Privacy Policy
Last updated 23 October 2026
This explains what Five Line Studio stores about you, why, who else handles it, and how to delete it. We don't sell your data, show ads or use analytics trackers.
Five Line Studio, based in Canada, is responsible for your data under Canada's privacy law (PIPEDA). Our privacy officer answers at support@fivelinestudio.com.
What we store
- Your account: your email address, your passkeys if you add any, and when you signed up.
- What you make: your stories, the scripts, drawings and sounds made from them, and your rendered videos. Drafts are deleted 30 days after you start them, videos 30 days after they finish.
- Credits and payments: your balance, a record of each credit spent or added, and the amount and date of each purchase. Card details go straight to Stripe; we never see them.
- Safety records: if a story or video is blocked by our content checks, we keep the blocked text and the reason for a year, to stop abuse. If an account is paused for abuse and then deleted, we keep its email address so it can't sign up again.
- Limits: to stop abuse we count requests per account and per network (your IP address, or part of it) for up to a day or two.
- Server logs: errors and requests, kept for 2 weeks.
- Visit counts: we count visits without cookies. A visitor is counted once a day by a scrambled code made from a key that changes every day, the IP address and the browser; the IP address itself isn't stored, and the code can't be linked from one day to the next. We also note which site or link sent the visit. These are only ever totals.
Who handles it for us
- Amazon Web Services (USA): hosting, sign-in (Amazon Cognito), sign-in emails (Amazon SES), voices (Amazon Polly reads your script aloud), storage and video rendering. Amazon may keep and use the text Polly reads to improve its AI services; we'll opt out of that as soon as our account allows it.
- Anthropic (USA): Claude writes, draws and checks your videos, and checks stories for content that isn't allowed. Anthropic doesn't train its models on this data.
- Stripe (USA): payments and fraud checks.
- Cloudflare (USA): the human check on the sign-in page (Turnstile).
These providers store and process your data in the United States, so it's subject to US law and may be accessed by US courts and authorities under it. We share it with no one else, unless the law requires it or to report illegal content involving children.
Cookies
Only the ones the site needs to work: your sign-in session (kept up to 30 days), a short-lived cookie between sign-in steps, and the security checks' cookies from Cloudflare and AWS. No advertising or tracking cookies.
Your choices
- Delete your account from your account page. That deletes your sign-in, profile, drafts, series and projects at once; videos expire from storage within 30 days. We keep the credit and payment records the law requires, and any safety records until they expire.
- Get a copy or a correction of your data by emailing us. We answer within 30 days.
- If you're unhappy with how we handle your data, tell us first. You can also complain to the Office of the Privacy Commissioner of Canada, or your local data protection authority if you live elsewhere (for example the EU, UK or California, where you may have more rights, including to object).
Children
The service is for adults. We don't knowingly collect data from anyone under 18, and we delete accounts we learn belong to a child.
Changes
If we change this policy in a way that matters, we'll tell you by email or on the site first.