Privacy Policy

1. Introduction

This Privacy Policy explains how MyDirector AI Inc. (“MyDirector,” “we,” “us,” or “our”) collects, uses, processes, and protects personal information when you access or use our website, applications, and related services (collectively, the “Services”). It also explains your rights regarding your personal data and how we handle it in compliance with applicable data protection laws, including GDPR, CCPA/CPRA, and other relevant privacy regulations.

We operate an AI-powered content creation platform that enables users to participate in AI-guided interviews, generate and edit video content, and publish approved content to connected social media platforms. This Policy applies to all users of the Services, including individuals and businesses.

This Privacy Policy applies to all personal information collected through our website, applications, and platform services, AI interview sessions (including audio and video recordings), uploaded content, files, and media, connected social media accounts and integrations, customer support and communications, and use of third-party tools integrated into the Services

It does not apply to third-party websites, platforms, or services that may be accessed through links or integrations within the Services. Those services are governed by their own privacy policies.

MyDirector AI Inc. is a company incorporated in the United States with its principal place of business in Florida. We provide an AI-powered platform that helps users create, edit, and distribute content across social media, combining AI with human editorial support.

If you have any questions about this Privacy Policy or how your data is handled, you can contact us at: Email: hello@mydirector.ai, Address: 7901 4th St N, Ste 300, St. Petersburg, FL 33702, USA

2. Information We Collect

We collect several categories of information to operate, improve, and secure the Services, including information you provide directly, data generated through your use of the platform, and information collected automatically or from third-party integrations.

2.1 Information You Provide

We collect information you voluntarily provide when using the Services, including account registration details (such as name, email address, password hash), onboarding responses (including business goals, content strategy, niche, competitors, tone of voice, and target audience), preferences for AI interviews and content style, customer support communications, feedback, and feature requests, and instructions, prompts, and inputs submitted during content creation workflows

This information is used to configure your account, personalize AI outputs, and enable platform functionality.

2.2 Account and Profile Information

We collect account data required to create and manage your profile, including name and email address, login credentials (stored in hashed form), account settings and preferences, subscription status and plan details, and authentication and security-related metadata. This data is used for authentication, account management, security monitoring, and service delivery.

2.3 Business and Brand Information

As part of onboarding and ongoing use, we collect structured brand data, including industry and niche, content goals (e.g., lead generation, personal branding, audience growth), target audience demographics, competitor references or reference accounts, tone of voice and communication style, and marketing positioning and messaging direction. This information is used to tailor AI interviews, generate personalized scripts, and create brand-aligned video content.

2.4 AI Interview Recordings

When you use the AI interview feature, we collect and process audio recordings, video recordings (where applicable), spoken responses, conversational inputs, prompts, transcripts, session metadata (such as timestamps, duration, and interaction history), and related interview context. To provide these features, interview data may be processed by trusted AI service providers that support real-time voice conversations, speech-to-text transcription, text-to-speech synthesis, conversational context management, and AI-assisted content generation.

Interview recordings and related data are used to conduct live AI interviews, generate transcripts, extract key insights and content ideas, create scripts, captions, titles, and video outputs, produce rough-cut edits, personalize future interview sessions, and improve the quality and continuity of the Services. Certain interview-derived context may also be securely stored to enable continuity of conversation and long-term memory across future sessions. Recordings are generally retained only for as long as necessary to provide the Services or as otherwise required for legal, operational, or account management purposes.

2.5 Uploaded Content and Media

We collect content you upload or connect to the Services, including raw video footage (for content creation and editing), audio files (including podcast recordings or voice clips), images and branding assets, documents or reference materials, and any supporting files used in content production workflows. This content is processed to generate AI-assisted edits, rough cuts, captions, and final publishing-ready content.

2.6 AI-Generated Content

We collect and store content generated through the Services, including interview transcripts, summaries, scripts, captions, titles, hooks, persona profiles, onboarding responses, interview questions, content recommendations, publishing suggestions, video rough cuts, edited short-form videos (such as Reels, TikToks, and YouTube Shorts), AI-generated content variations, and other creative or editorial outputs produced through our AI workflows.

