This policy explains what personal data Harutane (operated by Glimmers Store Limited) collects, why, and your rights over it. It covers both creators who run a business on Harutane and customers who buy from a creator's shop.
Harutane is a platform operated by Glimmers Store Limited ("we", "us"). We are the data controller for creator accounts and platform operations. For a creator's own shop customers, Harutane acts as a processor on the creator's behalf, and as merchant of record for the transaction.
We share data only with the processors needed to run the service: Stripe (payments & creator payouts), Shopify (checkout & catalogue), Gelato and Prodigi (print fulfilment), Resend (transactional email), our hosting provider, and the specialist AI providers described under AI generation below. Each processes data under its own agreement and only to provide its service. We do not sell personal data.
To make the content you ask for, we use specialist AI providers to write and translate text, answer help chat questions, plan soundtracks, and make images, video, voice, music and sound effects. The material each request needs (your prompts and text, the reference images, photos and video you or your customers upload, and the content being worked on) is sent to the providers that make it, including any service that connects us to them, so they can produce that result. If you buy a personalised product, the details you give for it, such as a name, a message or a photo, are sent the same way.
When you score an edit, we send still frames from it so the sound can be planned, and when the score includes sound effects we also send a small, silent, low-resolution copy of the edit so the effects can be timed to the picture. Both can show anyone who appears in the edit. We delete our copies as soon as each request is over, whether or not it worked, and clear any left behind by an interrupted job within two days.
Most of these providers are based outside the UK (see International transfers below). Each works under its own terms and may keep the material it receives, for example for security and abuse monitoring. Some material, such as reference images and character artwork, is also stored in our account with a provider so it can be reused for later requests.
If an upload shows a real person, whoever uploads it needs that person's permission, or a parent's or guardian's for a child, and the creator is responsible for making sure of it. Anyone who appears in an upload or a finished video can contact us about it at hello@harutane.com. See the Creator Agreement for ownership and licensing of generated content.
Creators can connect social accounts (TikTok, Facebook, Instagram) so Harutane can publish their content for them. When you connect one, we store an encrypted access token issued by that platform, plus the identifiers needed to post: the Facebook Page ID and name, the Instagram account ID and username, or the TikTok account name. We use these solely to publish the posts you approve and to read basic performance stats on those posts. We never see your social passwords, and we don't read your messages or contacts. Disconnecting the account in Settings deletes the stored tokens immediately. Full instructions are on our data deletion page.
We keep account and order data for as long as your account is active and for a reasonable period afterwards to meet legal, tax and accounting requirements (typically up to 6 years for financial records). Uploads and the content made from them stay with the creator's account until they are deleted. You can ask us to delete data sooner where we are not legally required to keep it, including an upload that shows you.
Depending on where you live (including under UK/EU GDPR), you have the right to access, correct, delete, restrict, or port your personal data, and to object to certain processing. To exercise any of these, email hello@harutane.com. We'll respond within the time the law allows. You also have the right to complain to your local data-protection authority (in the UK, the ICO).
Some of our processors operate outside your country. Where data is transferred internationally, it is protected by appropriate safeguards (such as standard contractual clauses).
We use essential cookies to keep you signed in and to run the service. We don't use advertising or cross-site tracking cookies.
We'll update this policy as the service evolves and post the new version here with a revised version date.