Privacy Policy

CinematicAds ("we", "us", "our") is committed to protecting your privacy. This privacy policy explains how we collect, use, disclose, and protect your personal information when you use our AI video generation platform accessible at cinematicads.studio (the "Service").

By using our Service, you agree to the collection and use of your information in accordance with this policy. We only collect information necessary to provide our services.

Identification Data: - First and last name - Professional email address - Company name - Country and timezone

Payment Data: - Billing information (processed by Payzone) - Transaction history - We do NOT store your credit card numbers

Usage Data: - Generated videos and parameters used - Creation preferences - Access logs and IP addresses - Aggregated analytical data

User Content: - Images and texts provided for video generation - Generated videos - Branding assets (logos, fonts)

We use your data to:

• **Provide the Service:** Generate your videos, save your creations, manage your account
• **Improve the Service:** Analyze usage to optimize our algorithms and interface
• **Communication:** Send service notifications, updates, and (with your consent) our newsletter
• **Support:** Respond to your requests and resolve technical issues
• **Billing:** Process your payments and manage your subscription
• **Legal Compliance:** Comply with our legal and regulatory obligations

In accordance with the General Data Protection Regulation (GDPR) and Moroccan Law 09-08 on the protection of individuals with regard to the processing of personal data, we process your data on the following legal bases:

• **Performance of Contract:** Processing necessary for the performance of our service
• **Consent:** For marketing communications and newsletters
• **Legitimate Interests:** Service improvement, security, fraud prevention
• **Legal Obligation:** Retention of billing data

Our data processing is declared to the CNDP (Commission Nationale de contrôle de la protection des Données à caractère Personnel) in accordance with Moroccan legislation.

We NEVER sell your personal data. We share your data only with:

Service Providers: - Google Cloud (AI services) - Hostinger (VPS hosting) - Payzone (payments)

Legal Obligations: - Competent authorities upon legal request - Protection of our legal rights

All our providers are GDPR compliant and bound by data protection contractual clauses.

• **Account Data:** Retained as long as your account is active, then 3 years after deletion
• **Generated Videos:** Retained 90 days after generation (unless downloaded)
• **Billing Data:** 10 years in accordance with tax obligations
• **Technical Logs:** 12 months
• **Support Communications:** 3 years

You may request deletion of your data at any time (see section 8).

We implement security measures compliant with industry standards:

• TLS 1.3 encryption for all transmissions
• AES-256 encryption for data at rest
• Session-based JWT authentication with Redis revocation
• Regular security audits
• Access limited to data on a least privilege basis
• Hosting on ISO 27001 certified infrastructure

In accordance with GDPR, you have the following rights:

• **Right of access:** Obtain a copy of your personal data
• **Right to rectification:** Correct your inaccurate data
• **Right to erasure:** Request deletion of your data
• **Right to portability:** Receive your data in a structured format
• **Right to object:** Object to certain processing
• **Right to restriction:** Limit the processing of your data
• **Right to withdraw consent:** Withdraw your consent at any time

To exercise these rights: contact@cinematicads.studio

You may also file a complaint with the CNIL (France) or your local data protection authority.

We use cookies for:

Essential Cookies (Mandatory): - Authentication and session - Language preferences - Security

Analytical Cookies (with consent): - Google Analytics 4 - Performance measurement

Marketing Cookies (with consent): - Conversion attribution - Personalization

You can manage your cookie preferences via our consent banner or your browser settings.

Your data may be processed in the following countries: - France (Headquarters) - European Union (Main infrastructure) - United States (Google services, with Standard Contractual Clauses)

All transfers outside the EU are covered by appropriate safeguards in accordance with GDPR (Standard Contractual Clauses of the European Commission).

We may update this privacy policy. In case of material change: - We will notify you by email - We will display a notice on our platform - The "last updated" date will be modified

Your continued use of the Service after notification constitutes your acceptance of the changes.

For any questions regarding this policy or your personal data:

Data Protection Officer: Email: contact@cinematicads.studio

Mailing Address: CinematicAds SAS 128 rue La Boétie 75008 Paris, France

General Support: contact@cinematicads.studio