AI-generated content is created using a combination of artificial intelligence providers that support text generation, transcription, speech processing, content analysis, and voice synthesis. This content is stored within your account to enable editing, human review where applicable, approval, publishing, scheduling, analytics, and future content creation workflows. We process this information solely to provide, maintain, and improve the Services, and we do not use your content to train publicly available AI models without your explicit authorization, where required by applicable law.

2.7 Connected Social Media Information

When you connect accounts such as Instagram, YouTube, TikTok, or LinkedIn, we collect data via their official APIs, including profile information (name, username, bio, profile image), Media data (posts, videos, captions, timestamps), engagement metrics (views, likes, comments, shares, saves), account-level analytics (reach, impressions, follower growth), publishing permissions and scheduling data, and content publishing logs (what was posted, when, and where)

We use this data to publish approved content directly to your accounts, schedule posts, retrieve analytics and performance insights, and display your content library inside the platform. You can revoke access at any time via platform settings or third-party authorization controls.

2.8 Payment Information

If you subscribe to a paid plan, we collect billing name and address, subscription plan details, transaction history and payment status, and partial payment metadata (e.g., last 4 digits or tokenized identifiers). Payments are processed by third-party payment processors. We do not store full credit card or banking details.

2.9 Communications with Us

We collect communications including customer support tickets, emails, chat messages, bug reports, technical issues, and feature requests and feedback. These are used for support, troubleshooting, and product improvement.

2.10 Automatically Collected Information

We automatically collect technical and usage data, including: IP address and approximate geographic location, device type, operating system, and browser information, log data (errors, system events, access times), session behavior (clicks, navigation paths, feature usage), performance metrics and system diagnostics, and authentication and security logs (login attempts, session activity). This data is used for security monitoring, fraud prevention, debugging, analytics, and platform performance improvement.

3. Information We Receive From Connected Platforms

3.1 Instagram

When you connect Instagram, we may receive information via the Meta Graph API, depending on your permissions and account type (e.g., Business or Creator).

This may include:

• Profile information (such as username, display name, bio, profile image, and follower metrics)
• Media data (posts, reels, captions, timestamps, thumbnails, and media identifiers)
• Engagement data (likes, comments, shares, saves, impressions, reach, and profile interactions)
• Account insights and analytics (growth trends, audience activity, and performance metrics)
• Publishing permissions required to create and publish content on your behalf

We use this information to display your Instagram content library inside the Services, generate analytics dashboards and performance reports, schedule and publish approved content, and personalize content recommendations and AI-generated outputs. We only publish content that you explicitly approve within the platform.

3.2 YouTube

MyDirector uses YouTube API Services. When you connect your YouTube account, we access YouTube data via Google’s YouTube Data API using the permissions you grant during Google’s authorization flow. By using the YouTube features of the Services, you are agreeing to be bound by the YouTube Terms of Service. Google’s handling of your information is described in the Google Privacy Policy.

The user information and API Data we access, collect, and store when you connect YouTube is:

• OAuth credentials (access and refresh tokens), stored encrypted and used solely to make the API calls you have authorized
• Channel information (channel ID and channel name)
• Channel statistics (subscriber count, total view count, and video count), refreshed as daily snapshots to power your analytics dashboard
• Per-video statistics (view, like, and comment counts) for videos published through the Services
• The video IDs, titles, descriptions, and public links of videos we upload to your channel with your explicit approval

We use this information to upload and publish the videos you approve to your channel, to display your publishing history and library inside the Services, and to show you analytics and performance insights for your channel and published videos. We never publish or upload content to YouTube without your explicit approval. Stored YouTube data is refreshed at least once every 24 hours, and your analytics dashboard indicates when the data was last synced. YouTube API Data is processed on our behalf by the infrastructure subprocessors listed in Section 7 (hosting, database, and storage providers). We do not sell YouTube API Data, do not share it with any other internal or external parties, do not use it for advertising, and do not use it to train AI models.

Deleting your YouTube data and revoking access:you can disconnect YouTube at any time in Settings → Connected Platforms. Disconnecting revokes our access with Google and deletes the YouTube API Data we have stored (tokens, channel information, and analytics snapshots). You can also revoke MyDirector’s access at any time via the Google security settings page at myaccount.google.com/connections; we detect revocation through our daily authorization checks and delete the stored data described above, in any event within 7 calendar days. Records of the videos you approved and published through the Services remain part of your content library until you delete them or your account. Deleting your account removes all stored YouTube data immediately. You can also request deletion at any time by emailing hello@mydirector.ai; we honor such requests within 7 calendar days.

