Privacy Policy This Privacy Policy explains how MO² collects, uses, shares, stores, and protects information when you use our AI-powered video creation, short-form drama creation, image generation, audio generation, editing, and related creative services. Last updated: September 1, 2026 Effective: September 1, 2026 Welcome to MO². We value your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, share, store, and protect information when you visit our website, create an account, purchase a plan, upload content, generate or edit content, contact us, or otherwise use the MO² platform and related products and services (collectively, the “Service”). “MO²,” “we,” “us,” and “our” refer to MOÇ MEDIA PTE. LTD., the company that operates the Service. Where MO² processes personal data solely on behalf of a business or enterprise customer, that customer may act as the data controller and MO² may act as its processor or service provider, as applicable under relevant data protection laws. 1. Data Collection We may collect the following personal data and related information when you access or use the Service: - Name and Account Information: your name, username, profile information, organization, role, account preferences, authentication information, and other information used to create, personalize, verify, and secure your account. - Email Address and Communications: your personal or work email address, support requests, feedback, product inquiries, and other communications with us, which are used for authentication, service-related messages, transactional notices, and customer support. - IP Address and Technical Information: your IP address, browser type, operating system, device type, device identifiers, language settings, approximate location derived from your IP address, login records, application logs, error logs, network information, and security events. - Payment and Billing Information: selected plan or Credit Pack, transaction identifiers and status, amount, currency, purchase history, refund or dispute status, and Credits or usage balance. Complete bank, card, and wallet credentials are collected and processed by the hosted payment provider rather than stored by MO². - User Content: prompts, scripts, story ideas, dialogue, character descriptions, scene descriptions, storyboards, shot lists, reference materials, text, documents, images, photographs, illustrations, videos, audio recordings, music, sound effects, voice recordings, uploaded files, URLs, and other materials that you submit, upload, import, provide, or create through the Service. - Generated Content: videos, images, animations, audio, voice outputs, scripts, scenes, characters, visual effects, edits, variations, intermediate generations, project files, metadata, and other content generated, edited, transformed, or processed through the Service. - Visual and Audio Characteristics: where you voluntarily upload images, videos, or audio containing individuals, the Service may process visible or audible characteristics contained in that content, including facial appearance, expressions, body movement, voice characteristics, lip movement, and other attributes necessary to provide requested generation, animation, editing, lip-sync, dubbing, avatar, character consistency, or similar creative features. - Unless expressly stated in connection with a particular feature, MO² does not process such information for the purpose of uniquely identifying an individual. - Project and Workspace Information: project names, folders, creative workflows, generation history, editing history, asset libraries, saved characters, templates, presets, collaborators, workspace settings, and other information associated with your use of the Service. - Generation and Model Interaction Information: prompts, model selections, generation parameters, reference inputs, aspect ratios, duration settings, style selections, creative instructions, editing instructions, output preferences, and other settings used to operate AI generation and editing features. - Integration Information: identifiers, authorization information, connected-service details, storage destinations, publishing destinations, workspace settings, and content exchanged with third-party services that you choose to connect to MO². - Business Inquiry Information: company name, work email address, job title, team size, budget or purchasing information, intended use case, procurement details, and other information submitted in connection with sales, partnership, enterprise, or other business inquiries. - Usage Information: pages visited, features used, buttons clicked, projects created, generations requested, edits performed, exports or downloads initiated, session dates and times, referring pages, models used, credits consumed, and general interaction with the Service. - Information from Other Sources: information provided by your employer or workspace administrator, connected services, referral partners, fraud-prevention providers, payment providers, and other third-party or publicly available sources where permitted by applicable law. We collect this information through information you provide directly to us when you register, use the Service, upload or generate content, create projects, connect a third-party service, make a purchase, participate in a survey, or contact us. We also collect information through necessary authentication cookies, browser local storage used for preferences or temporary creative state, and server, security, and job logs needed to operate and protect the Service. MO² V1 does not currently use third-party advertising pixels or advertising cookies. 