1. Who is responsible
The controller of your data is [PLACEHOLDER: company name], with registered office at [PLACEHOLDER: address]. For privacy matters, write to [PLACEHOLDER: legal email]. [PLACEHOLDER: data protection officer or EU representative, if applicable.]
2. What data we process
Account data: name, email, password (stored encrypted, never in plain text), language and, if you enable it, two-step verification.
Content you create: briefs, text, banners, comments and the files you upload (logos, images, fonts).
Use and security: sign-in logs, IP address, browser, credits spent and actions taken in the service.
Payments: processed by Paddle; we receive purchase data (plan, amount, status), not your card number.
Communications: messages you send us and service emails.
3. What we use it for
To provide the service (create your account, generate and export banners, manage credits and reviews), keep it secure, prevent abuse, handle your support requests, comply with legal obligations and improve the product. We only send marketing emails if you agree, and you can unsubscribe at any time.
[PLACEHOLDER: legal basis for each purpose (contract, legitimate interest, consent, legal obligation), according to the applicable law.]
4. Who we share it with
With providers that help us deliver the service and act as sub-processors: hosting and infrastructure [PLACEHOLDER: provider], email [PLACEHOLDER: provider], payments (Paddle, as Merchant of Record) and AI providers (Anthropic), to whom we send the text of your briefs and banners and, if you enable visual review, banner images, under their commercial terms.
We do not sell your personal data. We may also share it with authorities when the law requires it. The list of sub-processors is on the site’s sub-processors page.
5. International transfers
Some providers are located outside your country. [PLACEHOLDER: countries, hosting regions and safeguards applied (for example, standard contractual clauses), to be confirmed by legal review.]
6. How long we keep it
While your account is active and for as long as needed to comply with the law or resolve disputes. [PLACEHOLDER: exact retention periods by data type: account, content, security logs, billing.]
7. Your rights
Depending on the law that applies to you, you may request access to your data, correct it, delete it, restrict or object to its processing, receive a portable copy and withdraw your consent. Write to [PLACEHOLDER: legal email] and we will respond within [PLACEHOLDER: time limit]. You may also lodge a complaint with your data protection authority: [PLACEHOLDER: competent authority].
8. Security
We apply reasonable technical and organizational measures: encrypted passwords, protected sessions, optional two-step verification and data isolated per workspace. No system is infallible; if an incident affects you, we will notify you as required by law. [PLACEHOLDER: notification deadlines.]
9. Minors
BannerMotion is not directed at children under [PLACEHOLDER: minimum age]. If you believe a minor has given us data, write to us and we will delete it.
10. Changes and contact
If we make material changes to this policy, we will notify you before they take effect. Effective from [PLACEHOLDER: date]. Contact: [PLACEHOLDER: legal email].