Privacy Policy

The data controller is MISCHIEF PROJECTS LIMITED, 8 Th Floor, Imperial House 8 Kean Street, WC2B 4AS, United Kingdom. For any privacy question, contact support@miscproj.shop or call +44 7379140381.

• ▸Account data: your name and email address when you contact us or subscribe.
• ▸Studio inputs: the show descriptions, titles, tone choices and any reference notes you enter to generate promo assets.
• ▸Uploaded files: rehearsal photos, performer images or logos you choose to upload as references (see retention below).
• ▸Generated outputs: the briefs, poster concepts, image previews and trailer material produced for you.
• ▸Billing data: subscription plan, billing country and payment status. Card details are processed by Stripe — we never receive or store your full card number.
• ▸Support data: the content of messages you send us.
• ▸Technical data: IP address, device/browser type and basic analytics needed to run and secure the service.

Mischief is an online-only digital AI service with no physical goods, shipping or installation. Our collection sources are: (a) data you provide directly — forms, the studio, your user input, uploaded reference files and support messages; (b) data collected automatically from your device when you use the site (technical and cookie data); and (c) limited billing metadata received from Stripe to confirm your subscription status. We do not buy personal data or build profiles from third-party data brokers.

• ▸To provide the studio and generate your promo assets — performance of our contract with you.
• ▸To process subscriptions and receipts through Stripe — performance of a contract and legal obligation.
• ▸To respond to support and enquiries — legitimate interests and, for leads, your consent.
• ▸To secure, debug and improve the service — legitimate interests.
• ▸To meet legal, tax and accounting duties — legal obligation.

We do not use your studio inputs, uploads or generated outputs to train AI models, and we do not sell your personal data.

• ▸Hosting and delivery: our cloud hosting and CDN provider, to serve the site.
• ▸Payments: Stripe, Inc. — for subscription billing and card processing.
• ▸AI provider: the third-party AI provider that renders generation requests, where you use live generation.
• ▸Email: our email provider, to reply to you and send receipts.
• ▸Database/storage: our managed database and storage provider, for lead capture and account records.

Each processor acts on our instructions under a data-processing agreement. We do not sell or share your personal information for cross-context behavioural advertising.

• ▸User input: the show descriptions, titles, tone choices and prompts you type are sent to our third-party AI provider only to generate your requested result.
• ▸Uploaded files and sample data: reference photos, logos or example images you upload are used solely to condition your generation, cached for processing and cleared by default within 30 days.
• ▸Generated results: the briefs, poster concepts, image previews and trailer material are stored while your account is active so you can revisit and export them, and deleted on request.
• ▸No model training: we do not use your user input, uploaded files or generated results to train our own or any AI provider's models, and the AI provider is contractually restricted to processing your request for output only.

Some processors operate outside the UK/EEA. Where data is transferred internationally, we rely on appropriate safeguards such as UK International Data Transfer Agreements, EU Standard Contractual Clauses or an adequacy decision.

• ▸Account and billing records: for the life of your account and as required by tax/accounting law after closure.
• ▸Uploaded reference files: cached only for generation and cleared by default within 30 days.
• ▸Studio inputs and generated outputs: retained while your account is active so you can revisit them; deleted on request.
• ▸Support messages and leads: kept for as long as needed to handle your request and a reasonable follow-up period.

We use encryption in transit, access controls and reputable infrastructure providers. Payment card data is handled entirely by Stripe within its PCI-DSS environment; it does not pass through our own systems.

• ▸Access a copy of your data.
• ▸Rectify inaccurate data.
• ▸Erase data (right to be forgotten) where applicable.
• ▸Restrict or object to certain processing.
• ▸Data portability.
• ▸Withdraw consent at any time where we rely on consent.

To exercise any right, email support@miscproj.shop. You also have the right to complain to the UK Information Commissioner's Office (ICO) or your local EU supervisory authority.

California residents may request to know, delete and correct personal information, and may opt out of sale or sharing. We do not sell or share personal information as those terms are defined under the CCPA, and we do not use it for cross-context behavioural advertising. To make a request, email us; we will not discriminate against you for exercising your rights.

We use only the cookies needed to run the site plus limited privacy-respecting analytics. See the Cookie Policy for details and how to control them.

We do not make solely automated decisions with legal or similarly significant effects. The service is not for children under 13, and users aged 13–17 must have guardian consent. Mature-theme promo features are restricted to 18+.

We may update this policy; the date at the top reflects the latest version. Questions or requests: support@miscproj.shop.