PRIVACY POLICY

Foreign Legends Media Inc.
5713 Eldridge Ave
Côte Saint-Luc, QC Canada H4W 2E1
Email: Daniel@foreignlegends.com

Effective Date: February 11, 2026
Last Updated: February 11, 2026

1. INTRODUCTION

Foreign Legends Media Inc. (“we,” “us,” “our,” or the “Company”) is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered animation and content generation services (the “Services”).

This Privacy Policy applies to all users of our Services, including visitors to our website, registered users, and customers. By accessing or using our Services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy.

Compliance: This Privacy Policy complies with: - Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) - Quebec’s Act respecting the protection of personal information in the private sector (Law 25) - The General Data Protection Regulation (GDPR) for users in the European Union - Other applicable privacy laws and regulations

2. INFORMATION WE COLLECT

2.1 Information You Provide Directly

We collect information that you voluntarily provide when using our Services, including:

Account Information: - Full name - Email address - Billing address - Company name (if applicable) - Phone number (optional) - Username and password

Project and Content Data: - Animation prompts and story concepts you submit - Project files, scripts, and creative briefs - Generated content outputs (images, videos, audio) - Project settings and preferences - Feedback and comments

Payment Information: - Credit card or payment card details (processed through secure third-party payment processors) - Billing address - Transaction history

Communications: - Customer support inquiries and correspondence - Survey responses - Feedback and testimonials - Newsletter subscriptions

2.2 Information Collected Automatically

When you access our Services, we automatically collect certain technical information:

Usage Data: - IP address - Browser type and version - Device identifiers - Operating system - Access times and dates - Pages viewed and features used - Referring website addresses - Click-stream data

API Usage Metrics: - Number of API calls made - Processing time and performance data - Error logs and debugging information - Feature utilization statistics

Cookies and Tracking Technologies: - Session cookies - Preference cookies - Analytics cookies - Authentication tokens

2.3 Information from Third-Party Services

Our Services integrate with third-party AI platforms to provide animation and content generation capabilities. When you use these features, we may receive information from:

  • Anthropic (Claude API): Processing data, prompt content, and usage metrics
  • Higgsfield: Image and video generation data, processing parameters
  • ElevenLabs: Audio narration data, voice synthesis parameters
  • Payment Processors: Transaction confirmations and payment status

3. HOW WE USE YOUR INFORMATION

We use the collected information for the following purposes:

3.1 Service Provision and Improvement

  • Providing, operating, and maintaining our Services
  • Processing your animation and content generation requests
  • Managing your account and preferences
  • Authenticating users and preventing fraud
  • Analyzing usage patterns to improve functionality
  • Developing new features and services
  • Troubleshooting technical issues

3.2 Communication

  • Responding to your inquiries and support requests
  • Sending service-related notifications and updates
  • Providing project status updates
  • Sending promotional materials (with your consent)
  • Conducting surveys and research
  • Sending administrative information about policy changes

3.3 Business Operations

  • Processing payments and managing billing
  • Complying with legal obligations
  • Enforcing our Terms of Service
  • Protecting against fraudulent or illegal activity
  • Conducting internal analytics and reporting
  • Managing business relationships

3.4 Legal Basis for Processing (GDPR)

For users in the European Union, we process personal information based on the following legal grounds: - Contract Performance: Processing necessary to provide our Services - Legitimate Interests: Improving our Services, fraud prevention, and security - Consent: Marketing communications and non-essential cookies - Legal Obligations: Compliance with applicable laws and regulations

4. HOW WE SHARE YOUR INFORMATION

We do not sell your personal information to third parties. We may share your information in the following circumstances:

4.1 Third-Party Service Providers

We share information with trusted third-party vendors who assist in operating our Services:

AI Processing Partners: - Anthropic Inc.: Processes animation prompts and generates content using Claude AI - Higgsfield: Processes image and video generation requests - ElevenLabs: Processes audio narration and voice synthesis requests

Infrastructure and Tools: - Cloud hosting providers (data storage and processing) - Payment processors (Stripe, PayPal, or similar) - Analytics services (usage tracking and performance monitoring) - Customer support platforms - Email service providers

These service providers are contractually obligated to protect your information and use it only for the purposes we specify.

4.2 Legal Requirements

We may disclose your information if required to do so by law or in response to: - Court orders or legal processes - Governmental or regulatory requests - Law enforcement inquiries - Protection of our legal rights and property - Prevention of fraud or illegal activity - Protection of user safety or public safety

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of assets, your information may be transferred to the successor entity. We will notify you via email and/or prominent notice on our website before your information becomes subject to a different privacy policy.

4.4 With Your Consent

We may share your information for purposes not described in this Privacy Policy with your explicit consent.

5. DATA RETENTION

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

Retention Periods: - Account Information: Retained while your account is active, plus 7 years after account closure for legal compliance - Project Data: Retained while your account is active, unless you delete specific projects - Generated Content: Retained based on your storage preferences; you may delete at any time - Usage Logs: Retained for 24 months for security and analytics purposes - Financial Records: Retained for 7 years to comply with tax and accounting regulations - Marketing Communications: Retained until you unsubscribe

When information is no longer necessary, we securely delete or anonymize it.

