Privacy notice

[to be filled in] ([to be filled in]), [to be filled in], [to be filled in], [to be filled in]

Email: [to be filled in]

Account: email address, name if given, language, sign-in times. Basis: contract (Art. 6(1)(b) GDPR).

Company profile and projects: what you write about your business, scripts, prompts, generated images, clips, videos, subtitles, campaign copy and comments.

Billing: invoice address, VAT id, payment data at Stripe, credit movements. Basis: contract and legal retention (Art. 6(1)(c)).

Technical: server logs, error reports, usage counters without content. Basis: legitimate interest in a working service (Art. 6(1)(f)).

When you upload photos with recognisable people, you confirm at upload time that you have their consent. That responsibility is yours; we store the confirmation next to the image.

During setup we ask for your company profile (industry, offer, target customer, tone, languages, website) and, optionally, what you want to create, which channels your company uses, how many of you there are, your role and how you heard about us. We use the profile, what you want to create and the channels to tailor your creations and your dashboard (Art. 6(1)(b) GDPR). Your role, team size and how you found us are only analysed in aggregate for our own marketing, based on your voluntary answer (Art. 6(1)(a) GDPR); we do not pass them on. You can change or delete all of it under Settings → Company at any time; it is deleted with your account.

When you write to us through "Book a conversation", we store your name, email, company, phone number (if given) and your request, and send them to our team by email to answer you. Basis: pre-contractual steps at your request (Art. 6(1)(b) GDPR). We delete the request with your account, and after 12 months at the latest.

Your prompts and reference images go to the model provider running that job. Before every generation you see which model it is and what it costs.

Railway Corporation — Servers, database and media storage (the media storage runs on Tigris Data, Inc.) — USA; servers in the EU region Amsterdam (Netherlands) — All content and accounts

Stripe Payments Europe, Ltd. — Payments, invoices, tax calculation — Ireland (EU), group in the USA — Name, address, VAT id, payment data

Resend — Sign-in links and system messages — EU region — Email address

Anthropic Ireland, Limited (Claude) — Text models for the advisor, the agent, the director and the content check — Ireland (EU), processing in the USA — Company profile, scripts, prompts and pictures the model is to look at (such as stills for the director)

Google Cloud (Vertex AI, EU-Region) — Standard voice and a video model — EU (europe-west4) — The text to be spoken; for the video model, prompts and reference images

fal.ai (Features & Labels, Inc.) — Image, video and 3D models, lip sync, music, upscaling — USA — Prompts and reference images; for lip sync, the clip and the voice

Higgsfield Inc. — Image and video models — USA — Prompts and reference images

ElevenLabs Inc. — Text to speech — USA — The text to be spoken

OpenAI Ireland Ltd. — Image model — Ireland (EU), group in the USA — Prompts and reference images

Sentry (EU) — Error reports — EU — Technical error data, no content

For providers in the USA the EU-US Data Privacy Framework applies where the provider is certified under it (Railway, for one); in addition, and otherwise, we rely on the European Commission's standard contractual clauses.

Projects and media stay until you delete them. If you delete your account we mark everything deleted at once; after 30 days the rows and files are removed for good.

Invoices are kept for ten years. Tax law requires it and it overrides a deletion request.

Access, rectification, erasure, restriction, portability and objection. Two of them you exercise yourself, immediately: under Settings → Privacy you download all your data as a file and delete your account.

For anything else an email to [to be filled in] is enough. You may also complain to a data protection authority.

One cookie for your session, one for the workspace you last picked. No tracking, no ad networks, no cookie banner, because there is nothing to consent to.