3.3 TikTok

When you connect TikTok, we may receive information via TikTok’s official APIs, subject to your permissions and TikTok’s developer policies.

This may include:

• Profile information (username, display name, avatar, bio, and account identifiers)
• Video data (published videos, captions, thumbnails, and timestamps)
• Engagement metrics (views, likes, comments, shares, and follower growth)
• Content performance analytics and audience insights
• Publishing permissions for posting content on your behalf

We use this information to schedule and publish approved content to TikTok, analyze video performance and audience engagement, display your content library and analytics inside the platform, and improve AI-generated content suggestions and hooks. Publishing actions are only executed after your explicit approval.

3.4 LinkedIn

When you connect LinkedIn, we may collect information through LinkedIn’s API based on your authorized permissions.

This may include:

• Profile information (name, headline, job title, company, profile image, and public profile data)
• Post and content data (posts, articles, engagement metrics, and timestamps)
• Analytics data (impressions, engagement, reach, and audience interactions)
• Publishing permissions where applicable

We use this information to enable content scheduling and publishing to LinkedIn, provide analytics and engagement reporting, manage and display your LinkedIn content within the Services, and support AI-generated professional content creation. We publish content on LinkedIn only when you explicitly approve it.

3.5 Future Integrations

We may integrate additional third-party platforms in the future to expand functionality, such as new social media services, analytics tools, or content distribution channels.

Any future integrations will follow the same principles:

• We will only request access to data necessary to provide the requested feature
• We will process data strictly in accordance with your authorization and platform permissions
• We will comply with the applicable terms, policies, and API requirements of each third-party provider
• You will retain control over whether to connect or disconnect any integration at any time

We will update this Privacy Policy when new integrations are added, as required by applicable law, or when material changes occur in data processing practices.

4. How We Use Your Information

We use the information we collect to operate, maintain, and improve the Services, and to deliver AI-powered content creation, editing, publishing, and analytics features.

4.1 Providing the Services

We use your information to create and maintain your account, authenticate users, manage subscriptions, and provide access to core platform features. This includes enabling AI interview sessions, generating content outputs, storing user projects, and supporting workflow features such as editing, approvals, scheduling, and publishing.

4.2 AI Interview Processing

We use interview recordings, voice inputs, prompts, and interaction data to conduct AI-guided interviews and generate personalized content. To provide these features, interview data may be processed by trusted AI service providers that support real-time conversational AI, speech-to-text transcription, text-to-speech synthesis, media orchestration, and conversational memory. This enables the Services to conduct live AI conversations, transcribe interviews, maintain conversational context across sessions, generate synthesized voice responses, and produce structured outputs.

We also use interview data to extract key insights; identify themes, hooks, and storylines; segment interviews into content-ready clips; generate transcripts, scripts, captions, summaries, and rough-cut video drafts; and improve the quality, personalization, and continuity of the interview experience.

4.3 AI Content Generation

We use your prompts, onboarding responses, brand profile, business information, interview responses, uploaded content, and other inputs to generate personalized AI-assisted content. Depending on the feature you use, trusted AI providers may generate social media captions, onboarding questions, persona profiles, interview questions, summaries, titles, scripts, hooks, content recommendations, publishing suggestions, and other creative outputs tailored to your objectives.

AI-generated content is customized based on your industry, target audience, brand voice, content goals, and previous interactions with the Services. These outputs are used to support content creation, editing, scheduling, publishing, optimization, and analytics, and may be refined through optional human editorial review where applicable.

4.4 Human Editorial Services

In some cases, authorized editors or service providers may access your content to support production and quality assurance. This may include reviewing AI-generated scripts and captions, Interview transcripts, raw and processed video footage, and rough cuts and edited outputs

Human review is used to improve clarity, fix technical or formatting issues, enhance content quality, and support the preparation of the final output. Editors do not publish content on your behalf; final approval remains with you.

4.5 Social Media Publishing

We use connected account data and your publishing instructions to schedule and publish approved content to third-party platforms such as Instagram, TikTok, YouTube, and LinkedIn. This includes posting content you have explicitly approved, scheduling posts for future publication, managing publishing workflows and logs, and retrieving publishing status and confirmations. We do not publish content within the Services without your explicit approval.

