1. Introduction
We value your privacy and handle personal data responsibly. This Privacy Policy explains what we collect, why we process it, how long we retain it, who we share it with, and how you can exercise your rights in connection with the services provided at stargen.co.uk operated by PRIMERENT VENTURES LTD, Company No. 15527691, 85 Great Portland Street, First Floor, London, England, W1W 7LT ("Stargen," "we," "us," "our").
Who is the Controller?
- We act as controller for account, billing, website/app usage, marketing preferences, and support data.
- We act as processor for Customer Content you input or upload to generate images/videos (e.g., prompts, reference images, captions, recipient details if you share them). We process such data only on your documented instructions. A Data Processing Addendum (DPA) is available on request.
2. What Personal Data We Collect
Name, email address, password hash, role/team, company profile, billing/postal address.
Token top-ups, order references, invoice/receipt records, payment identifiers.
IP address, device/browser type, OS, language, time zone, access and event logs, timestamps, cookie/SDK IDs, error telemetry, security/anti-abuse signals.
Prompts and any materials you provide (text, images, video clips, audio, logos), generation settings and Outputs' metadata (job IDs, model, duration, resolution).
File names, checksums, delivery status (where available), timestamps.
Messages, attachments, case history.
Opt-in/opt-out status, communication logs.
3. Why We Process Your Data and Legal Bases
Account creation, token balance, queueing and rendering of generations, downloads, feature access, service communications.
Verify purchases, detect misuse, maintain accounting and tax records.
Handling customer inquiries, processing refund requests, resolving disputes.
Monitoring, debugging, aggregated/anonymous analytics, capacity planning, rate-limiting, access controls, abuse prevention.
We send marketing only if you opted in; you can withdraw consent at any time.
Responding to lawful requests, sanctions/export-control compliance.
Where we rely on legitimate interests, we assess and balance them against your rights and reasonable expectations.
4. Sharing and International Transfers
We share personal data with trusted service providers where necessary to run the Service, for example:
- Payment processors and banks (billing, fraud checks)
- Cloud/hosting/CDN/storage & backup providers
- Rendering/AI model providers and queue/orchestration infrastructure
- Email/notification and in-app messaging tools
- Analytics/monitoring/error-tracking vendors
- Professional advisers (legal/accounting) when needed
- Regulators, courts or law enforcement where required by law
We do not transfer data in a way that reduces protections under applicable law.
5. Cookies and Similar Technologies
We use cookies and similar technologies for essential operations, security, analytics and (with your consent) marketing. Essential cookies are required for the platform to function.
6. Data Retention
Retention Period: Minimum 24 months, up to 6 years for tax/accounting/disputes.
Retention Period: While your account is active and for a reasonable period thereafter for security, fraud prevention, and record-keeping.
Retention Period: Stored while you keep them in your workspace; temporary/intermediate render files may be deleted automatically after processing.
Retention Period: Retained for a limited period to evidence generation and troubleshoot delivery.
Retention Period: Until you withdraw consent or we no longer have a lawful basis.
Deletion: When data is no longer required, we securely delete or anonymise it.
7. Your Responsibilities (Uploaded Content & Likeness)
You are responsible for ensuring you have a lawful basis to upload and process any third-party personal data or likeness/portrait (e.g., your models, clients, coworkers) and for providing required privacy information to those individuals.
Do not upload content that:
- Infringes intellectual property rights
- Violates privacy or publicity rights
- Breaches our Acceptable Use Policy
8. Your Rights
Under UK data-protection law, you may:
- Access your personal data
- Rectify inaccurate data
- Erase data in certain cases
- Restrict processing
- Object to processing based on legitimate interests or to direct marketing
- Port data you provided in a structured, commonly used format
- Withdraw consent where processing relies on consent
9. Security Measures
We implement appropriate technical and organisational measures, including:
- Encryption in transit — SSL/TLS for all data transfers
- Hardened infrastructure — secure server configurations
- Access controls — least-privilege permissions
- Network isolation — segregated environments
- Secure backups — encrypted and regularly tested
- Audit logging — monitoring and alerting
- Staff awareness — training and security policies
10. Children
The Service is intended for users 18 years and older. We do not knowingly collect personal data from children.
11. Automated Decision-Making and Profiling
We do not carry out automated decision-making that produces legal or similarly significant effects.
Limited automation (e.g., anti-abuse scoring, anomaly detection, queue prioritisation) is used to protect and improve the Service and does not override your rights.
12. Changes to this Policy
We may revise this Privacy Policy from time to time. Material changes will be communicated via email and/or a prominent notice on our website. The updated Policy will display a new effective date.
13. Contact & Complaints
Data Controller
Company Name: PRIMERENT VENTURES LTD
Company Number: 15527691
Registered Office: 85 Great Portland Street, First Floor, London, England, W1W 7LT
Email: info@stargen.co.uk
Phone: +44 7599 035 935
Nothing in this Policy affects your statutory rights.