Privacy Policy
Last updated:
Template — replace the bracketed placeholders and have this reviewed by a qualified lawyer/DPO before going live. Written to align with the EU GDPR.
1. Data controller
The controller of your personal data is [COMPANY LEGAL NAME], [ADDRESS], [COUNTRY]. For any privacy question or to exercise your rights, contact [CONTACT EMAIL].
2. What we collect
| Data | Why | Legal basis |
|---|---|---|
| Name, email, phone (optional) | Create your order, deliver your video, send order links | Contract |
| Property photos and details you upload | Produce your video | Contract |
| Payment info (handled by Stripe) | Take payment | Contract / legal obligation |
| Basic technical logs / IP | Security and abuse prevention (rate limiting) | Legitimate interest |
3. How we use it
We use your data only to provide the service: to produce and deliver your video, to communicate about your order, and to keep the service secure. We do not sell your data or use it for advertising.
4. Processors we use
We share data with the following service providers strictly to run the service:
- Stripe — payment processing.
- Supabase — storage of order data and delivered videos.
- Replicate and other AI model providers — generating video from your photos.
- Resend — sending order and delivery emails.
Some providers may process data outside the EEA; where they do, appropriate safeguards (e.g. Standard Contractual Clauses) apply.
5. Retention
We keep order data and delivered videos for as long as needed to provide the service and meet legal (e.g. accounting) obligations, then delete them. Uploaded source photos are retained only as needed to produce and support your order. You can ask us to delete your data at any time (subject to legal retention).
6. Your rights
Under the GDPR you have the right to access, rectify, erase, restrict, port, and object to the processing of your personal data, and to withdraw consent where processing is based on it. To exercise these rights, email [CONTACT EMAIL]. You also have the right to lodge a complaint with your local data protection authority ([e.g. Úřad pro ochranu osobních údajů in the Czech Republic]).
7. Cookies
The public site does not use tracking or advertising cookies. The admin area uses a session token strictly to keep you signed in. [Update this section if you add analytics or marketing cookies — those require consent.]
8. Contact
Questions about this policy: [CONTACT EMAIL].
See also our Terms of Service.