2. Purpose of Data Collection We may use the information collected for the following purposes: - Account Creation and Management: to create and manage your account and workspace, authenticate users, administer prepaid plans, purchases, and Credits, process billing, provide customer support, and maintain secure access to the Service. - Service Delivery: to process prompts and User Content, operate AI video, image, audio, script, and short-form drama generation features, create and edit content, maintain project history, render outputs, provide creative tools, and perform actions requested by you. - AI Processing: to transmit the minimum information reasonably necessary to contracted AI model, media-processing, infrastructure, storage, moderation, and other technology providers so that requested generation, editing, rendering, analysis, transformation, or related AI features can operate. - Depending on the feature you use, this information may include prompts, scripts, images, videos, audio, reference materials, generation parameters, technical metadata, or other content necessary to provide the requested output. - Content Processing and Rendering: to encode, transcode, render, generate, modify, combine, enhance, animate, synchronize, store, retrieve, display, export, or otherwise process content in accordance with your instructions. - Service Improvement: to use operational metadata to identify issues, troubleshoot errors, improve usability and system performance, evaluate reliability and cost, and create aggregated or de-identified analytics. - Safety, Moderation, and Abuse Prevention: to detect, investigate, prevent, and respond to fraud, malicious activity, prohibited content, unauthorized access, intellectual-property abuse, impersonation risks, platform misuse, security threats, and violations of our Terms of Service or applicable policies. - Security: to protect accounts, users, infrastructure, systems, and services; maintain security logs; investigate suspicious activity; and prevent unauthorized access, attacks, or misuse. - Service Communications: to send registration verification, password reset, Team invitation, security, billing, account deletion, and other transactional notices needed to operate your Account or respond to your request. MO² V1 does not use the transactional email channel for advertising campaigns. - Business Operations: to respond to sales and partnership inquiries, manage contracts, maintain records, conduct audits, obtain professional advice, analyze business performance, and support financing, restructuring, acquisition, or other corporate transactions. - Legal Compliance: to comply with applicable laws, regulations, legal processes, enforceable governmental requests, intellectual-property obligations, and other lawful requirements. Where applicable law requires a legal basis for processing personal data, we process personal data where necessary to: 1. perform our contract with you; 2. comply with legal obligations; 3. pursue legitimate interests in operating, improving, and protecting the Service; 4. protect MO², our users, or third parties; or 5. obtain and rely on your consent. Where consent is the applicable legal basis, you may withdraw your consent at any time without affecting the lawfulness of processing performed before the withdrawal. Use of User Content for Model Training and Product Improvement MO² does not use private Workspace Content to train a generalized MO² model unless we first obtain a separate, explicit permission or written agreement that identifies that use. MO² does not currently provide an Account setting that opts private Workspace Content into generalized model training. To perform a generation you request, MO² transmits the required prompt, reference Content, generation settings, and technical metadata to the selected third-party model provider. That provider’s processing, retention, and model-improvement rules are governed by its terms and MO²’s configured account arrangement. Available models may be removed when their retention or erasure terms do not meet MO²’s release requirements. We may use aggregated, anonymized, or de-identified information that does not reasonably identify you for analytics, security, research, product development, and Service improvement, subject to applicable law. 3. Data Sharing We may share or disclose personal data with the following categories of recipients where reasonably necessary to provide, operate, protect, or improve the Service: - Data Processors and Service Providers: third-party providers that process information on our behalf, including cloud hosting, database, object storage, content delivery, media processing, rendering, authentication, security, communications, accounting, administrative, and email service providers. Current V1 integrations may include Alibaba Cloud infrastructure and OSS, BytePlus media services, and Resend transactional email. - AI Model and Generative Technology Providers: providers of artificial intelligence models, image generation models, video generation models, audio or voice technologies, language models, media-processing technologies, rendering infrastructure, moderation systems, and related services that receive information necessary to perform features requested by you. The models enabled in V1 may be supplied by Google, OpenAI, BytePlus, or another provider identified in the Service. - Depending on the feature, these providers may process prompts, images, videos, audio, text, scripts, reference materials, generation settings, or limited technical metadata. - Payment Processors: the provider identified at checkout processes one-time Personal Plan, Team Plan, or Credit Pack transactions. MO² V1 is designed to use a FOMO Pay hosted checkout and receives transaction identifiers, status, amount, and currency needed for activation, reconciliation, dispute handling, and refunds. MO² does not store your complete bank, card, or wallet credentials. - Connected Services: third-party services that you choose to connect to MO², including storage, publishing, collaboration, social media, or other platforms, where you instruct us to import, export, synchronize, share, or publish information. - Your Organization: if your account is associated with a business, enterprise, team, or other organization, the workspace owner or authorized administrators may be able to manage your account and access workspace content, settings, billing information, integrations, usage information, or activity depending on the applicable workspace configuration. - Professional Advisors: lawyers, accountants, auditors, insurers, consultants, financial advisers, and similar professional advisers where reasonably necessary to comply with legal obligations or operate our business. - Public Authorities: courts, regulators, law enforcement agencies, government authorities, tax authorities, or other public bodies where disclosure is required by applicable law or legal process, or reasonably necessary to protect rights, safety, security, users, third parties, or the integrity of the Service. - Corporate Transaction Participants: actual or prospective buyers, investors, lenders, advisers, financing parties, or other participants in connection with a merger, financing, acquisition, restructuring, bankruptcy, sale of assets, or other corporate transaction involving all or part of our business. - Other Parties at Your Direction: any other recipient where you request or authorize the disclosure, instruct the Service to export or publish content, intentionally make content publicly available, or otherwise provide consent. We require service providers processing information on our behalf to maintain appropriate confidentiality and security protections and to use such information only for authorized purposes, subject to applicable law and contractual requirements. MO² does not intentionally make your private User Content public unless you use a feature designed to publish or publicly share content, or otherwise instruct or authorize us to do so. MO² V1 does not sell personal data or use personal data for cross-context behavioral advertising. If that practice changes, we will update this Policy and provide any notice or choice required by applicable law before the change applies. 