1. Controller
[TODO: Full legal name of owner], [TODO: Street and number], [TODO: Postal code and city], Germany. Email: ctnkyatakan@gmail.com.
2. Data we process
- Account: email, login data, profile — to provide your account (Art. 6 (1)(b) GDPR).
- Your content: scripts, uploaded photos, voices and generated media — stored privately in your workspace and only processed to deliver the service.
- Payments: handled by Stripe; we only receive payment status, plan and the last digits of the card, never full card data.
- Contact form: name, email, topic and message, plus a one-way hashed IP address for spam protection (Art. 6 (1)(f) GDPR). Deleted when no longer needed, at the latest after 2 years.
- Usage and logs: technical logs for security and billing (Art. 6 (1)(f) GDPR).
- Analytics/marketing: Google Analytics and Meta Pixel only if you consent (Art. 6 (1)(a) GDPR).
3. Processors and recipients
Hosting and database (Lovable / Cloudflare / Supabase), payment (Stripe), AI providers for generation (e.g. fal.ai, Replicate, Kling, ElevenLabs, OpenAI, Google). Some are located outside the EU; transfers rely on EU standard contractual clauses or adequacy decisions.
4. Retention
We store data as long as your account exists. Invoices are kept for the statutory 10 years (§ 147 AO).
5. Your rights
Access, rectification, erasure, restriction, portability, objection and withdrawal of consent at any time. You may complain to a supervisory authority. Contact: ctnkyatakan@gmail.com.