Privacy Policy

Last updated: 4 June 2026

⚠️ Template for review. This GDPR-oriented policy is a starting point — have it reviewed by a privacy professional, especially given media may include personal/health-related content. Replace bracketed placeholders.

1. Who we are

The data controller is [Legal entity name], [registered address], contact info@sebdigital.io. We provide AI video localization (the "Service").

2. What we collect

Account data: email address and a hashed password.
Content you upload: video/audio files and the transcripts, translations and voiceovers generated from them.
Usage data: projects, minutes processed, plan, and basic technical logs.
Billing data: handled by Stripe; we store a Stripe customer ID and subscription status (we never see or store your full card number).

3. How we use it & legal bases

To provide the Service (performance of contract).
To process payments and prevent fraud (contract / legitimate interests).
To secure and improve the Service (legitimate interests).
To comply with legal obligations.

4. Subprocessors

To deliver the Service we share data with the following processors. Your uploaded media and derived text may be transmitted to AI providers strictly to generate your output:

Provider	Purpose	Location
Scaleway	Hosting & object storage	EU (France)
OpenAI	Transcription & translation	USA
Gradium	Voice synthesis & cloning	EU / USA
Stripe	Payments	EU / USA
Google Analytics	Audience measurement	USA

Where data is transferred outside the EEA (e.g. OpenAI), we rely on appropriate safeguards such as Standard Contractual Clauses. Review each provider's terms and confirm a Data Processing Agreement is in place.

5. Retention

We keep account data while your account is active. Uploaded media and outputs are retained to provide the Service and deleted [within X days] of project or account deletion. Backups are rotated on a [X-day] cycle.

6. Your rights (GDPR)

You may request access, rectification, erasure, restriction, portability, and object to certain processing. Contact info@sebdigital.io. You may also lodge a complaint with your supervisory authority (in France, the CNIL).

7. Security

We use encryption in transit (HTTPS), hashed passwords, access controls and EU-based hosting. No system is perfectly secure; we cannot guarantee absolute security.

8. Cookies & analytics

We use an essential, HTTP-only session cookie to keep you signed in. We also use Google Analytics for aggregated audience measurement, which may set analytics cookies and transfer data to Google (USA) under appropriate safeguards. We do not use advertising cookies. You can refuse analytics via your browser settings (and via our cookie banner where applicable).

9. Changes & contact

We may update this policy; material changes will be notified. Questions: info@sebdigital.io.