GDPRPrivacyLast updated: 2026-01-19

Privacy Policy

This policy explains how CDB Video IA collects, uses and protects your personal data, in accordance with Regulation (EU) 2016/679 (GDPR) and applicable French data protection law.

1) Data controller

The data controller is: LE CONSULTANT IT (EURL), 15 rue de Magellan, 77700 Serris, France.

For any question about your data: Contact page.

2) Data collected

Depending on how you use the service, we may collect:

  • Account data: user ID, email, first/last name (if provided by Google), profile photo (if provided), technical session identifiers.
  • Connection data: technical logs (date/time), IP address, browser/device information (limited to what is needed for security and proper operation).
  • Content data: information you enter to generate videos (e.g. text, scripts, campaign elements), and possibly imported media if your product allows it.
  • Support data: messages sent to support, content shared during a help request.

We do not request “sensitive” data (as defined by GDPR). Avoid entering any in the generation fields.

3) Purposes and legal bases

We process your data to:

  • Provide the service (account creation, access, generation/export) — contract performance.
  • Secure the platform (fraud/abuse prevention, authentication) — legitimate interest.
  • Customer support (respond to requests) — legitimate interest or contract performance.
  • Product improvement (technical statistics, performance) — legitimate interest.
  • Legal obligations (accounting, disputes) — legal obligation.

4) Google Authentication (OAuth)

“Continue with Google” uses OAuth authentication. Google may share certain profile information with us (e.g. email, name, photo) depending on your Google settings.

We use this information solely to create and manage your account and to give you access to the service.

5) Subprocessors and third-party services

To provide the service, we may use providers (subprocessors) who process data on our behalf, including:

  • Vercel (site hosting and deployment).
  • Google (OAuth) if you choose to sign in with Google.

Providers may be located outside the European Union. In that case, appropriate safeguards may apply (e.g. standard contractual clauses).

6) Retention periods

  • Account data: kept while your account is active, then deleted/anonymized within a reasonable period, unless legally required otherwise.
  • Logs and security: kept for a limited period (security, debugging, fraud prevention).
  • Support: kept for the duration of processing, then limited archiving if necessary.

7) Cookies & trackers

We use cookies/local storage strictly necessary for operation (sessions, preferences, security).

If you add analytics/marketing tools (e.g. pixels), you must implement a consent banner and update this page accordingly.

8) Your rights (GDPR)

You have the following rights: access, rectification, erasure, objection, restriction, portability.

You can exercise your rights via the Contact page (specifying your account email).

You can also lodge a complaint with the CNIL.

9) Security

We implement reasonable technical and organizational measures to protect your data (access controls, authentication, monitoring).

No system being infallible, we cannot guarantee absolute security, but we do our best to reduce risks.

10) Changes

We may update this policy to reflect changes to the service and/or legal requirements. The update date is shown at the top of the page.