4.6 Analytics and Performance Reporting

We process platform and engagement data to provide insights into content performance and audience behavior. This may include video views, likes, comments, shares, and saves; reach, impressions, and engagement rates; audience growth trends and follower changes; content performance comparisons; and platform-level reporting dashboards. These insights help you understand and improve content effectiveness.

4.7 Customer Support

We use your information to provide customer support, respond to inquiries, resolve technical issues, and handle bug reports or service requests. We may also use support interactions to improve documentation, platform usability, and service reliability.

4.8 Security and Fraud Prevention

We process data to maintain platform security and protect users from unauthorized access, abuse, fraud, and malicious activity. This includes detecting suspicious login attempts or activity, monitoring for misuse of AI features, preventing unauthorized access to accounts, enforcing usage limits and technical safeguards, and protecting platform integrity and infrastructure

4.9 Legal Compliance

We may process or disclose information where necessary to comply with applicable laws, regulations, legal obligations, court orders, or lawful government requests. We may also use data to enforce our Terms of Service, investigate violations, and protect the rights, safety, and security of MyDirector, our users, and third parties.

4.10 Service Improvements

We use aggregated, anonymized, or usage-based data to improve and develop the Services.

This includes enhancing AI models, workflows, and prompt systems used within the platform, improving interview structure and content generation quality, optimizing platform performance, reliability, and scalability, developing new features and product capabilities, and analyzing user behavior to improve usability and engagement

Where possible, we apply safeguards to ensure that improvements do not rely on identifiable personal data unless necessary for service operation.

5. Artificial Intelligence Processing

5.1 How AI Processes Your Data

MyDirector uses multiple artificial intelligence providers to deliver the Services. Depending on the feature you use, your interview recordings, voice inputs, uploaded media, onboarding responses, prompts, brand information, and account data may be processed by trusted AI providers solely to provide the requested functionality.

Our AI processing pipeline uses Anthropic to generate onboarding questions, persona profiles, interview questions, social media captions, content recommendations, and other text-based outputs. OpenAI powers our conversational AI interview experience, generates conversation summaries, titles, and other short-form content, and transcribes certain onboarding audio. Deepgram processes live and recorded interview audio to generate accurate transcripts, while Cartesia converts AI-generated responses into synthesized speech for the AI interview experience. LiveKit securely orchestrates real-time media streams between the Services and our AI providers, and Memo stores interview-derived conversational context to improve continuity and personalization across interview sessions.

These providers process only the information necessary to perform the requested task on our behalf. AI processing is used exclusively to conduct interviews, generate transcripts, create scripts, captions, titles, summaries, rough cuts for video, content recommendations, and other personalized outputs; to automate content creation workflows; and to improve the functionality and performance of the Services.

5.2 Human Review of AI Content

In certain circumstances, authorized employees or approved service providers may review AI-generated outputs and related materials, including transcripts, scripts, captions, drafts, and video rough cuts, to improve quality, resolve technical issues, provide customer support, verify output accuracy, or enhance the performance of the Services. Human review is performed only where necessary, is subject to strict confidentiality obligations and role-based access controls, and is limited to the minimum information required to perform the applicable task.

5.3 AI Limitations

Artificial intelligence is an evolving technology, and AI-generated outputs may be inaccurate, incomplete, inconsistent, outdated, or influenced by the information provided during processing. AI-generated content may contain errors, omissions, or unintended biases and should not be considered professional, legal, financial, tax, medical, or other expert advice.

You are solely responsible for reviewing, verifying, editing, and approving all AI-generated content before publishing, distributing, or otherwise relying upon it. MyDirector does not guarantee the accuracy, originality, completeness, or commercial performance of AI-generated outputs, including engagement, audience growth, or business results.

5.4 No Public AI Model Training

MyDirector does not use your interview recordings, uploaded media, transcripts, prompts, personal information, or AI-generated content to train publicly available artificial intelligence models. We require our AI providers to process your data only for the purpose of providing services to MyDirector and in accordance with applicable contractual, confidentiality, and data protection obligations.

Where appropriate, we may use aggregated, anonymized, or de-identified information to improve the performance, reliability, security, and operation of the Services, provided that such information cannot reasonably be used to identify you. Any processing of your personal information remains subject to this Privacy Policy and applicable data protection laws.

