Privacy Policy
What data we process, why, who it is shared with, how long it is kept, and how to exercise your rights.
Ostatnia aktualizacja: August 30, 2026
Ten dokument jest dostępny wyłącznie po angielsku. Interfejs jest przetłumaczony na dziesięć języków, nasze teksty prawne nie: przetłumaczona umowa nie jest umową zweryfikowaną, a te warunki podlegają prawu Quebecu. Obowiązuje wersja angielska.
In short
- The Service processes images of faces. That is personal data and, depending on use, sensitive data.
- Your videos and photos are hosted in the United States and sent to an AI provider in Singapore to be processed.
- We train no model on your content and we sell it to nobody.
- Your files and videos are deleted thirty days after the corresponding conversation is deleted.
- You may at any time access, correct or delete your data, or object to its processing.
1. Data controller
The controller is the operator of the Service, identified in the legal notice.
For any question about your personal data, write to the privacy contact address in the legal notice.
2. Data we process
- Account: email address, display name, password in irreversible hashed form, language, currency, creation date.
- Content: videos, photos and audio files you upload, descriptions you enter, generated videos, names you give to cast members.
- Usage: generation history, chosen settings, failures and refusal reasons, token balance and movements.
- Payment: amount, currency, date, transaction identifiers. Card details are handled directly by Stripe and never pass through our servers.
- Technical: IP address, user agent, sign-in timestamps, active sessions, security logs.
- Communications: the content of messages you send us.
3. Faces and sensitive data
The core of the Service is placing a person's likeness into a video. The photos and videos you upload therefore contain images of faces.
An image of a face is sensitive personal information. It only becomes biometric data if it undergoes technical processing intended to identify a person uniquely. We perform no facial recognition, no identification and no biometric matching: we build no bank of biometric characteristics and we never seek to know who appears in an image.
The images are nonetheless processed by an AI model to produce the requested video. That processing rests on your express consent, collected at creation time, by which you confirm you hold each person's permission.
You may withdraw that consent at any time by deleting the content concerned. Withdrawal does not affect the lawfulness of processing already carried out.
4. Purposes and legal bases
- Providing the Service, generating videos and managing your account: performance of the contract.
- Processing images of faces: explicit consent, given at each creation.
- Billing, collecting payment and fighting payment fraud: performance of the contract and legal obligation.
- Moderating content and enforcing the terms: legitimate interest in protecting people and the Service, and legal obligation for manifestly unlawful content.
- Securing the Service, logging access and preventing abuse: legitimate interest in security.
- Keeping accounting records: legal obligation.
- Answering your requests: legitimate interest in providing support.
5. Recipients and processors
We sell no data. We share it only with the providers needed to run the Service, bound by contract and acting on our instructions alone:
- Supabase Inc. (United States, us-east-2 region, Ohio): database, file hosting and credential management.
- BytePlus Pte. Ltd. (Singapore): video generation. Receives the videos, images and descriptions submitted for a render.
- Vercel Inc. (United States): application hosting and audience measurement.
- Upstash Inc.: technical cache and rate limiting. North America.
- Stripe, Inc.: payment processing.
- Judicial or administrative authorities, on lawful request.
6. International data transfers
The Service is available worldwide and processes your content in no single country. Database and file hosting are located in the United States, video generation happens in Singapore, and the company operating the Service is established in Canada.
Wherever you are, your personal information therefore crosses borders, including your own country's. That is inherent to how the Service works and not something you can switch off.
The safeguards we apply are the same for every user, regardless of country: encrypted transmission end to end, access through dedicated and compartmentalised credentials, a contractual undertaking from each provider to act only on our instructions and never to reuse the data for its own purposes, and retention at the generation provider limited to the duration of processing.
The rights you hold over these transfers depend on the law of your country of residence, which may be more protective than ours. Depending on the case, that may include rights of access, rectification, erasure, objection or portability, or the right to complain to a local supervisory authority. We encourage you to check the rules that apply where you live, and we act on any request grounded in them.
To exercise a right, or to obtain details of the safeguards covering a specific transfer, write to the privacy contact address. We respond whichever law you invoke.
We may restrict or block access to the Service from certain countries, in particular where local obligations are incompatible with how it operates. If you are in such a country, the Service may be unavailable to you.
If these transfers are unacceptable to you, the only option is not to use the Service: generation cannot happen otherwise.
7. Retention periods
- Account and associated data: for the life of the account, then thirty days after closure.
- Videos, yours and the generated one alike: fifteen days from generation, then deleted automatically. The exact date is shown under each video. Download the ones you want to keep.
- Cast photos: for the life of the conversation, then thirty days after it is deleted. They are kept longer than videos because they are what lets a face be reused from one creation to the next.
- Token history and accounting records: ten years, as required by accounting law.
- Security and audit logs: twelve months.
- Material relating to a report or a breach: until the applicable limitation periods expire.
- Payment data held by Stripe: per Stripe's own retention policy.
8. Your rights
You have rights of access, rectification, erasure, restriction, objection and portability, and the right to withdraw consent at any time.
Some of these can be exercised directly from your settings: view your data, edit your profile, delete your conversations, close your account.
For anything else, write to the privacy contact address. We respond within one month, extendable by two months for complex requests.
If you believe your rights are not being respected, you may complain to the Commission d'accès à l'information du Québec, or to the data protection authority of your province or country of residence.
Depending on where you live, local law may give you additional or different rights, in particular on objection, portability or automated decisions. Those rights apply and we honour them: write to us and we will handle your request under the regime that covers you.
9. Security
We apply appropriate technical and organisational measures: encrypted transport, per-user isolation of file access, short-lived signed download links, logging of sensitive actions, rate limiting on exposed entry points, and immediate session revocation on password change.
No system is perfectly secure. In the event of a data breach likely to result in a high risk to your rights, we will inform you as soon as possible and notify the supervisory authority as required.
11. Minors
The Service is prohibited to anyone under 18. We do not knowingly collect data about a minor.
If you find that an account was created by a minor, report it: we will close the account and delete the associated data.
12. Changes to this policy
We may update this policy. Any substantial change is notified to you by email or in the Service. The last updated date appears at the top of the page.