Privacy policy
Template document for service launch. Have it reviewed by counsel before commercial launch. Placeholders: [À COMPLÉTER].
1. Controller
The data controller is [À COMPLÉTER], contact: [À COMPLÉTER].
2. Data we collect
Account (email, display name), uploaded vehicle photos, edit metadata (style, status, storage paths), technical logs, cookie/analytics consent, and payment data via Stripe when applicable.
3. Purposes and legal bases
Contract performance: providing the Service, generating edits, managing credits. Legitimate interest: security and abuse prevention. Consent: audience measurement (Vercel Analytics) when you accept non-essential cookies.
4. Retention
Photos and related results are retained until you delete your account (or earlier purge for legitimate security reasons). Technical logs are kept only as long as needed for diagnostics.
5. Recipients / processors
Hosting via Vercel (front / functions), Supabase (auth, database, storage — EU region when configured), Fal.ai (video generation), Cloudflare Turnstile (anti-bot), Sentry (errors, if enabled).
6. Your rights
You have rights of access, rectification, erasure, restriction, objection and portability under the GDPR. Contact: [À COMPLÉTER]. You may also lodge a complaint with a supervisory authority (e.g. CNIL in France).
7. Account deletion
From the Account page you can delete your account. This removes your profile, edits and associated storage files, subject to legal retention duties.