Privacy Policy
Last updated: March 25, 2026. OpenDrama (opendrama.ai) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered short drama creation and distribution platform. By accessing or using OpenDrama, you consent to the practices described in this policy. If you do not agree, please discontinue use of the platform immediately.
1. Information We Collect
We collect the following categories of information: (a) Account Information: When you sign in via Google OAuth, we receive your name, email address, and profile picture from Google. We do not collect or store your Google password. (b) Usage Data: We automatically collect information about how you interact with the platform, including watch history, episode progress, series preferences, interaction patterns, device type, browser type, operating system, IP address, and referring URLs. (c) Transaction Data: When you purchase coins, we collect transaction records including purchase amounts, coin packages selected, and transaction timestamps. Payment card details are processed directly by Stripe and are never stored on our servers. (d) Creator Content: If you use our creator tools (DEV Studio), we collect scripts, prompts, AI-generated images, storyboards, and video generation parameters you create or upload. (e) Communication Data: If you contact us at info@opendrama.ai, we retain the content of your correspondence.
2. Use of Information
We use the information we collect for the following purposes: (a) To provide, maintain, and improve the OpenDrama platform and its features. (b) To personalize your experience, including content recommendations and episode suggestions. (c) To process coin purchases and manage your account balance. (d) To facilitate AI-powered content generation (scripts, images, videos) through our creator pipeline. (e) To detect, prevent, and address fraud, abuse, and technical issues. (f) To comply with legal obligations and enforce our Terms of Service. (g) To communicate with you about account activity, platform updates, and policy changes. (h) To conduct analytics and research to improve our AI models and user experience.
3. AI-Generated Content Data
OpenDrama uses artificial intelligence to generate scripts, images, and videos. When you use our AI features: (a) Your prompts, scripts, and creative inputs are sent to third-party AI providers (including OpenRouter/MiniMax for text, Gemini for images, and Volcengine/Jimeng/Seedance for video generation) for processing. (b) AI-generated content (images, videos, scripts) is stored on our infrastructure and associated with your account. (c) We may use anonymized and aggregated prompt data to improve our prompt engineering and content quality. Individual prompts are not shared publicly. (d) AI generation tasks are tracked in our system (pending, processing, completed, failed) to manage job queues and enable features like video recovery. (e) Third-party AI providers may have their own data retention policies. We encourage you to review the privacy policies of OpenRouter, Google (Gemini), and Volcengine.
4. Payment Data (Stripe)
All payment processing is handled by Stripe, Inc. When you purchase coin packages on OpenDrama: (a) Your payment card number, expiration date, and CVV are collected and processed directly by Stripe. OpenDrama never receives, processes, or stores your full card details. (b) We receive from Stripe: a transaction confirmation, payment amount, last four digits of your card, and a unique transaction identifier. (c) Stripe may collect additional information as described in their privacy policy at https://stripe.com/privacy. (d) Coin purchase records (amount, package, timestamp) are stored in our database to maintain your balance and transaction history. (e) Refund requests are processed according to our Terms of Service and handled through Stripe.
5. Video Hosting (Mux)
Video content on OpenDrama is delivered through Mux, a professional video hosting and streaming service: (a) When you watch episodes, Mux collects technical playback data including video quality metrics, buffering events, and playback duration. (b) Mux may collect your IP address and device information for video delivery optimization and content delivery network (CDN) routing. (c) Creator-generated videos are uploaded to Mux for transcoding, storage, and streaming delivery. (d) Mux's data practices are governed by their privacy policy at https://www.mux.com/privacy.
6. Cloud Storage (Cloudflare R2)
Media assets including AI-generated images, character portraits, scene images, cover art, and video files are stored on Cloudflare R2 (S3-compatible object storage): (a) Files are stored in Cloudflare's global infrastructure and accessed through our API proxy. (b) Cloudflare may collect access logs including IP addresses and request metadata for security and performance purposes. (c) Stored assets are associated with your account and the projects you create. (d) Cloudflare's data practices are governed by their privacy policy at https://www.cloudflare.com/privacypolicy/.
7. Cookies and Tracking
OpenDrama uses the following cookies and local storage mechanisms: (a) Essential Cookies: Authentication session cookies (NextAuth.js) required for login functionality. These cannot be disabled. (b) Preference Cookies: Language preference (zh/en) stored as a 'locale' cookie, and display mode preferences stored in localStorage. (c) Functional Storage: localStorage is used for caching user settings, Seedance session IDs, and temporary UI state. (d) We do NOT use third-party advertising cookies, tracking pixels, or behavioral advertising technologies. (e) We do NOT sell your data to advertisers or data brokers. (f) You can clear cookies and localStorage through your browser settings, though this will require you to sign in again.
