Retour à l'accueil

Privacy Policy

Last updated: July 27, 2026

1. Data Controller

This service is operated by Virgile Rietsch (auto-entrepreneur), registered in France. For any privacy-related inquiries, contact us at [email protected].

2. Information We Collect

Account Information

  • Email address
  • Name (optional)
  • Payment information (processed by Stripe)

Content Data

  • Videos, images, and audio files you upload
  • Project data and settings
  • Generated captions and transcriptions
  • AI-generated images and content
  • Exported videos

Usage Data

  • Pages visited and features used
  • Time spent on the platform
  • Click interactions and user journeys
  • Device and browser information
  • IP address
  • AI credit usage and consumption

3. How We Use Your Data

We process your data for the following purposes:

  • Service Provision: To provide video editing, AI generation, and rendering services
  • Account Management: To manage your account, subscriptions, and usage limits
  • Improvement: To analyze usage patterns and improve our service
  • Support: To respond to your inquiries and provide assistance
  • Legal Compliance: To comply with legal obligations
  • Marketing: To send product updates and promotional content (with your consent)

4. Legal Basis for Processing (GDPR)

We process your personal data based on:

  • Contract: Processing necessary to provide our services
  • Legitimate Interest: To improve our service and prevent fraud
  • Consent: For marketing communications and optional features
  • Legal Obligation: When required by law

5. Third-Party Services

We use the following third-party services that may process your data:

Infrastructure & Hosting

  • Vercel: Web application hosting and edge delivery (US/EU servers)
  • Supabase: Authentication, database, and file storage (EU/US servers)
  • Cloudflare R2: Media file storage for videos, images, and exports (global CDN)
  • AWS Lambda: Serverless video rendering via Remotion Lambda (US servers)

Payments

  • Stripe: Payment processing (PCI-compliant, data stored by Stripe)

AI & Processing

  • OpenAI: AI-powered features including image generation and text processing
  • Google (Gemini): AI image generation and multimodal processing
  • Deepgram: Audio transcription and speech-to-text services
  • ElevenLabs: AI voice generation and text-to-speech services
  • Fal.ai: Image processing including background removal

Analytics & Operations

  • PostHog: Analytics and user journey tracking (anonymized where possible)
  • LinkedIn Insight Tag: Optional website analytics and aggregated professional demographics, enabled only after consent. We do not send email addresses to LinkedIn for Enhanced Conversions.
  • Trigger.dev: Background job processing for exports and media processing

6. Cookies

We use cookies for:

  • Essential: Authentication and session management
  • Analytics: PostHog cookies to understand usage patterns
  • Optional LinkedIn insights: LinkedIn cookies used to measure website visits and provide aggregated company, role, and industry insights after you consent

You can change your LinkedIn insight choice through the footer control. You can also control cookies through your browser settings, but disabling essential cookies will prevent you from using our service.

7. Data Retention

  • Account data: Retained while your account is active
  • Projects and content: 30 days after account deletion
  • Analytics data: 12 months
  • Financial records: 7 years (legal requirement)
  • AI usage logs: 90 days for billing and support purposes

8. Your Rights (GDPR)

Under GDPR, you have the right to:

  • Access: Request a copy of your personal data
  • Rectification: Correct inaccurate data
  • Erasure: Request deletion of your data ("right to be forgotten")
  • Portability: Receive your data in a portable format
  • Object: Object to certain processing activities
  • Restrict: Request restriction of processing
  • Withdraw consent: Where processing is based on consent

To exercise these rights, email us at [email protected]. We'll respond within 30 days.

9. International Data Transfers

Your data may be transferred to servers outside the EU, particularly to the United States for video rendering and AI processing. We ensure appropriate safeguards through:

  • Using services that comply with GDPR requirements
  • Standard contractual clauses where applicable
  • Ensuring adequate protection levels
  • Data Processing Agreements with all third-party providers

10. Data Security

We implement appropriate technical and organizational measures including:

  • Encryption of data in transit (TLS) and at rest
  • Regular security assessments
  • Access controls and authentication
  • Secure payment processing through Stripe
  • Isolated processing environments for video rendering

11. Children's Privacy

Our service is not intended for children under 13. We don't knowingly collect data from children under 13. If you believe we have, please contact us.

12. Changes to This Policy

We may update this policy occasionally. We'll notify you of significant changes via email or a prominent notice on our service.

13. Supervisory Authority

You have the right to lodge a complaint with the French data protection authority (CNIL) at www.cnil.fr.

14. Contact Us

For privacy-related questions or to exercise your rights, contact us at:

Email: [email protected]

Data Controller: Virgile Rietsch

By using BlitzReels, you acknowledge that you have read and understood this Privacy Policy.