Privacy Policy

1. Who we are

This website is run under the Azulevia brand by Riccardo De Leo Unipessoal LDA, a Portuguese company (EU VAT PT518428605) and the data controller for this site — the studio behind Founders & Dragons. For anything in this policy, write to info@foundersanddragons.com — a human reads it.

2. What we collect

What you send us. If you email us or message us on WhatsApp, we receive what you choose to share — your name, contact details and the content of your brief. We use it to reply, quote and deliver, nothing else.

The quest form. If you use the form on the contact page, the name, email and brief you type are posted to our own mail relay on our own server and sent to our mailbox. There is no third-party form service, no tracking pixel in the form and no copy kept in a database — the message becomes an email, and nothing else. The form also carries a hidden field that only automated senders fill in; if it is filled, the message is discarded.

Production materials. When you hire us, you send the material a film needs — brand assets, product shots, scripts, and where real people appear, their reference photos or voice recordings together with the signed consent forms. We process those to make and deliver your film, we keep the consent records as evidence for as long as the film may be published, and we never use them to train any model, ours or anyone else's.

Functional storage. The site's small game (your chosen class, XP and quest progress) and your cookie choice live in your browser's local storage. They never leave your device, identify you to us, or follow you anywhere.

Visit statistics — no cookies, no consent needed. We count visits with a self-hosted Umami instance running on our own European servers. It sets no cookies and stores no personal data — we see aggregate numbers (pages viewed, referrers, countries, browser types), never you. Nothing is shared with, or even reachable by, any third party.

With your consent — analytics & advertising cookies. If you accept cookies, we may set measurement pixels (for example the Meta Pixel or similar tools) to understand how visitors find us and to make our own advertising less wasteful. If you choose "essential only", none of these are set. You can change your mind at any time with the button below.

3. What we never do

We do not sell, rent or trade your personal data. No data brokers, no third-party lists. Tracking, when you allow it, serves exactly one master: making our own show and services easier to find.

4. Legal bases

Replying to your inquiry and delivering work: performance of a contract (or the steps leading to one). Cookieless first-party visit statistics: our legitimate interest in knowing whether the site works (Art. 6(1)(f) GDPR — no personal data is stored). Analytics and advertising cookies: your consent, which you may withdraw at any time. Keeping invoices and required records: legal obligation.

5. Who processes it

The site and your messages. A hosting provider serves the site from a server in Europe that we operate. The quest form's mail relay runs on that same server; the message leaves it through our email provider's mail servers in the EU. Visit statistics run on that server too — a self-hosted Umami instance, with no third party involved and nothing reachable from outside.

Rendering. Your film is rendered on GPU machines we rent and operate exclusively for ourselves — dedicated instances, never a shared AI service — in data centres inside the EU/EEA (currently the EU and Iceland). To be precise rather than flattering: we do not own the racks; the infrastructure provider is a company established outside the EU, so although your material stays on machines in the EEA, that provider is engaged as a processor under EU Standard Contractual Clauses. The video model itself (MiniMax H3) runs on those machines under our own licence — your material is never sent to MiniMax, and no AI provider receives your film.

Auxiliary tools. Some parts of the pipeline use services outside the EU: large-language-model assistants for writing and code (Anthropic, OpenAI) and voice synthesis (ElevenLabs), which receives the script lines a character speaks. Any personal data involved travels under appropriate safeguards such as EU Standard Contractual Clauses. This is why we describe our stack as Europe-first rather than EU-only: the rendering claim is absolute, the rest of the toolchain is not.

Cookies and messaging. If you accept cookies, pixel providers (such as Meta Platforms Ireland) process the measurement data as separate controllers under their own policies, and may transfer data outside the EU under EU Standard Contractual Clauses. If you contact us on WhatsApp, Meta's WhatsApp terms apply to the transport of your message.

6. Retention

Inquiries, quest-form messages and project correspondence: for the life of the project and up to three years after, then deleted. Production materials and the films made from them: for as long as we may need to evidence the rights behind them; consent records for as long as the film may lawfully be published. Invoices: as long as tax law requires. Consent choice: until you clear it or your browser storage. Pixel data: per the provider's own retention (typically weeks to months).

7. Your rights

Under the GDPR you can ask for access, correction, deletion, restriction, portability, and you can object to processing or withdraw consent at any time — write to info@foundersanddragons.com. You can also complain to your data protection authority (in Portugal, the CNPD).

8. Manage your cookies

Change or withdraw your cookie choice here, any time:

Manage cookies

9. Changes

If this policy changes, the date at the top changes with it. Material changes get a visible note on this page.