Data controller
The data controller is company name, registered office address. For questions about your personal data, write to customer support email address.
What data we process
- Account data: email address, hashed password, first name (if you provide it), role and preferences from the first-run setup.
- Assets: uploaded images, recordings, shot prompts and generated files.
- Billing: plan, credit history and the data needed to issue a purchase document. We do not store card details.
- Technical data: IP address and timestamps, used to protect against abuse and to limit login attempts. The country our CDN provider (Cloudflare) derives from the IP address is used only to choose the language and currency and is not stored.
For what purpose
- Running the account and providing the service (Art. 6(1)(b) GDPR).
- Billing and tax obligations (Art. 6(1)(c) GDPR).
- Security of the service and prevention of abuse (Art. 6(1)(f) GDPR).
Who processes data on our behalf
- Supabase: database, sign-in and private file storage.
- Stripe: payment processing and purchase documents.
- Generation model provider: receives only the assets and prompt needed to complete the task.
- Email provider: sending verification codes and account notifications.
Some providers may process data outside the European Economic Area on the basis of standard contractual clauses. We'll add the list of regions and data processing agreements before sales open.
How long we keep it
We keep account data and assets until the account is deleted. Deleting the account in Settings erases the assets and profile data. We keep billing documents for as long as the law requires.
Your rights
You have the right to access, rectify and erase your data, to restrict its processing, to data portability and to object. You can also lodge a complaint with the President of the Polish Personal Data Protection Office (UODO).
Cookies
We use only essential cookies: they keep you signed in and remember your chosen language. We do not use advertising or analytics cookies.