Privacy Policy
Data Controller Information
The entity responsible for the processing of your personal data (the "Data Controller") is:
Name:
Sergei Kurapov
Legal Status:
Sole Proprietor (Autónomo)
Address:
Madrid, Spain
Contact Email:
[email protected]Scope of This Policy
This Privacy Policy applies to the "AppVids" video generation service. It governs the processing of personal data collected from clients ("Users") operating under a B2C (Business-to-Consumer) model. This policy covers data collected through our website, ordering process, and fulfillment communications.
Categories of Personal Data Collected
We collect and process the following categories of personal data:
Identity and Contact Data:
Name and email address used for order confirmation and support.
Transaction Data:
Information regarding the "one-time packs" purchased. (Note: We do not store full credit card details; payments are processed by third-party secure payment gateways).
Content Data:
Briefs, scripts, and media files provided by the User for video generation.
Usage and Technical Data:
Data collected via cookies and tracking technologies, specifically through Google Analytics 4 and Yandex Metrica.
Note on Sensitive Data:
We prohibit the processing of content related to medical or adult topics. Therefore, we do not knowingly collect Special Categories of Personal Data (e.g., health data).
Purposes of Processing
We process your data for the following purposes:
Service Fulfillment:
To generate AI-based video content (scripts, avatars, voice) and deliver orders within the agreed SLA.
Communication:
To manage briefs, confirm orders, and handle revision requests within the 72-hour revision window.
Portfolio Usage:
We may process final deliverables for display in our portfolio or as testimonials, based on our legitimate interest.
Analytics:
To analyze website traffic and user behavior using Google Analytics 4 and Yandex Metrica to improve our services.
Legal Bases for Processing
We process your data under the following legal bases pursuant to the GDPR (General Data Protection Regulation):
Contractual Necessity:
Processing required to fulfill your order and deliver the video files.
Legal Obligation:
Retaining data for tax and accounting purposes in accordance with Spanish law.
Consent:
Used for non-essential cookies and tracking technologies (Analytics), obtained via our cookie banner.
Legitimate Interest:
For portfolio usage, security monitoring, and business analytics.
Payment Processing
We operate on a "One-time packs" model with no subscriptions or auto-renewals. Payment data is processed securely by third-party payment processors. We do not retain sensitive payment instrument details on our servers.
Data Sharing and Recipients
Your data may be shared with:
Service Providers (Subprocessors):
Third-party tools used for AI video generation and hosting.
Analytics Providers:
Google (for Google Analytics 4) and Yandex (for Yandex Metrica).
Legal Authorities:
If required by Spanish law or to protect our rights.
International Data Transfers
The Data Controller is located in Spain (Madrid). Some external service providers (e.g., Google, Yandex) may process data outside the European Economic Area (EEA). We ensure that such transfers are covered by appropriate safeguards, such as Standard Contractual Clauses (SCCs) or adequacy decisions.
Data Retention Periods
We adhere to strict retention schedules to ensure data is not held longer than necessary:
Video Storage:
Generated video files are stored for 7 days after delivery, after which they are deleted from our servers.
Email and Order Data:
Correspondence and order details are retained for 6 months.
Client Data Training:
We do not use client data to train AI models.
Security Measures
We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss, or alteration. Specific measures include restricted access to client briefs and the automatic deletion of video files after the 7-day storage period.
Data Subject Rights
As a User located in the EU or under GDPR jurisdiction, you have the right to:
- Access your personal data.
- Request rectification of inaccurate data.
- Request erasure of your data (subject to legal retention periods).
- Object to processing (e.g., regarding portfolio usage).
- Withdraw consent for cookies at any time.
To exercise these rights, please contact us at [email protected].
Cookies and Tracking Technologies
We use the following tracking technologies:
• Google Analytics 4
• Yandex Metrica
We utilize an EU-compliant cookie banner that requires your opt-in consent before non-essential analytics cookies are activated.
Children's Data
Our services are B2C and not intended for children. We do not knowingly collect data from individuals under the age of 18.
Contact for Privacy Requests
For any questions regarding this Privacy Policy or to exercise your data rights, please contact:
Email:
[email protected]Address:
Madrid, Spain
Changes to This Policy
We may update this policy to reflect changes in our practices or legal obligations. The latest version will always be available on our website.
Appendix: Subprocessors List
(Note: While specific subprocessor names for AI generation were not provided in the configuration file, this section is reserved for listing them).
Google:
Analytics
Yandex:
Analytics