6. How We Share Your Information

We only share your personal information where necessary to operate, maintain, secure, and improve the Services, to fulfill your instructions, or where required by law. We do not sell your personal data.

6.1 Service Providers and Subprocessors

We share information with trusted third-party service providers that support core infrastructure and operations of the Services. These include providers for cloud hosting, storage, and computing infrastructure, database management and backend services, analytics and product performance monitoring, customer support and communication tools, security monitoring and fraud prevention systems, and error tracking and system diagnostics

These service providers process personal data only on our instructions, under contractual confidentiality and data protection obligations, and solely for the purpose of providing services to MyDirector.

6.2 AI Providers

We share only the information necessary to deliver the requested functionality with our trusted AI service providers, including Anthropic, OpenAI, Deepgram, Cartesia, LiveKit, and Memo. Depending on the feature you use, these providers may process interview recordings, audio and video files, transcripts, prompts, onboarding responses, uploaded media, brand information, AI-generated content, and conversational context to support features such as live AI interviews, speech transcription, voice synthesis, content generation, summarization, media orchestration, personalization, and conversational memory.

These providers act as our authorized Subprocessors and process personal information solely on our behalf and in accordance with our instructions, contractual obligations, and applicable data protection laws. They are required to implement appropriate technical and organizational security measures and are prohibited from using your information for their own advertising, profiling, or to train publicly available AI models, except where you have expressly authorized such processing or where otherwise permitted by applicable law.

6.3 Social Media Platforms

When you connect your social media accounts, we share or transmit information to platforms such as Instagram, YouTube, TikTok, and LinkedIn in order to publish content you have approved, schedule posts, retrieve analytics and engagement metrics, and manage account integrations and authentication. This sharing occurs only with your authorization and the permissions you grant on each platform.

6.4 Payment Processors

We share necessary billing and transaction information with third-party payment processors to process subscription payments, manage invoices and billing cycles, handle refunds, chargebacks, and disputes, and prevent fraudulent transactions. Payment processors operate under their own privacy and security policies, and we do not store full payment card details.

6.5 Legal Requirements

We may disclose personal information where required to comply with applicable laws, regulations, legal obligations, court orders, subpoenas, or lawful requests from government authorities. We may also share information where necessary to enforce our Terms, investigate violations, prevent fraud or abuse, protect users, or defend legal claims.

6.6 Business Transfers

If MyDirector is involved in a merger, acquisition, investment, restructuring, bankruptcy, or asset sale, your information may be transferred as part of that transaction. In such cases, we will ensure that your information remains protected in accordance with this Privacy Policy and applicable data protection laws, and we will notify you where required by law.

7. AI Providers and Subprocessors

MyDirector uses carefully selected third-party service providers (“Subprocessors”) to deliver, maintain, secure, and improve the Services. These providers process personal information only on our behalf, under contractual obligations requiring appropriate technical and organizational safeguards, confidentiality, and compliance with applicable data protection laws.

7.1 Artificial Intelligence Providers

The following AI providers support various features of the Services. Depending on the functionality you use, these providers may process only the information necessary to perform the requested service.

These providers process personal information solely to provide AI-powered functionality on MyDirector’s behalf and are contractually prohibited from using customer data for advertising, profiling, or training publicly available AI models unless expressly authorized by MyDirector and permitted by applicable law.

7.2 Cloud Infrastructure and Hosting Providers

We rely on trusted cloud infrastructure providers to securely host, process, and store data required to operate the Services.

These providers may process account information, uploaded media, AI-generated content, authentication data, and system logs necessary to deliver the Services.

7.3 Analytics and Monitoring Providers

We use analytics and monitoring providers to understand platform usage, monitor system performance, detect errors, maintain security, and improve the user experience. These providers may process technical information such as device identifiers, usage statistics, log data, IP addresses, feature interactions, and performance metrics.

7.4 Communication and Email Providers

We use third-party communication providers to deliver transactional emails and service-related communications, including account verification, password resets, billing notifications, publishing confirmations, security alerts, and product updates. These providers process only the contact information necessary to deliver these communications.

