Data controller

AIVEO (see the legal notice). Contact: [AIVEO contact email to be supplied].

Data we process

• Data: your email, a hash of your password (never the password itself), the date of your last activity, your purchases, your generations and your IP address (to limit sign-in attempts).
• Telegram account: if you use the Telegram Mini App, your account is identified by your Telegram ID, a number that Telegram sends, signed, each time you open it. It is the only data from your Telegram profile that we keep: the other information Telegram sends when you open it (name, username, profile picture, language) is not recorded. This account has no email and no password, so AIVEO sends you no email.
• Payment in Telegram Stars: you pay Telegram. AIVEO receives neither your payment method nor your App Store or Google Play data: Telegram only confirms the payment to us, with its reference, which is recorded with the order.
• Results sent in Telegram: the video or image produced is sent by the bot to your Telegram conversation with AIVEO. Telegram receives this file and keeps it under its own rules. AIVEO does not keep it on its servers.
• Support messages: the ones you send with the Help button, with the page, browser and language at the time of sending, are used to reply to you and are deleted with your account. A reply may be written by an automated assistant from these messages and from the data of your account that is useful for your request (balance, generations, purchases, never your email); the team takes over when needed.
• Photo safety check: a photo refused by this check is kept as a safety report, with the date, the reason, the temporary link to the photo, your account identifier, your IP address and your browser at that moment, for review by the team and, on suspicion of child sexual abuse material, for a report to the competent authorities (PHAROS in France, NCMEC in the United States). These reports are kept, even after your account is deleted, for the time needed to review them and for any follow-up to a report to the authorities.
• Purchase trace: with each purchase, your IP address, your browser and your approximate location deduced from the IP address (country, city and coordinates of the city) are recorded with the order; for orders before 4 November 2026, only the country of the payment card.
• Proof of consent: with each generation, the date of your consent confirmation and the version of the terms in force at that moment are recorded with the generation.
• Content reports: for a report made on the reporting page, the email and the information provided, as well as the IP address and the browser of the person reporting, are kept. They do not need an account.
• History, characters, produced videos and photo edits: they are kept in your browser's local storage, not on our servers.
• Audience measurement: no cookie or identifier is stored on your device. Only page views and your actions on the site are counted, and your IP address is not kept.

Purposes and legal bases

• Performance of the contract (Article 6(1)(b) GDPR): creating and managing your account, selling and crediting packs, producing your generations and photo edits, answering your help requests, sending you the emails related to your account and your purchases.
• Performance of the contract (Article 6(1)(b) GDPR): for a Telegram account, using your Telegram ID to identify you each time you open the Mini App, credit your purchases in Stars and send you your results in your Telegram conversation.
• Legal obligation (Article 6(1)(c)): keeping purchases for accounting, and reporting suspected child sexual abuse material to the competent authorities.
• Legitimate interest (Article 6(1)(f)): securing the service (limiting sign-in attempts, photo safety check) and measuring audience without cookies to improve the site.
• Legitimate interest (Article 6(1)(f)): preventing fraud and defending AIVEO in case of a payment dispute, with the IP address, browser and location recorded at purchase.
• Legitimate interest (Article 6(1)(f)): keeping proof of your declaration that the people depicted in your content have given their consent, for as long as your account exists.
• Legitimate interest and legal obligation (Article 6(1)(f) and (c)): handling content reports.
• Sending you emails with offers on our packs after a purchase: legitimate interest (Article 6(1)(f) GDPR). You can object at any time through the link in each email.

Recipients

Processors: Cloudflare (hosting), Stripe (payment), kie.ai (video generation and photo editing), Resend (emails), Google (sign-in with a Google account, if you choose it), PostHog (cookie-free audience measurement, hosted in the EU), Telegram (internal team alerts, with account or payment identifiers, never an email or any content) and Anthropic (automated support assistant and photo safety check).

Telegram (Telegram Messenger Inc.), if you use the Telegram Mini App: Telegram opens the Mini App in its application and passes it data from your profile, processes the payment for packs in Stars, and receives the results the bot sends to your conversation. Telegram acts on its own behalf, under its privacy policy (telegram.org/privacy), and not as a processor of AIVEO. This is in addition to the use of Telegram for the team's internal alerts, described above.

Your data is never sold.

Transfers outside the European Union

Several processors handle data outside the European Union. Processors that offer it frame these transfers with the European Commission's standard contractual clauses or with the EU-US Data Privacy Framework. Telegram Messenger Inc., which acts on its own behalf, is also located outside the European Economic Area: the transfers linked to its service are governed by its privacy policy.

Retention

As long as your account exists. When it is deleted, your email, your password, your generations and your support messages are erased from our servers, and so is the history kept in this browser. Your purchases are kept without your email for the legal accounting retention periods, and safety reports as evidence. Files kept by the generation service expire on their own: 24 hours for uploaded files, 14 days for results.

Telegram account: when the account is deleted, your Telegram ID is erased from our servers along with the rest. Reopening the Mini App then creates a new account. Files the bot has already sent to your Telegram conversation stay there, kept by Telegram under its own rules: you delete them yourself in Telegram.

The IP address, browser, city and coordinates of the city recorded at purchase are erased 13 months after payment (13 months after the order was created if it was not paid). The country and the order are kept together, including after your account is deleted.

The proof of consent stays with the generation concerned and is deleted with it when you delete your account.

Safety reports about refused photos are kept for the time needed to review them and for any follow-up to a report to the authorities, then deleted by the team.

Content reports are kept for 3 years after they are closed.

Your rights

You can ask for access to, rectification, erasure, restriction and portability of your data, and object to processing based on legitimate interest, by writing to [AIVEO contact email to be supplied]. You can also lodge a complaint with the CNIL or with the data protection authority of your country. You can also delete your account yourself in Settings, unless it is frozen or under review: write to [AIVEO contact email to be supplied] in that case. If you are depicted in content produced with AIVEO, even without having an account, you can write to [AIVEO contact email to be supplied] or use the Report content page. For data that Telegram processes on its own behalf, you exercise your rights with Telegram (telegram.org/privacy).

Cookies

No advertising or audience measurement cookie is used.

• Sign-in: keeps your account signed in, up to 13 months.
• Sign-in with Google: secures the return from Google, 10 minutes.
• Purchase without an account: links your payment to your browser, 24 hours.
• Language: remembers your chosen language, 1 year.
• Creator and referral links: remember the link you followed, 30 days. They are set only if you accept the banner shown when you arrive through that link.
• Telegram Mini App: the official Telegram script (telegram.org) is loaded only in the Mini App, never on the website. To load it, your device contacts Telegram's servers, which then see your IP address. To our knowledge, this script sets no cookie: it only keeps its launch and theme settings in the Mini App's session storage, which is erased when you close it.