8. Third-Party Services
OpenDrama integrates with the following third-party services, each with their own privacy policies: (a) Google (OAuth authentication): https://policies.google.com/privacy (b) Stripe (payment processing): https://stripe.com/privacy (c) Mux (video hosting and streaming): https://www.mux.com/privacy (d) Cloudflare (CDN and R2 storage): https://www.cloudflare.com/privacypolicy/ (e) OpenRouter (AI text and image generation): https://openrouter.ai/privacy (f) Volcengine (Seedance/Jimeng video generation): https://www.volcengine.com/docs/privacy (g) Supabase (PostgreSQL database hosting): https://supabase.com/privacy (h) Fly.io (application hosting): https://fly.io/legal/privacy-policy/ We are not responsible for the privacy practices of these third-party services. We encourage you to review their respective privacy policies.
9. Data Retention
We retain your information for as long as your account is active or as needed to provide services: (a) Account data is retained until you delete your account. (b) Transaction records and coin balance history are retained for 7 years for financial and legal compliance. (c) AI-generated content (scripts, images, videos) associated with your projects is retained until you delete the project or your account. (d) AI job queue records (generation task metadata) are retained for 90 days after completion for debugging and recovery purposes. (e) Server logs containing IP addresses and request data are retained for 30 days. (f) Upon account deletion, we will remove your personal data within 30 days, except where retention is required by law. Some anonymized, aggregated data may be retained indefinitely for analytics.
10. Data Security
We implement industry-standard security measures to protect your information: (a) All data in transit is encrypted using TLS/HTTPS. (b) Database connections use SSL encryption and connection pooling with idle timeouts. (c) Authentication is handled through OAuth 2.0 (Google), eliminating password storage on our servers. (d) API routes validate authentication tokens and admin permissions where applicable. (e) Payment data is handled entirely by Stripe (PCI-DSS Level 1 certified). (f) R2 storage access is controlled through signed URLs and API proxy authentication. (g) Despite these measures, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security of your data.
11. Children's Privacy (COPPA)
OpenDrama is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at info@opendrama.ai and we will promptly delete such information. If we discover that we have collected personal information from a child under 13 without parental consent, we will take steps to delete that information as quickly as possible. Users between the ages of 13 and 18 should use the platform only with parental or guardian consent.
12. International Data Transfers
OpenDrama operates globally and your information may be transferred to and processed in countries other than your country of residence, including the United States: (a) Our application servers are hosted on Fly.io in the United States (SJC region). (b) Database services are provided by Supabase with infrastructure in the United States. (c) Cloudflare R2 storage and CDN operates across multiple global regions. (d) AI processing providers (OpenRouter, Volcengine) may process data in various jurisdictions. (e) By using OpenDrama, you consent to the transfer of your information to these locations. We ensure that appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.
13. Your Rights Under GDPR (European Users)
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have the following rights under the General Data Protection Regulation (GDPR): (a) Right of Access: You may request a copy of the personal data we hold about you. (b) Right to Rectification: You may request correction of inaccurate personal data. (c) Right to Erasure: You may request deletion of your personal data ("right to be forgotten"). (d) Right to Restrict Processing: You may request that we limit how we use your data. (e) Right to Data Portability: You may request your data in a structured, machine-readable format. (f) Right to Object: You may object to processing based on legitimate interests. (g) Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time. To exercise any of these rights, contact us at info@opendrama.ai. We will respond within 30 days. Our legal basis for processing is: consent (account creation), contract performance (service delivery), and legitimate interests (platform improvement and security).
14. Your Rights Under CCPA (California Users)
If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with the following rights: (a) Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you in the past 12 months. (b) Right to Delete: You may request deletion of your personal information, subject to certain exceptions. (c) Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights. (d) Right to Opt-Out of Sale: We do NOT sell your personal information to third parties. Therefore, there is no need to opt out. Categories of personal information collected: identifiers (name, email), internet activity (usage data, watch history), commercial information (transaction records), and inferences (content preferences). To exercise your CCPA rights, contact us at info@opendrama.ai. We will verify your identity and respond within 45 days.
15. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes: (a) We will update the "Last updated" date at the top of this policy. (b) We will notify you through an in-platform notification for significant changes. (c) For material changes that affect how we process your data, we will provide at least 30 days' notice before the changes take effect. (d) Your continued use of OpenDrama after the effective date of any changes constitutes your acceptance of the updated policy. If you have any questions about this Privacy Policy or our data practices, please contact us at info@opendrama.ai.
Last Updated: March 25, 2026