Third-party platform data: where you connect a third-party social media or content platform account (e.g. TikTok, Instagram, YouTube) to the Service via OAuth or similar authorisation flows, we collect data made available through that authorisation, which may include account metadata, content performance metrics, and publishing capabilities. The scope of access is determined by the permissions you grant during the authorisation flow.
• Publicly available content data: we may collect and analyse publicly available content from third-party platforms (such as publicly posted content and associated performance data across social media and other digital channels) for the purpose of pattern analysis, trend identification, and improving our AI systems. This data is collected from public sources and does not include private account information.

2. How We Use Your Information

We use collected information for the following purposes:

• To provide, operate, and maintain the Service across all product forms, including self-serve tools and managed service delivery.
• To process transactions and send related communications (receipts, invoices).
• To personalise your experience and improve Service features.
• To analyse content performance data — including views, engagement rates, reach, traffic, conversions, and other performance metrics — from content produced or tracked through the Service, in order to measure outcomes and improve our systems.
• To train, develop, and improve our AI models and internal systems using content inputs, outputs, and performance data. Where feasible, we use aggregated or de-identified data for this purpose. See Section 3 for the legal basis applicable to your region.
• To display anonymised or de-identified content outputs in our marketing materials, case studies, or product demonstrations, subject to Section 5.
• To communicate with you about updates, new features, or promotional offers (you may opt out at any time).
• To comply with legal obligations and enforce our Terms of Service.

3. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area, our legal basis for collecting and using your personal information depends on the data in question:

• Performance of a contract: processing necessary to provide the Service you have requested, including delivering managed services and operating self-serve tools.
• Consent: where you have expressly agreed (e.g., marketing communications, analytics cookies, or use of your content for AI model training where consent is required).
• Legal obligation: compliance with applicable laws.
• Legitimate interests: where processing is necessary for our legitimate business interests — such as improving our AI systems, fraud prevention, and security — provided those interests are not overridden by your data protection rights.

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

• Service Providers: third-party vendors who assist in operating the Service, including payment processors, cloud infrastructure providers, and AI model providers. These parties are contractually obligated to protect your data and may only use it to perform services on our behalf.
• Business Transfers: in the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. We will notify you via email or prominent in-platform notice before your data becomes subject to a different privacy policy.
• Legal Requirements: if required by law, court order, or governmental authority.
• Protection of Rights: to protect the rights, property, or safety of Fluxspark Inc., our users, or others.

5. Marketing Use of Content

We may use content and performance data associated with your use of the Service for the following purposes:

Anonymised or de-identified use (no consent required): We may use aggregated, anonymised, or de-identified outputs, metrics, and performance data generated through the Service in our marketing materials, product demonstrations, website, and promotional content, without seeking additional consent. This data cannot be used to identify you or your account.

Identifiable case studies and portfolio use (consent required): Where we wish to reference your account, brand name, content, or performance results in a way that is identifiable as yours — including in case studies, portfolio materials, client references, or promotional campaigns — we will obtain your express written consent prior to such use. This consent may be obtained through your service agreement, a separate written authorisation, or other documented means. You may withdraw this consent at any time by contacting us at hi@2mv.ai, and we will cease identifiable use of your materials going forward.

6. Cookies

We use cookies and similar technologies to operate the Service, remember your preferences, and analyse usage. We use essential cookies required for authentication and core platform functionality, and analytics cookies to understand how users interact with the Service. You may control cookie preferences through your browser settings. Disabling certain cookies may affect Service functionality.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service, and for a reasonable period thereafter as required for legal or operational purposes. You may request deletion of your account and associated data at any time by contacting us at hi@2mv.ai.

Aggregated, anonymised data derived from your usage may be retained indefinitely for platform analytics and improvement purposes, as it can no longer be used to identify you.

8. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: request a copy of the data we hold about you.
• Correction: request correction of inaccurate data.
• Deletion: request deletion of your data, subject to legal retention requirements.
• Portability: request your data in a machine-readable format.
• Objection / Restriction: object to or request that we restrict certain types of processing, including the use of your data for AI model training.
• Opt-out of marketing: unsubscribe at any time via email link or by contacting us.

California residents may have additional rights under the CCPA, including the right to know, delete, and opt out of the sale of personal information. We do not sell personal information.

EU and UK Users: if you are located in the European Union or United Kingdom, you have additional rights under the GDPR and UK GDPR, including the right to lodge a complaint with your local data protection supervisory authority.

To exercise any of these rights, contact us at hi@2mv.ai. We will respond to all verified requests within 30 days.

9. Data Security and Breach Notification

We implement industry-standard technical and organisational measures to protect your information, including encryption in transit and at rest, access controls, and regular security reviews. However, no method of transmission over the internet or electronic storage is 100% secure.

In the event of a data breach that affects your personal information, we will notify you and relevant regulatory authorities as required by applicable law — including, where required, within 72 hours of becoming aware of the breach. If you suspect any unauthorised access to your account, please notify us immediately at hi@2mv.ai.

10. Children's Privacy

The Service is intended for users who are 18 years of age or older. We do not knowingly collect personal information from individuals under the age of 18. If we become aware that a minor has provided personal information, we will delete such information promptly. If you believe a minor has provided us with personal data, please contact us at hi@2mv.ai.

11. International Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States, where our infrastructure and service providers operate. We take appropriate safeguards — including, where applicable, standard contractual clauses approved by relevant authorities — to ensure your data is protected in accordance with applicable law.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by: (a) posting the updated policy on our website at www.2mv.ai and updating the Effective Date; and (b) displaying a prominent notice within the Service platform. Your continued use of the Service after such notification constitutes your acceptance of the updated policy.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at: hi@2mv.ai.