4. User Rights Depending on your location and subject to applicable law, you may have certain rights regarding your personal data, including: - Access: request access to personal data that we hold about you and information concerning how it is processed. - Correction: request correction of inaccurate or incomplete personal data. - Deletion: request deletion of personal data where it is no longer necessary, consent has been withdrawn, processing has been successfully objected to, or deletion is otherwise required by applicable law. - Portability: request a copy of certain personal data in a structured, commonly used, and machine-readable format where required by law. - Restriction: request that we restrict certain processing of your personal data where applicable. - Objection: object to certain processing, including direct marketing and, where applicable, processing based on legitimate interests. - Consent Withdrawal: withdraw consent at any time where processing is based on your consent. - Privacy Choices: opt out of certain marketing communications, targeted advertising, sale, sharing, or similar processing where such rights are available under applicable law. - Appeal and Complaint: appeal a denied privacy request where applicable law grants such a right, or submit a complaint to an appropriate data protection authority. To exercise an applicable privacy right, please contact us at: system@momostudio.top We may need to verify your identity, account, location, or authority before completing a request. We will respond to valid requests in accordance with applicable data protection laws and will not discriminate against you for exercising an applicable privacy right. If MO² processes your personal data solely on behalf of a business or enterprise customer, please submit your privacy request to that customer where appropriate. We will assist the customer as required by our agreement and applicable law. Deleting personal data may not immediately remove information from backups, security records, fraud-prevention records, or other systems where retention is reasonably necessary or legally required. 5. Cookies and Tracking 5.1 Purposes of Cookies We generally use cookies and similar technologies to: 1. keep registered users signed in and maintain sessions; 2. store preferences and Service settings; 3. secure accounts, prevent fraud, and remember previous actions; 4. preserve project and session states; 5. measure Service usage and performance; 6. understand how visitors and users interact with the Service; 7. identify and troubleshoot technical issues; and 8. keep an auditable record of consent and security-relevant actions. 5.2 Necessary Cookies Some cookies and similar technologies are necessary for the operation of the Service. Without these technologies, we may not be able to provide functionality necessary to create or access an account, authenticate a session, maintain security settings, process requested actions, preserve project states, or maintain the integrity of the Service. 5.3 Current V1 Cookie Scope MO² V1 uses necessary session cookies and limited preference or workflow storage. It does not currently deploy third-party advertising cookies or a third-party behavioral analytics SDK. If non-essential tracking is added later, MO² will update this Policy and obtain any consent required by applicable law before enabling it. Cookies may be: - Session Cookies: cookies that are generally deleted after your browser session ends; or - Persistent Cookies: cookies that remain until they expire or are deleted by you or the party that placed them. 5.4 Cookie Controls You can generally activate, block, restrict, or delete cookies through your browser or device settings. MO² does not currently provide a separate non-essential cookie preference panel because V1 does not enable non-essential advertising or behavioral analytics cookies. 5.5 Combining Cookie Information We may combine information collected through cookies and similar technologies with account, device, subscription, project, usage, or other information collected under this Privacy Policy and use the combined information for the purposes described in this Privacy Policy. 5.6 Effects of Disabling Cookies You may configure your browser or device to block cookies associated with the Service. However, certain features may not operate correctly, preferences may not be saved, project states may be affected, and you may be required to sign in again if necessary cookies are disabled. Where required by applicable law and technically supported, MO² may also honor applicable browser-based privacy preference signals. 