6. YOUR RIGHTS AND CHOICES

6.1 Rights Under Canadian Privacy Law

Under PIPEDA and Quebec Law 25, you have the right to:

Access: Request access to the personal information we hold about you

Correction: Request correction of inaccurate or incomplete information

Withdrawal of Consent: Withdraw your consent for certain processing activities (where consent is the legal basis)

Deletion: Request deletion of your personal information, subject to legal retention requirements

Portability: Request a copy of your information in a structured, commonly used format

Objection: Object to certain types of processing, including direct marketing

Complaint: File a complaint with the Office of the Privacy Commissioner of Canada or the Commission d’accès à l’information du Québec

6.2 Rights Under GDPR (EU Users)

If you are in the European Union, you have additional rights:

Right to Restrict Processing: Limit how we use your information

Right to Data Portability: Receive your data in a machine-readable format

Right to Object: Object to processing based on legitimate interests

Right Not to Be Subject to Automated Decision-Making: Including profiling

6.3 Exercising Your Rights

To exercise any of these rights, please contact us at: - Email: Daniel@foreignlegends.com - Mail: 5713 Eldridge Ave, Côte Saint-Luc, QC Canada H4W 2E1

We will respond to your request within 30 days (or as required by applicable law). We may request additional information to verify your identity before processing your request.

6.4 Account Management

You can also manage certain information directly through your account settings: - Update profile information - Manage communication preferences - Delete projects and generated content - Export your data - Close your account

7. DATA SECURITY

We implement robust technical, physical, and administrative safeguards to protect your personal information:

7.1 Technical Measures

  • Encryption of data in transit (TLS/SSL)
  • Encryption of data at rest
  • Secure API authentication and authorization
  • Regular security assessments and penetration testing
  • Intrusion detection and prevention systems
  • Secure software development practices

7.2 Access Controls

  • Role-based access controls
  • Multi-factor authentication for administrative access
  • Regular access reviews and audits
  • Employee training on data protection

7.3 Incident Response

  • Security incident monitoring and response plan
  • Breach notification procedures in compliance with applicable laws
  • Regular backup and disaster recovery procedures

Important: While we implement industry-standard security measures, no system is completely secure. We cannot guarantee the absolute security of your information. You are responsible for maintaining the confidentiality of your account credentials.

8. INTERNATIONAL DATA TRANSFERS

Foreign Legends Media Inc. is based in Canada. If you access our Services from outside Canada, your information may be transferred to, stored, and processed in Canada or other countries where our service providers operate.

Data Transfer Safeguards: - We ensure appropriate safeguards are in place for international transfers - We use Standard Contractual Clauses (SCCs) for transfers to countries without adequacy decisions - We comply with cross-border data transfer requirements under PIPEDA and Law 25 - Third-party service providers are contractually bound to protect your information

By using our Services, you consent to the transfer of your information to Canada and other countries as described in this Privacy Policy.

9. COOKIES AND TRACKING TECHNOLOGIES

We use cookies and similar tracking technologies to enhance your experience and collect usage information.

9.1 Types of Cookies We Use

Essential Cookies: Required for basic functionality (authentication, security, session management)

Functional Cookies: Remember your preferences and settings

Analytics Cookies: Help us understand how users interact with our Services

Marketing Cookies: Deliver relevant advertisements (with your consent)

9.2 Managing Cookies

You can control cookies through your browser settings: - Block all cookies - Block third-party cookies - Delete existing cookies - Receive notifications when cookies are set

Please note that disabling essential cookies may affect the functionality of our Services.

9.3 Do Not Track

Some browsers have “Do Not Track” (DNT) features. Our Services do not currently respond to DNT signals, as there is no industry-standard interpretation of DNT.

10. THIRD-PARTY LINKS

Our Services may contain links to third-party websites, services, or applications. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

11. CHILDREN’S PRIVACY

Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we discover that we have inadvertently collected information from a child under 18, we will promptly delete it.

If you believe we have collected information from a child, please contact us immediately at Daniel@foreignlegends.com.

12. CALIFORNIA PRIVACY RIGHTS

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA):

Right to Know: Request disclosure of categories and specific pieces of personal information collected

Right to Delete: Request deletion of personal information

Right to Opt-Out: Opt-out of the sale of personal information (Note: We do not sell personal information)

Right to Non-Discrimination: Not receive discriminatory treatment for exercising CCPA rights

To exercise these rights, contact us at Daniel@foreignlegends.com.

13. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons.

Notice of Changes: - We will post the updated Privacy Policy on this page - We will update the “Last Updated” date at the top - For material changes, we will notify you via email or prominent notice on our Services - Continued use of our Services after changes constitutes acceptance of the updated Privacy Policy

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

14. CONTACT US

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

Foreign Legends Media Inc.
Privacy Officer
5713 Eldridge Ave
Côte Saint-Luc, QC Canada H4W 2E1

Email: Daniel@foreignlegends.com

Response Time: We will respond to privacy inquiries within 30 days.

Regulatory Authorities

You have the right to file a complaint with the appropriate privacy regulatory authority:

Canada (Federal):
Office of the Privacy Commissioner of Canada
Website: www.priv.gc.ca
Phone: 1-800-282-1376

Quebec:
Commission d’accès à l’information du Québec
Website: www.cai.gouv.qc.ca
Phone: 1-888-528-7741

European Union:
Your local Data Protection Authority (for EU residents)

15. CONSENT

By using our Services, you consent to the collection, use, and disclosure of your personal information as described in this Privacy Policy. You may withdraw your consent at any time by contacting us, though this may limit your ability to use certain features of our Services.

For Quebec residents, your express consent is required for: - Sharing sensitive personal information - Using your information for purposes other than those for which it was collected - Transferring your information outside of Quebec

We will obtain your express consent where required by law.

END OF PRIVACY POLICY