7.5 Payment Processors

We use third-party payment processors to securely process subscription payments, handle billing and refunds, and prevent fraud. These providers process payment and billing information independently in accordance with their own privacy policies and applicable payment security standards. MyDirector does not store complete payment card information.

7.6 Subprocessor Safeguards

All Subprocessors engaged by MyDirector are required to process personal information solely in accordance with our documented instructions and to implement appropriate technical and organizational security measures. They must maintain the confidentiality of all information they process, comply with applicable privacy and data protection laws, and may not use personal information for independent commercial purposes, including advertising or training publicly available AI models unless expressly authorized.

As our technology stack evolves, we may add, replace, or remove Subprocessors. Where required by applicable law, we will update this Privacy Policy or maintain an up-to-date list of Subprocessors to reflect material changes.

8. International Data Transfers

MyDirector operates in the United States, and the information we collect may be transferred to, stored in, and processed in the United States and other countries where we or our service providers and Subprocessors maintain operations.

Because our infrastructure and providers are globally distributed, your personal data may be processed in jurisdictions that may not offer the same level of data protection as your country of residence. By using the Services, you acknowledge that your information may be transferred internationally as necessary to operate and deliver the Services.

Where required under applicable data protection laws, we implement appropriate safeguards to protect your personal data during international transfers. These safeguards may include Standard Contractual Clauses approved by relevant regulatory authorities, data processing agreements with our vendors, and other legally recognized transfer mechanisms designed to ensure adequate protection of your information.

We also take reasonable technical, organizational, and contractual measures to protect personal data during cross-border transfers, including encryption, access controls, and secure infrastructure standards. However, no method of transmission or storage can be guaranteed to be fully secure, and you acknowledge that international data transfers carry inherent risks.

9. Data Retention

We retain personal data only for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, enforce agreements, and support legitimate business operations.

Retention periods vary depending on the type of data. For example, account information is retained while your account remains active, interview recordings and related processing data may be retained for a limited period after processing, and billing records may be retained for longer periods where required by law. Certain data may also be stored in backups for a limited time before being overwritten.

When you delete your account or request deletion, we will take reasonable steps to remove or anonymize your personal data, subject to legal, security, and operational retention requirements.

10. Data Security

We implement appropriate technical and organizational measures designed to protect your personal data against unauthorized access, loss, misuse, alteration, or disclosure. These measures include encryption in transit and at rest, access controls, role-based permissions, monitoring systems, and secure infrastructure hosted by trusted third-party providers.

We also limit access to personal data to authorized personnel, contractors, and service providers who require access to perform their duties and who are bound by confidentiality and security obligations.

While we take reasonable steps to protect your information, no system or method of internet transmission can be guaranteed to be completely secure. You are responsible for maintaining the security of your account credentials and for using appropriate safeguards when accessing the Services.

11. Your Privacy Rights

Depending on where you live, applicable privacy laws such as the GDPR, CCPA/CPRA, and other U.S. state privacy laws may grant you specific rights regarding the collection, use, and sharing of your personal information. These rights are not absolute and may be subject to legal limitations, technical constraints, or exceptions required to provide the Services, comply with legal obligations, or protect against fraud, abuse, or security risks.

11.1 GDPR Rights

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, you are entitled to a range of rights under applicable data protection laws. These rights include:

• Right of Access - You have the right to request confirmation of whether we process your personal data and, where applicable, to obtain a copy of that data along with information about how it is used, shared, and stored.
• Right to Rectification - You may request correction of inaccurate, incomplete, or outdated personal data. We may also allow you to update certain information directly within your account settings.
• Right to Erasure (“Right to be Forgotten”) - You may request deletion of your personal data where legally permitted. This right may not apply where we are required to retain data for legal obligations, security purposes, dispute resolution, or platform integrity.
• Right to Restrict Processing - You may request that we limit the processing of your personal data in certain circumstances, such as when you contest the accuracy of the data or object to its processing.
• Right to Data Portability - Where applicable, you may request a copy of your personal data in a structured, commonly used, and machine-readable format, and request that we transfer it to another service provider where technically feasible.
• Right to Object - You may object to the processing of your personal data where we rely on legitimate interests as a legal basis. This includes processing for analytics, service improvement, or certain personalization activities, subject to overriding legitimate grounds.
• Right to Withdraw Consent - Where we rely on consent to process your personal data, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.
• Rights Related to Automated Processing - Where applicable, you may have rights regarding automated decision-making or profiling, including the right to request human review of certain automated processes that produce legal or similarly significant effects.

