Privacy Policy
Effective Date: July 24, 2025
HaloShift LLC ("Figment," "we") is the data controller for personal information collected through Figment.
What We Collect & Why
Account Data: This includes your name, email, and Google ID. The legal basis under GDPR is Contract (Art 6(1)(b)), and the purpose is to create and manage your account.
Payment Data: This includes your billing name and ZIP code, and it is processed by Stripe. The legal basis is Contract and Legitimate Interest, and the purpose is billing and fraud prevention.
User Content: This includes prompts, uploads, and generated media. The legal basis is Contract, and the purpose is to provide the service.
Usage Data: This includes your IP address, device, browser, pages visited, and cookies. The legal basis is Legitimate Interest, and the purpose is analytics and security.
Communications: This includes support emails and feedback. The legal basis is Consent or Legitimate Interest, and the purpose is customer support and improving the service.
How We Use Data
Operate, maintain, and improve Figment
Process payments and fulfill transactions
Send transactional messages and, with consent, marketing emails (opt‑out anytime)
Personalize and develop new features
Detect, investigate, and mitigate fraud, abuse, or security incidents
Cookies & Analytics
We use first‑party cookies and Google Analytics 4. You can reject non‑essential cookies via the cookie banner or browser settings; essential cookies are required for core functionality.
Sharing & Disclosure
We do not sell personal data. We disclose data only to:
Service Providers (Stripe, Google Cloud, Amazon SES, analytics vendors) under data‑processing agreements;
Law enforcement or regulators when legally required or to protect rights, property, or safety;
A successor entity in connection with a merger, acquisition, or sale (notice will be provided).
International Transfers
Data is stored in the United States. We rely on Standard Contractual Clauses for transfers from the EEA/UK.
Data Retention
We retain personal data as long as (i) you have an active account, and (ii) required to comply with legal obligations or resolve disputes, then delete or anonymize it.
Security
We employ industry‑standard technical and organizational measures (encryption at rest & in transit, least‑privilege access, regular penetration testing). No system is 100% secure.
Your Rights
Depending on where you live, you may have rights to access, rectify, erase, port, or restrict processing of your personal data, and to object to certain processing. To exercise any right, email team@figment.video. We will respond within 30 days.
California Privacy Notice (CCPA)
We do not sell or share personal information as defined by the CCPA. California residents may request disclosure or deletion of their personal information using the methods above.
Children
The Service is intended for adults 18+. We do not knowingly collect data from children. Parents who believe we have inadvertently collected such data should contact us immediately.
Email team@figment.video for any further questions or concerns.
