Privacy Policy

1. Data controller

VidStreak, a service operated from France, is the controller for the personal data described here. Contact: hello@vidstreak.com.

2. Data we collect

Account: email address and password (hashed by our authentication provider).

Content: the links, text and media you provide, project memories and generated content.

Billing: handled by Lemon Squeezy (Merchant of Record); we never store card data.

Usage: technical logs and cookieless audience measurement (Cloudflare Web Analytics). No banner because no advertising tracker.

3. Purposes and legal bases

Providing the service (performance of contract): account, generation, credits, support.

Security and abuse prevention (legitimate interest): rate limiting, technical logs.

Billing and accounting obligations (legal obligation).

4. Hosting and minimization

Database and authentication: Supabase, hosted in the European Union. Media: Cloudflare R2, EU jurisdiction. Application: Cloudflare.

Minimization at the AI boundary: AI models only receive the marketing content needed for generation (product page text, project memory). Your identity, email and account data are never sent to the models.

5. Subprocessors

Cloudflare (hosting, media, analytics); Supabase (database and auth, EU); Lemon Squeezy (payments, Merchant of Record); BytePlus ModelArk (image generation, Singapore); OpenRouter and its inference providers (AI text processing); ElevenLabs (voice synthesis, once video mode ships).

Transfers outside the European Economic Area are governed by Standard Contractual Clauses (SCC) and limited to what generation strictly requires.

6. Retention

Account data and content are kept while the account is active, then deleted within 30 days of account deletion. Technical logs are kept for at most 90 days. Billing data follows statutory accounting retention periods.

7. Your rights

Under the GDPR you have the rights of access, rectification, erasure, portability, restriction and objection. Exercise them by writing to hello@vidstreak.com. You may lodge a complaint with your supervisory authority (in France: CNIL, cnil.fr).

California residents: we do not sell personal information as defined by the CCPA/CPRA.