Your stories.
Your privacy.

Privacy notice · Effective 8 September 2026

Controller and contact

ANIMA SAS, 35 rue Saint-Placide, 75006 Paris, France, is responsible for personal data processed through Onde. Contact hello@onde.world for privacy requests.

What we process and why

We process your email, profile name and authentication information to create and protect your account; ideas, uploaded references, explicit microphone recordings, generated material and directions to perform your creative requests; and credit balances, usage receipts and payment references to provide and account for the service. Stripe processes payment card information. Onde does not receive or store your full card number.

Account and creation processing is necessary to perform the service you request. Accounting and tax records are retained to comply with legal obligations. Limited security logs, abuse reports and fraud checks support our legitimate interest in protecting the service and its users.

Private and public creations

Creations are private by default. Publishing exposes the film, title, description, creator name and its relationship to other dimensions to everyone. Private prompts, raw provider receipts and account information are not part of the public film record. Viewers can download or share published films and may create alternate dimensions under the publication terms.

The microphone records only after you activate it. Your browser displays its permission and recording indicators. Audio is sent for transcription to produce the text you requested. Closing or stopping recording stops capture. Do not include sensitive information that is unnecessary for your story.

Service providers

We use Supabase for account authentication and database storage, Railway for the application and private media storage, Cloudflare for domain and network services, Resend for account emails, Stripe for payments, and Fal and its selected model providers for generation and transcription. Model providers receive the inputs required for your request, such as screenplay text, reference images or audio. Their operational processing can take place outside the European Economic Area. International transfers are governed by the applicable provider agreements and legal transfer safeguards; contact us for information about the safeguards relevant to your data.

We do not sell personal data. Sponsor appearances use the ranking of confirmed contributions without profiling individual viewers. Sponsor logos, descriptions and website links may appear on Onde. No personal account details are shared with sponsors by this feature. An optional click opens the sponsor’s own website, which has its own privacy policy. We keep contribution, distribution and invitation records to account for credits and prevent duplicate claims; recipient identities and invitation secrets are not public. Technical logs may record request times, errors, security information and provider request identifiers. We avoid recording passwords, payment card data or API secrets in those logs.

We count page openings, film playback starts, creation intentions and sharing actions, with an approved campaign label. We also estimate daily visitors and measure accepted creations, checkout openings and confirmed purchases. Our server hashes the network address and browser information with a random secret changed each UTC day. Raw addresses and browser strings are not saved in this audience dataset. The hash is not a persistent visitor identifier and is not used to link anonymous visits across days. Daily records and checkout attribution are retained for up to 31 days, then removed when measurement next runs; older daily secrets are removed at rotation. Database backups may retain earlier records according to the hosting retention policy. Linking a checkout to its daily visit lets us count confirmed purchases without storing account details in the audience records. Existing transaction records remain subject to their separate retention requirements. We exclude identified internal sessions and known bots; daily visitor measurement respects Do Not Track and Global Privacy Control. This measurement sets no analytics cookies or browser identifiers, and does not include creative text, film titles or full page URLs.

Storage and retention

We retain your account and saved creations while your account is active, or until you request deletion, subject to legal and technical retention requirements. Temporary audio and working files are used to process a request; generated films and the evidence needed to resolve an interrupted or disputed request may remain stored. Payment and accounting records are retained for the legally required periods, including up to ten years for French accounting records. Backup and provider retention can delay final erasure; we explain any applicable exception when responding to a deletion request.

Cookies and browser storage

Onde uses essential HttpOnly sign-in cookies to keep your session secure. Your browser also keeps your unfinished creation draft and interface preferences so you can return to them. These are functional storage mechanisms, not advertising trackers. Blocking them can prevent sign-in or draft recovery.

Your choices and rights

You can choose whether to publish a film and whether to activate the microphone. You may request access, correction, deletion, restriction, portability or, where applicable, object to processing. Email hello@onde.world from your account email, stating your request. We may need proportionate identity confirmation and normally respond within one month. You can ask us to close your account; we will stop access and handle remaining data and credits under the applicable requirements.

If you believe your data is being handled unlawfully, you may complain to the CNIL or your competent data protection authority. We will update this notice when material processing changes.