Privacy Policy

Last updated: September 28, 2026

This Privacy Policy explains what personal data FacelessCast collects, why we collect it and how you can exercise your rights. We collect only what is needed to run the Service.

Who we are

FacelessCast is operated by Fatih Mehmet Güldü, who is the data controller for the personal data described in this policy under the GDPR and the Turkish Personal Data Protection Law (KVKK). For any privacy request, including access, correction or deletion, email info@nowmedya.com.tr.

1. Data we collect

Account data: your full name, email address, phone number, how you heard about us, a hashed password, your interface language, plan and billing status. The phone number is used only for account security and support and is never shared for marketing.

Content data: the topics, settings and options you submit, and the scripts, audio and videos generated from them.

Technical data: server logs containing IP addresses, request identifiers, timestamps and error details, kept for security and debugging. While you are signed in, we also record when you last used the app and which app page was open (the page only, never what you type), so we can support you and run the Service.

2. How we use data

To provide the Service, generate your videos, process payments, send transactional emails such as verification and password reset, prevent abuse and fraud, and improve reliability.

We do not sell personal data and we do not use your content to train AI models.

Product news and offers by email (commercial electronic messages) are sent only with the consent you give when you create your account. You can withdraw it at any time, free of charge, with the unsubscribe link at the bottom of every such email or under Account → Your defaults; the emails your account needs (verification, password reset, video notifications and receipts) keep coming.

3. Cookies and local storage

We do not use tracking cookies or advertising cookies. The web application stores only functional data in your browser's local storage: your session token and your language preference. We measure usage with a cookie-free, self-hosted analytics counter and a cookie-free visibility measurement script from our AI-search analytics provider; both record page views, time on page, scroll depth, clicked links and the referring site under a random session identifier, without cookies, IP addresses or form contents. The notice shown on your first visit only explains this; nothing non-essential is stored.

4. Third-party processors

Generation relies on AI and stock media providers that process the text you submit and return audio, images or footage. Payments are processed by a payment provider that stores your card details; we never see full card numbers. Transactional emails are delivered by an email provider.

Each processor receives only the data necessary for its task and is bound by its own privacy terms and data-processing agreements.

5. Data retention

Generated videos and their metadata are kept while your account exists so you can download them again. Server logs are kept for up to 30 days. Payment records are kept as long as required by tax and accounting law.

When you delete your account, your videos, scripts and profile are deleted and your subscription is cancelled. Backups are rotated within 30 days.

One record outlives the account: a one-way keyed hash of your email address (not the address itself), kept so that a promotion given once per address (such as a launch offer) is never given twice. It is computed with a secret key held only on our servers, cannot be turned back into your address, is not linked to any other data about you, and is used only for that check. Our legitimate interest is preventing abuse of such offers.

6. Your rights

You can access and download your data from the account and studio pages, correct your email and language settings, delete individual videos, and delete your whole account at any time.

Depending on where you live you may also have rights to data portability, restriction or objection. Contact us and we will respond within 30 days.

7. Security

Passwords are stored using a strong one-way hash. Data is transmitted over encrypted connections. Access to production systems is limited to personnel who need it to operate the Service.

8. Faces and voices

We do not build, buy or store biometric profiles. The characters and voices in your videos are generated, not copied from identifiable people, and we do not use your content to train AI models. Do not upload photographs or recordings of a person in order to recreate them; if you believe your likeness has been used, contact us and we will remove the content and suspend the account behind it.

9. Children

The Service is not directed at children under 18 and we do not knowingly collect their data. If you believe a minor has created an account, contact us and we will remove it.

10. Changes to this policy

We may update this policy from time to time. The date at the top shows the latest revision.

FacelessCast is operated by Fatih Mehmet Güldü (the data controller for the purposes of the GDPR and KVKK). Contact: info@nowmedya.com.tr.

Questions about these documents or your data? Email us at info@nowmedya.com.tr.