If you wish to exercise any of your GDPR rights, you may contact us using the details provided in this Privacy Policy. We may require you to verify your identity before processing your request. We will respond within the timeframes required under applicable law.

11.2 California Privacy Rights (CCPA/CPRA)

If you are a California resident, you are granted specific rights under the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA). These rights are designed to give you transparency and control over how your personal information is collected, used, and shared.

• Right to Know and Access - You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, including the sources of that information, the purposes for collection, and the categories of third parties with whom it is shared.
• Right to Deletion - You may request that we delete personal information we have collected about you, subject to certain legal exceptions. These exceptions may include retaining information necessary to complete transactions, comply with legal obligations, detect fraud, or maintain security.
• Right to Correction - You have the right to request correction of inaccurate personal information maintained by us, taking into account the nature of the information and the purposes of processing.
• Right to Opt Out of Certain Processing- You may have the right to opt out of certain data sharing or processing activities, including “Sale” of personal information (as defined under CCPA/CPRA), “Sharing” of personal information for cross-context behavioral advertising, and Certain forms of profiling or targeted advertising. We do not sell personal information in the traditional sense; however, we will still honor applicable opt-out rights where required by law.
• Right to Limit Use of Sensitive Personal Information - Where applicable, you may request that we limit the use and disclosure of sensitive personal information to purposes permitted under CPRA, such as providing the Services or ensuring security and integrity.
• Right to Non-Discrimination - We will not discriminate against you for exercising any of your privacy rights. This means we will not deny services, charge different prices, or provide a different level of service solely because you exercised your rights under applicable law.

If you wish to exercise any of your California privacy rights, you may contact us using the information provided in this Privacy Policy. We may need to verify your identity before processing your request, and we will respond within the time period required by law.

11.3 Other U.S. State Privacy Rights

Residents of certain U.S. states may have additional privacy rights under applicable state privacy laws, including the right to access, delete, correct, or obtain a copy of their personal information. Depending on the jurisdiction, you may also have the right to opt out of certain types of data processing, such as targeted advertising, profiling, or the “sale” or “sharing” of personal data as defined under applicable laws.

These rights vary by state and may include protections under laws in states such as Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, Iowa, New Jersey, New Hampshire, Tennessee, and others, as privacy laws continue to evolve.

Where such laws apply, we will provide you with the ability to exercise these rights in accordance with legal requirements and will not discriminate against you for doing so.

11.4 Exercising Your Rights

You may exercise your privacy rights by contacting us using the contact details provided in this Privacy Policy. Depending on your request and applicable law, we may need to verify your identity before we can process your request to ensure that personal data is not disclosed to unauthorized individuals.

We will respond to verified requests within the timeframes required by applicable law. In some cases, we may need additional information to confirm your identity or to better understand the scope of your request. If we are unable to fulfill your request due to legal exceptions or operational requirements, we will inform you where permitted by law.

You may also be able to manage certain types of data directly within your account settings, including profile information, connected integrations, and communication preferences, where such features are made available through the Services.

12. Cookies and Tracking Technologies

We use cookies, pixels, local storage, SDKs, and similar tracking technologies to operate the Services, maintain security, improve performance, analyze usage, and personalize your experience. These technologies allow us to recognize your device, maintain login sessions, remember preferences, understand how users interact with features (such as AI interviews, content generation, and publishing workflows), and improve overall platform reliability and usability.

Cookies and tracking tools may also support fraud prevention, security monitoring, debugging, and system optimization, and help us measure engagement and feature performance across the Services.

12.1 Types of Cookies We Use

We may use the following categories of cookies and similar technologies:

• Strictly Necessary Cookies - Required for the operation of the Services, including authentication, session management, security, and core platform functionality. Without these cookies, the Services may not function properly.
• Functional Cookies - Used to remember user preferences, settings, and configurations to improve usability and provide a more personalized experience across sessions.
• Analytics Cookies - Used to understand how users interact with the Services, including feature usage, navigation patterns, session duration, and performance metrics. This helps us improve product design, stability, and user experience.
• Security Cookies - Used to detect and prevent fraudulent activity, unauthorized access, abuse, and other security threats. These cookies help protect user accounts and maintain platform integrity.
• Performance and Optimization Technologies - In some cases, we may use additional tracking technologies to monitor system performance, load times, and technical errors, thereby improving reliability and scalability.

