← Mubuz

Privacy Policy

Last updated: 11 October 2026

Who we are

Mubuz (https://mubuz.com) is run by MUBUZ VISION LTD (company number 16944715). This policy explains what we collect when you use Mubuz and what we do with it.

What we collect

We collect the following information:

• Account information: email address, display name, optional username, and a password stored as a salted scrypt hash.
• Session cookie (HttpOnly) that lasts 30 days.
• Free‑trial abuse prevention: a random device ID stored in a cookie called mz_did and in localStorage; the device ID and your IP address are stored only as keyed HMAC hashes (the raw values are never stored). An IP hash only blocks a new free trial for 30 days.
• Affiliate program: if you arrive through an affiliate link, a cookie called mz_ref keeps that link’s code for up to 60 days; when you sign up, your account records which affiliate referred you. The affiliate sees only a masked email (for example j***@g***) and the commission amounts, never your name or your content. Affiliates’ payout email is kept to send their payouts.
• Analytics: a random visitor‑ID cookie to count page views; we do not store your IP address; we may receive your country from the Cloudflare CF‑IPCountry header and device type from your user‑agent.
• User content: series ideas, scripts, characters, uploaded character pictures (up to 5 MB), generated images, voice, music, and videos that you create or upload.
• AI processing data: prompts and uploaded pictures are sent to third‑party AI providers (see below).
• Payment data: Creem customer ID and plan information; we never see or store card numbers.
• Free AI tools: the email you type, which tool you used, how often, and whether you ticked “email me tips”. We send marketing emails only if you ticked that box. Your topic text goes to our AI provider to make the result and is not stored.
• Support chat: the questions you type and the AI answers, without your IP address; linked to your account if you ask while logged in.
• Social‑account tokens: when you connect YouTube (Google) or Facebook (Meta) we store OAuth tokens encrypted with AES‑256‑GCM.

Why we collect it

We use the data to provide the service, maintain your account, prevent fraud, analyse usage, process payments, and allow you to publish videos to connected platforms. Unless you switch it off, we also use the scripts you approve to improve our own script‑writing AI (see “Improving our AI”).

AI providers

To generate videos and other content we send your prompts and pictures to the following third‑party AI services:

• Google (Gemini, Veo)
• OpenAI
• MiniMax (text and Hailuo video)
• Kling
• ElevenLabs (voice and music)
• Cloudflare Workers AI (images)

The choice of provider is made by our admin settings.

Improving our AI

From 9 October 2026, unless you switch it off, we keep the series scripts our AI writes for you to train and test our own script‑writing AI, so Mubuz depends less on outside AI providers. For each script we keep what you asked for (idea, niche, tone, language and any change request), the AI’s draft, and the version you approved with your edits. We do not keep your pictures, voice, music or videos for this, and we do not share this data or sell it.

Your style: the writing notes, caption sign‑off and hashtags you save in Account (“My style”), and, unless you untick it there, your last two approved scripts, are given to the AI when it writes your new scripts. They are used only for your scripts and are never shown to other users. When training is on, the kept scripts include the style the AI was given, so our AI learns to follow each user’s own style.

You can switch it off at any time in Account (“Help improve Mubuz AI”). Switching it off deletes what we kept and stops new collection. It is also deleted when you delete the series or your account. Accounts created before 9 October 2026 are not included unless you switch it on.

Payments

Card payments are made through Creem, our Merchant of Record. Creem receives your name, email, card and billing address to take the payment, work out sales tax and send receipts, under its own privacy policy. We never see your card numbers; we only store the Creem customer ID and your subscription plan.

Content check: before our AI uses your text to make pictures or videos (your idea, change requests, edits and style notes), that text and your Mubuz user number are sent to Creem’s moderation service, which tells us whether it breaks our Acceptable Use Policy. We do not send your name or email for this.

Social accounts

You may link your YouTube or Facebook accounts. We store the OAuth tokens encrypted (AES‑256‑GCM) and use them only to upload videos you schedule and to read your account name. You can disconnect an account at any time, which deletes the token. Google user data use complies with the Google API Services User Data Policy, including the Limited Use requirements.

Cookies

We use cookies for authentication (session cookie), for fraud detection (device ID cookie mz_did), for analytics (visitor‑ID cookie), and for affiliate referrals (mz_ref, only after you open an affiliate link). We do not use advertising or tracking cookies.

Retention

We keep your account data until you ask us to delete it. Payment records are retained as required by law. Device and IP hashes for abuse prevention are kept with the account they belong to. Analytics data has no IP address and is used only for aggregate page-view counts. When you delete a series, its uploaded picture is deleted too.

Your rights

Under the GDPR and CCPA you may request to access, delete, or export your personal data. To exercise these rights, email ceo@mubuz.com. We will respond within 30 days. We will delete your data within 30 days, except as required by law to retain payment records. We do not sell your personal data.

Children

We do not knowingly collect personal information from children under 13 (or under 16 in the European Economic Area). If we learn that we have collected data from a child without verified parental consent, we will delete it.

Changes

We may update this policy. Changes are posted on this page with a new “Last updated” date; for important changes we will also tell you by email or in the app.

Contact

If you have any questions or want to request deletion of your data, contact us at ceo@mubuz.com.