Privacy policy
Last updated: 24 Oct 2026 · version 2026-10
Translation provided for information. The French version prevails.
This policy explains which personal data we process when you use Clipvendo, why, for how long and how to exercise your rights (Regulation (EU) 2016/679, “GDPR”).
1. Controller
Dorval, Place Eugène Flagey 23, 1050 Bruxelles, Belgique, CBE 0508.794.296. Contact: support@clipvendo.com.
2. Data processed, purposes and legal bases
| Data | Why | Legal basis |
|---|---|---|
| Account: email, name (optional), password (hashed), language, dates of the 18+ declaration and acceptance of the terms | Create and manage your account | Contract |
| Subscription: plan, status, Stripe identifiers, invoices, waiver of the withdrawal period (date, text version, IP address fingerprint) | Invoice, prove consent, handle withdrawals and cancellations | Contract; legal obligation (accounting) |
| Content: product information, photos, scripts, audio, videos | Produce the videos you request | Contract |
| Portraits and voices used for an avatar | Generate the avatar you request | Explicit consent, which can be withdrawn at any time |
| Proof of consent: date, IP address fingerprint, text version, SHA-256 fingerprint of the file, signed permission from a third party | Demonstrate consent and handle disputes | Legal obligation (Art. 7 GDPR); legitimate interest |
| Usage: minutes, generations, technical costs | Count minutes, prevent abuse | Contract; legitimate interest |
| SHA-256 fingerprints of exported files | Allow public verification of the origin of videos | Legal obligation (marking of AI content); legitimate interest |
| Reports and contact messages | Handle reports and reply to you | Legal obligation (Digital Services Act); legitimate interest |
| Technical data: IP address, server logs, session cookie | Security, abuse prevention, operation of the site | Legitimate interest |
Portraits: we perform no facial recognition or biometric identification; only simple checks (format, dimensions, sharpness) are carried out. We never use your portraits, voices or content to train AI models.
3. Providers (processors)
We use the following providers, solely to deliver the service:
| Provider | Role |
|---|---|
| Pruna AI | Generation of talking avatars and animation of product photos |
| Google (Gemini API) | Script writing and speech synthesis |
| fal (Features & Labels) | Fallback avatar and background removal for product photos |
| Stripe | Payment and invoicing (we never see your card numbers) |
| LWS (Ligne Web Services) | Hosting of the site, database and files, in France |
Some providers may process data outside the European Union (in particular in the United States). These transfers are covered by an adequacy decision (EU-US Data Privacy Framework) or by the European Commission’s standard contractual clauses. We never sell your data.
4. Retention periods
- Videos in the library: 30 days after creation.
- Source photos and voices of an avatar: 30 days after the avatar is created, or immediately if consent is withdrawn.
- Avatar: until consent is withdrawn or the account is deleted.
- Account: while it is active; erased within 30 days of deletion (backups: 35 days at most).
- Proof of consent: 5 years after the avatar is deleted, with no direct link to the account once the account has been deleted.
- Invoices and accounting data: the statutory accounting retention period.
- Reports and messages: 3 years after they are closed.
- Technical logs: 12 months at most; anti-abuse counters: 24 hours.
- SHA-256 fingerprints of exports: no time limit, with no identity data after the account is deleted.
5. Your rights
You can request access to your data, its rectification or erasure, restriction of processing, object to processing based on legitimate interest, and withdraw your consent at any time (without affecting past processing). From your account, you can export your data (JSON) and delete your account. For any other request, write to us at support@clipvendo.com; we reply within one month.
You may lodge a complaint with the Belgian Data Protection Authority (dataprotectionauthority.be) or with the authority of your country of residence.
6. Security
Encrypted connections (HTTPS), hashed passwords, files stored out of public reach and served through signed temporary links, files separated per account, restricted administrative access.
7. Minors
The service is reserved for people aged 18 and over. Images of minors are prohibited.
8. Cookies
Only technical cookies are used: see the Cookies page.