12.2 Managing Cookie Preferences

You may control or disable cookies at any time through your browser settings or device controls. You may also delete cookies already stored on your device. However, please note that disabling certain cookies may impact the functionality of the Services, including login access, saved preferences, AI interview continuity, and content workflow features. Some parts of the platform may not function properly without essential cookies.

Where required under applicable law, we may provide a cookie consent banner or in-platform preference center that allows you to accept or reject non-essential cookies and manage your tracking preferences directly.

In addition, certain third-party providers we use (such as analytics or infrastructure tools) may independently set cookies in accordance with their own privacy policies.

13. Children's Privacy

The Services are not directed to, marketed to, or intended for use by children under the age of 13, and we do not knowingly collect personal information from anyone under 13 years of age. This is in compliance with the U.S. Children’s Online Privacy Protection Act (“COPPA”) and similar applicable child privacy laws.

We do not knowingly allow children under 13 to create accounts, access the Services, or use any AI interview, content generation, publishing, or analytics features. If we become aware that a user is under 13, or that we have collected personal information from a child under 13 without verifiable parental consent, we will take steps to promptly delete such information from our systems, unless retention is required by law or necessary for security, fraud prevention, or legal compliance purposes.

Where parental consent is required under applicable law, we reserve the right to request verification of such consent before allowing access to the Services. If consent cannot be verified, we may restrict or remove access and delete associated data.

If a parent or legal guardian believes that a child under 13 has provided personal information to us, they may contact us using the details provided in this Privacy Policy. We will investigate the matter and take appropriate steps, which may include disabling the account, removing associated content, and deleting personal data where required.

In addition, certain features of the Services, including subscription payments, AI interview tools, content publishing capabilities, and integration with third-party platforms, are intended only for individuals who meet the minimum age requirements for those services, which may be 18 years or older depending on the jurisdiction and the feature in question.

We do not knowingly use children’s data for profiling, behavioral tracking, targeted advertising, AI training, or content personalization. We also do not knowingly share children’s data with third-party service providers except where necessary to comply with legal obligations or to protect the security and integrity of the Services.

Given the nature of the Services, if we determine that a user may be underage, we may suspend access while we investigate and verify eligibility.

14. Third-Party Websites and Services

The Services may include links to, integrations with, or access to third-party websites, applications, platforms, APIs, plugins, or services that are not owned, operated, or controlled by MyDirector. These third-party services may include social media platforms, AI providers, analytics tools, payment processors, and other external technologies that are used to enhance the functionality of the Services.

These third-party services operate independently from MyDirector and are governed by their own terms of service, privacy policies, and operational practices. We do not control, endorse, or assume responsibility for the content, data practices, security measures, or availability of any third-party services.

If you choose to access or use any third-party service through or in connection with the Services, any information you provide will be subject to that third party’s privacy policy and not this Privacy Policy. We encourage you to carefully review the privacy and security policies of any third-party service before interacting with it or providing any personal information.

We are not responsible for any loss, damage, or issues arising from your use of third-party services, including, but not limited to, data breaches, service interruptions, unauthorized access, content removal, or changes to their functionality or policies.

Where applicable, third-party services may independently collect data about you, including usage data, device information, or interaction data, even if accessed through the MyDirector platform. We do not control or have visibility over such independent processing beyond what is provided through their integration with our Services.

We may update, add, remove, or change third-party integrations at any time to improve the Services or comply with legal, technical, or business requirements.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our Services, legal requirements, or operational practices. When we make changes, we will update the “Last Updated” date at the top of the Policy.

Where required by applicable law, we will also provide additional notice of material changes, such as by email, in-app notification, or a prominent notice on our website. Continued use of the Services after the updated Privacy Policy becomes effective constitutes your acceptance of the revised version.

16. Contact Us

If you have any questions about this Privacy Policy, or if you wish to exercise your privacy rights, please contact us using the details below:

MyDirector AI Inc. Email: hello@mydirector.ai Address: 7901 4th St N, Ste 300, St. Petersburg, FL 33702, USA