Privacy Policy

Last updated: October 3, 2026

Who we are

Toonsona is operated by Arcana studios, LLC, a Delaware limited liability company (“Toonsona”, “we”, “us”). It lets you create characters and turn scripts into AI-generated talking videos. This policy explains what personal data we collect through this website and the Toonsona service, and how we handle it. You can reach us about anything in this policy at hello@toonsona.com, or by post at Arcana studios, LLC, 1111B S Governors Ave, STE 7911, Dover, DE 19904, USA.

What we collect

• Account data. Your name, email address and sign-in credentials (passwords are stored only in hashed form).
• Content you create and upload. Scripts, character descriptions, reference photos, audio recordings and uploads, and the characters, sets and videos generated from them.
• Billing data. Your subscription status, purchases and a ledger of how your credits are earned and spent. Card details are collected and processed by Stripe, our payment provider — we never see or store your full card number.
• Support messages. If you contact us by email or through the in-app support form, we keep the message and your contact details so we can reply.
• Technical data and crash reports. Standard server logs (IP address, browser type, pages requested), and error reports from our monitoring tooling when something breaks — these can include your IP address, device information and what you were doing when the error happened. We do not run advertising trackers.

How we use your data

• To run your account and generate your content. Generating a character, set, voice or video means sending the relevant inputs (your script, descriptions, reference photos, audio) to the third-party AI model providers that perform the generation.
• To process payments, manage subscriptions and keep accurate credit records.
• To answer support requests and messages.
• To operate, secure, debug and improve the Service.
• To tell you about product updates.

Where the GDPR or similar laws apply, we rely on performance of a contract (running your account, generating your content, billing), our legitimate interests (securing and improving the Service, fixing errors), legal obligations (keeping billing records) and your consent (marketing emails, which you can withdraw any time by unsubscribing).

What we don’t do

• We do not sell or rent your personal data.
• We do not use your email for anything other than Toonsona updates.
• We do not use your content to train our own AI models.

Sharing

We share data only with the service providers we need to run Toonsona, under terms that limit what they can do with it:

• AI model providers, which process your inputs to generate characters, sets, voices and videos.
• Stripe, which processes payments and stores your payment method.
• Hosting, database, storage and email-delivery providers that run the Service and send our emails.
• Error monitoring and internal messaging tools used to catch crashes and route your support requests to our team.

We also disclose data to authorities where the law requires it.

Retention

We keep account data and your content while your account is active. Billing and credit-ledger records are kept as long as accounting and tax law requires. Support correspondence is kept as long as needed to handle your request.

Your rights

Depending on where you live (for example under the GDPR, UK GDPR or CCPA/CPRA), you may have the right to access, correct, delete, or receive a copy of your personal data, to object to or restrict certain processing, and to complain to your local data-protection authority. To exercise any of these rights — including deleting your account and content — email hello@toonsona.com. Every marketing email we send also includes an unsubscribe link.

Cookies

We use essential cookies to keep you signed in and to secure your session. We do not use advertising or analytics cookies. If we add any, we will update this policy and, where required, ask for your consent first.

Children

The Toonsona service is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has given us personal data, contact us and we will delete it.

International transfers

Our service providers may process data outside your country. Where required, we rely on appropriate safeguards such as standard contractual clauses.

Changes

We will post any changes to this policy on this page and update the date above. If a change is significant, we will tell you by email.