Privacy Policy

1. Introduction

Amplify Media Consulting LLC, doing business as NoodleTomato (“NoodleTomato,” “we,” “us,” or “our”), operates the noodletomato.com website and related services (collectively, the “Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you access or use the Service.

By creating an account or otherwise using the Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, do not use the Service. This Privacy Policy is incorporated into and subject to our Terms of Service.

2. Information We Collect

2.1 Information You Provide Directly

• Account Information. When you register, we collect your name, email address, and profile image through our authentication provider, Clerk. You must be at least 18 years old to create an account.
• Payment Information. Subscription and minute purchase payments are processed by Stripe. We never receive, transmit, or store your full credit card number, CVV, or bank account details. We retain your Stripe customer identifier, subscription status, plan details, and billing period timestamps.
• Content & Preferences. Topics you submit for video generation, YouTube/TikTok channel names, content niche, language settings, preferred voice, and style configuration.
• Communications. If you email us, submit a support request, or otherwise contact us, we retain the content and metadata of those communications.

2.2 Information Collected Automatically

• Usage Analytics. We use PostHog to collect page views, feature-usage events, and session data for logged-in users in production. We do not enable automatic click tracking, form-input capture, or session replay.
• Device & Network Data. Standard HTTP headers (browser type, operating system, referring URL, IP address) may be collected by our hosting and CDN infrastructure (Vercel, Cloudflare).
• Cookies & Similar Technologies. We use strictly necessary session cookies for authentication (Clerk) and first-party analytics cookies (PostHog). We do not use third-party advertising or cross-site tracking cookies.

2.3 Information Received from Third Parties

We receive user-lifecycle events from Clerk and payment-lifecycle events from Stripe via cryptographically signed webhooks. These events keep your account and subscription data synchronized.

3. How We Use Your Information

We process your information for the following purposes:

• Service Delivery. To generate videos from your submitted topics, deliver real-time progress updates (via Pusher), store and serve your generated media files (via Cloudflare R2), and otherwise operate and maintain the Service.
• Billing & Minutes. To process payments, manage subscriptions, administer your minute balance, and issue receipts.
• Transactional Communications. To send emails about completed or failed video generations and critical account notices (via Resend). You may opt out of non-essential notifications in your account settings.
• Product Improvement. To analyze aggregated and anonymized usage patterns in order to improve features, performance, and reliability. We reserve the right to use anonymized, aggregated data derived from your use of the Service to improve and develop the Service, including AI model performance and output quality.
• Safety & Compliance. To enforce our Terms of Service and Acceptable Use Policy, detect fraud and abuse, and comply with applicable law.

4. How We Share Your Information

We do not sell your personal information. We disclose information only in the limited circumstances described below.

4.1 Service Providers

We engage third-party service providers that process data on our behalf under contractual obligations of confidentiality. Each provider receives only the minimum data necessary to perform its function:

4.2 Legal Obligations

We may disclose your information when we believe in good faith that disclosure is necessary to (a) comply with applicable law, regulation, or legal process; (b) enforce our Terms of Service; (c) protect the rights, property, or safety of NoodleTomato, our users, or the public; or (d) detect, prevent, or address fraud, security, or technical issues.

4.3 Business Transfers

If Amplify Media Consulting LLC undergoes a merger, acquisition, asset sale, or bankruptcy, your personal information may be transferred as part of that transaction. We will provide notice via email or a prominent notice on the Service before your information becomes subject to a materially different privacy policy.

5. Data Retention

• Account Data. Retained for the lifetime of your account. Upon account deletion, we anonymize your personal data by replacing your email with a non-identifiable placeholder and removing your profile image. Anonymized records may be retained indefinitely for legal, audit, and operational purposes.
• Generated Content. Videos and associated media files are stored in Cloudflare R2 and are deleted when your account is terminated. Project metadata may persist in anonymized form.
• Activity & Audit Logs. Internal logs of account events (e.g., signup, subscription changes, minute usage) are retained for audit, troubleshooting, and abuse-prevention purposes and are associated only with anonymized identifiers after account deletion.
• Payment Records. Stripe retains payment and transaction records in accordance with its privacy policy and applicable financial regulations. We do not control Stripe’s retention practices.

6. Data Security

We implement commercially reasonable technical and organizational safeguards designed to protect your information, including:

• TLS/HTTPS encryption for all data in transit between your browser and our servers.
• Cryptographic webhook signature verification (Svix) for all inbound third-party events.
• Authentication and role-based access controls (Clerk) for all protected API endpoints.
• Private, authenticated WebSocket channels (Pusher) scoped to individual users and projects.
• Idempotency controls on all billing operations to prevent duplicate charges.

No system is 100% secure. While we take reasonable precautions, we cannot guarantee the absolute security of your information.

7. Your Rights & Choices

All Users

• Access & Correction. You may view and update your account information in your account settings at any time.
• Deletion. You may request deletion of your account by contacting us at support@noodletomato.com. Upon deletion, we anonymize your personal data and remove your stored media files.
• Email Preferences. You may opt out of non-essential email notifications in your account preferences. You cannot opt out of critical account or transactional notices.

EEA/UK Residents (GDPR)

If you reside in the European Economic Area or United Kingdom, you may have additional rights under the General Data Protection Regulation, including the rights to access, rectification, erasure, restriction of processing, data portability, and objection. Our legal bases for processing are: performance of our contract with you (Service delivery, billing), legitimate interests (product improvement, security), and compliance with legal obligations. To exercise any GDPR right, contact support@noodletomato.com. You also have the right to lodge a complaint with your local data protection authority.

California Residents (CCPA/CPRA)

Under the California Consumer Privacy Act, you have the right to know what personal information we collect, to request deletion, to correct inaccurate information, and to opt out of the “sale” or “sharing” of personal information. We do not sell or share personal information for cross-context behavioral advertising. To exercise your CCPA rights, contact support@noodletomato.com. We will not discriminate against you for exercising your rights.

8. Children’s Privacy

The Service is intended solely for users who are at least 18 years of age. We do not knowingly collect personal information from anyone under 18. If we become aware that we have collected information from a minor, we will delete it promptly. If you believe a minor has provided us with personal information, please contact us immediately.

9. International Data Transfers

Your information may be transferred to, stored, and processed in the United States and other countries where our service providers operate. These countries may have data-protection laws that differ from those in your country of residence. Where required by law, we implement appropriate transfer mechanisms (such as Standard Contractual Clauses) to ensure your data is protected.

10. Third-Party Links & Services

The Service may contain links to third-party websites or services that are not operated by us. We have no control over, and assume no responsibility for, the privacy practices of third parties. We encourage you to review the privacy policy of every third-party site you visit.

11. Changes to This Privacy Policy

We may revise this Privacy Policy from time to time. If we make material changes, we will notify you by posting a prominent notice on the Service or by sending an email to the address associated with your account at least 30 days before the changes take effect. Your continued use of the Service after the revised Privacy Policy becomes effective constitutes your acceptance of the changes.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise any of your data-protection rights, contact us at:

Amplify Media Consulting LLC
d/b/a NoodleTomato
936 SW 1st Ave #95
Miami, FL 33130
Phone: (786) 922-6349
Email: support@noodletomato.com