Privacy Policy

Who is responsible

Sterdam Pty Ltd is responsible for personal information processed through this platform, except where we process information on a client's documented instructions. In that case the roles described in the Data Processing Agreement apply.

What we process

• Account information: the email address you register, and profile details you choose to provide.
• Authentication information: the sign in method used and the identifiers returned by the authentication provider. We do not store your password in readable form.
• Submitted briefs and enquiries: bookings, commissions, studio submissions and talent applications, including the contact details and description you send.
• Uploaded files: reference images and other material you upload for a generation or an application.
• Generation inputs and outputs: prompts, directions, shot plans, and the resulting images or clips, together with their status.
• Usage and credit records: credit purchases, consumption, reversals and plan entitlements recorded in our ledger.
• Payment metadata: the transaction reference, amount, currency and status returned by our payment processor. Full card details are handled by the processor and are not available to us.
• Technical and security information: request and error information generated when you use the platform, used to keep it working and to investigate abuse.

Why we process it

• To create and secure your account and to provide access to the platform.
• To produce, deliver and store the work you ask for.
• To account for credits, plan entitlements, purchases and reversals.
• To respond to briefs, enquiries, applications and support requests.
• To detect, investigate and prevent misuse, fraud and unauthorised copying of platform imagery.
• To meet legal, accounting and record keeping obligations.

Retention

Account, credit ledger and transaction records are retained while your account is active and afterwards for as long as needed to meet legal, accounting and dispute resolution requirements.

Briefs, submissions, uploads and generated material are retained for as long as needed to deliver and support the work, unless you ask us to delete them earlier and we are not required to keep them.

We do not state a fixed retention period where the applicable period depends on the engagement or on a legal obligation. If you need the position for a specific record, ask us and we will confirm it.

Who processes information on our behalf

We use service providers to operate the platform. Rather than publish a provider list that could fall out of date, we describe the categories involved. On request we will confirm the specific providers in use at that time for a stated purpose.

• Application hosting and content delivery.
• Database, storage and authentication infrastructure.
• Payment processing.
• Transactional and authentication email delivery.
• Model providers used for image and video generation.

Security

Access to platform data is restricted by authentication and row-level access rules, and privileged operations are authorised on the server. Payment card data is handled by our payment processor and does not reach our systems.

We do not claim any security certification or independent audit standard. No platform can guarantee absolute security.

Deleting your uploads

You can review and delete the files you have uploaded at any time from your account, at /account/data. Deleting an upload removes it from the studio and from our storage, and any generation that depended on it will no longer display that reference.

Where a copy has to be retained for a legal, accounting or dispute resolution reason we will tell you when you ask. For anything you cannot remove yourself, write to info@sterdaminc.com.

Your rights

Subject to applicable law, you may ask for access to the personal information we hold about you, ask for a correction, ask for deletion, object to processing, or ask us to restrict it. Requests can be sent to info@sterdaminc.com and we may need to verify your identity first.

We do not sell personal information.

International handling

Our infrastructure and service providers may process information outside the country where you are located. Where that happens we rely on the safeguards available under applicable law and on our agreements with those providers.