6. Data Security We take information security seriously and use administrative, technical, and organizational measures designed to protect personal data and User Content against unauthorized access, alteration, disclosure, loss, misuse, or destruction. These measures include public HTTPS transport, password hashing, access controls, authentication safeguards, encrypted storage of model Provider credentials, audit and operational logging, isolated deployment secrets, backups, recovery procedures, and incident-response processes. The exact measure depends on the system and data involved. We permit employees, contractors, and service providers to access or process personal data only where reasonably necessary to perform their responsibilities, in accordance with our instructions, and subject to appropriate confidentiality and security obligations. If we experience a personal data breach, we will investigate, contain, document, and remediate the incident. Where we assess that a data breach is a notifiable data breach under the Singapore Personal Data Protection Act, we will notify the Personal Data Protection Commission as soon as practicable, and in any case no later than three calendar days after we make that assessment, and we will notify affected individuals as soon as practicable where the law requires individuals to be notified. Where another applicable law requires notification to a regulator, customer, or affected individual, we will provide that notification within the period required by that law. However, no online service, transmission method, AI system, or data storage system can be guaranteed to be completely secure, and MO² cannot guarantee absolute security. You are responsible for protecting your account credentials, using strong and unique passwords, reviewing workspace and sharing permissions, carefully selecting content that you upload to the Service, and notifying us promptly if you suspect unauthorized access to your account. In particular, you should not upload images, videos, voice recordings, personal data, or other materials relating to another individual unless you have all rights, permissions, consents, or other lawful bases necessary to use that content through the Service. 7. Data Retention and Deletion We retain personal data and User Content only for as long as reasonably necessary for the purposes described in this Privacy Policy, including providing the Service, maintaining security and required records, complying with legal obligations, resolving disputes, and enforcing our agreements. When an Account, Team, Project, or other resource is successfully deleted through the Service, the deletion follows this operational schedule: - End of Access: access to the deleted resource through the Service ends when the deletion succeeds. - Signed Downloads and CDN Copies: previously issued signed download links and content-delivery copies are targeted to stop working within one hour. - MO² Live Content: the deleted creative content held in MO²’s live systems is removed within seven days. - Provider Erasure: where a third-party model or media provider supports deletion, MO² initiates the erasure request within twenty-four hours and retains evidence of that request. MO² does not control, and does not promise, when a provider completes deletion within its own systems. - Backups: the deleted content is removed from MO² backups within thirty-five days. We may retain minimum billing, payment, refund, Credit, tax, accounting, security, fraud-prevention, and audit records, without retaining the deleted creative content itself, where retention is reasonably necessary for a legitimate business purpose or required by a legal obligation. An authorized legal hold may pause physical deletion where required by law or legal process; a legal hold does not restore access to a deleted resource. 8. International Data Transfers MO² is operated from Singapore. Personal data may be stored or processed outside Singapore where we, our service providers, our infrastructure providers, or the AI model providers involved in a feature you request operate their systems. Where personal data is transferred outside Singapore, we take steps designed to ensure that the recipient provides a standard of protection comparable to the protection required under applicable Singapore data protection law, including through contractual obligations or other transfer mechanisms recognized by applicable law. 9. Children’s Privacy The Service is intended for users who are at least 18 years old, consistent with our Terms of Service, and is not directed to children. We do not knowingly collect personal data from any individual under 18. If we become aware that personal data has been collected from an individual under 18, we will take reasonable steps to delete or restrict that data and may suspend or close the associated account. If you believe that a person under 18 has provided personal data to the Service, please contact us using the details in the Contact Information section. 10. Legal Compliance 10.1 Governing Law This Privacy Policy is governed by the laws of Singapore. Mandatory privacy, data protection, and consumer protections continue to apply where they cannot lawfully be waived. 10.2 Dispute Resolution 10.2.1 In the event of any dispute, controversy, or claim arising out of or relating to this Privacy Policy or the Service, you and MO² agree to first attempt to resolve the dispute through good-faith consultation. 10.2.2 If the dispute cannot be resolved through consultation, it will be submitted to the exclusive jurisdiction of the courts of Singapore, subject to any mandatory right you may have under applicable law to bring proceedings in another forum. 10.2.3 Nothing in this section limits any rights or remedies that cannot be waived or restricted under applicable consumer protection, personal information protection, or other applicable laws. 11. Policy Changes We may update this Privacy Policy to reflect changes to the Service, our data practices, our service providers, or applicable law. When we update this Policy, we will post the updated version in the Service with a revised “Last updated” date and, where used, a revised version identifier. If a change materially affects how we process personal data or materially reduces your rights under this Policy, we will provide notice before the change takes effect where required by applicable law, such as by email or a prominent notice in the Service. Where applicable law requires your consent for a new purpose of processing, we will obtain that consent before processing your personal data for that new purpose. 12. Contact Information If you have questions or concerns regarding this Privacy Policy, our privacy practices, or your personal data, or if you wish to exercise an applicable privacy right or contact our Data Protection Officer, please use the following public business contact: - Company: MOÇ MEDIA PTE. LTD. - Data Protection Officer business email: system@momostudio.top Please include your account email address, the nature of your request, and sufficient information for us to understand and respond to your inquiry. Please do not send passwords, complete payment card information, government-issued identification numbers, health information, biometric identifiers, or other highly sensitive information by email.
Legal
Privacy Policy
Version privacy-2026-09-01-v1