Privacy

Version dated 2026-10-08.4

Data controller and contact details

PROAF SOCIETA' A RESPONSABILITA' LIMITATA SEMPLIFICATA
Via Genova 7, 52100 Arezzo (AR), Italia
VAT and tax ID 02541950511. Arezzo-Siena Business Register, REA AR - 228035. Share capital €1,000.00 fully paid.
Email: [email protected]. Certified email: [email protected].

What data we process and why

We process email, photos, roles and additional details to prepare and fulfil your order and provide support, based on pre-contractual steps and the contract. We retain accounting data to comply with legal obligations. We use session identifiers and technical data for security and abuse prevention, based on our legitimate interest in protecting the service. We do not use order data for marketing without a separate choice.

Photos contain personal data of the people pictured. The service uses them to generate visual content, not to verify or certify identity. Do not include special categories of personal data or images of minors. When uploading photos of other people, you must have the right to do so and inform them of this privacy policy.

We record acceptance of the terms and consent to immediate generation together with the text version, date and order number. Providing the necessary data is optional, but without it we cannot fulfill the request. Additional details are optional. We do not make automated decisions with legal effects on the people pictured.

You can upload photos and details before purchasing to prepare the video. Uploading does not start generation or send photos to AI providers. Unused photos are deleted within 7 days. You can also delete them from the personalization page.

Before uploading photos, you must declare that you are an adult, have the rights and authorisations of the adults pictured and have read this notice. This declaration is not blanket consent to further processing. Data about people other than the buyer come from the uploader: inform those people before uploading. Processing necessary for the requested creation relies on the legitimate interest in providing the authorised service while respecting their rights; they may contact us without an order number.

We also record acceptance of the single generation at checkout. If you withdraw online, we retain your name, email, order and declaration date to manage contract termination, confirmation and related obligations.

Instagram tutorial requests

When you comment a specified word on one of our posts or Reels to receive a tutorial, the automation reads the comment received from Meta, including through periodic checks of the post's comments, and sends a private message. If the tutorial requires following us, the buttons start the required steps and the automation checks through Meta whether you follow our profile before sending the link. We do not use this request to subscribe you to a newsletter. We do not store the comment text or username. To manage these steps, we store the recipient's Instagram identifier and workflow state for seven days after the last activity. We also record the comment identifier, a pseudonymized person identifier and the sending outcome to prevent duplicates and handle errors. These completed records are deleted 90 days after their last update. Meta handles delivery and retains comments and messages under its own privacy policy.

To request deletion of data relating to this automation, contact the controller with your Instagram profile and a link to the relevant post. You do not need an order on the website.

For Instagram tutorial requests, we process the data needed to answer your request and manage the flow, based on the legitimate interest in providing the requested content and preventing duplicate messages. You may object by contacting the controller. The service does not require an account on this website.

Providers and recipients

Stripe manages checkout and payments. Full card details do not reach our servers. Higgsfield processes the video and receives the images, reference video and necessary instructions. The service is hosted on ProAF infrastructure at IONOS. Cloudflare manages DNS and traffic protection. Only authorized people, providers required for the service and authorities in cases provided by law may access the data.

Some providers also operate outside the European Economic Area. Any transfers must be covered by applicable safeguards, such as adequacy decisions or standard contractual clauses. You may request details and a copy of the safeguards from the controller. Providers' conditions and respective roles must be verified before sales open.

Images may also be processed to create intermediate images, face reference sheets and scene references needed for the video. We do not perform identity recognition or biometric categorisation. Higgsfield’s general policy also provides for training uses: production transfers of personal data require verification of an applicable agreement excluding those uses and governing recipients, deletion and international transfers. Accepting our terms alone does not authorise training on faces.

Stripe and the Stripe/Link entity identified in checkout also process payment data as independent controllers for their own purposes and legal obligations. Meta processes comments, profiles and messages under its notice. Provider agreements must specify processing on our behalf and processing under independent responsibility. You may request the current list and applicable notices from the controller.

Retention

On our servers, photos and videos for completed orders are deleted 7 days after video creation. Access ends permanently at expiry and the video cannot be recovered. You must download and save it before then. Photos for orders requiring recovery are retained for 7 days after the problem and, if the video is manually emailed, for 7 days after sending. Photos for refunded orders are deleted within 24 hours. Photos uploaded without starting generation are deleted within 7 days. You may delete them earlier from the order page when no generation is in progress and before completion.

Personalisation details, prompts and intermediate image references are removed with the media, rather than kept in the contractual archive for 10 years. Drafts and unpaid orders are deleted after media expiry and at least 7 days after creation. Essential paid order data and contractual and fiscal evidence are retained for 10 years from payment. Providers and backups may require separate deletion operations: contact the controller to exercise your rights and coordinate provider requests. Local deletion does not guarantee immediate deletion from backups or external systems.

Cookies and browser storage

We use a technical session cookie, lasting up to 90 days, to protect access to orders, and browser local storage to retain the recovery code. We do not use advertising cookies. Stripe's external checkout may use tools required for payment and fraud prevention.

We store your chosen language in a technical cookie for one year. On your first visit, we detect the language from your browser preferences.

Usage statistics

Umami, hosted at umami.igol.dev, loads automatically without a consent banner. The backend stores pseudonymous session identifiers and visit histories, including pages and timestamps. The tracker does not use its own cookies and respects Do Not Track. It measures visits, pages, traffic sources, UTM campaigns, device, browser, language and country. We remove access codes, order identifiers, fragments and parameters other than campaign parameters from submitted URLs; we do not send photos or email addresses. The analytics server necessarily receives the IP address during the connection. Retention of statistics and server logs is managed separately from the website and can be requested from the controller.

Technical cookies include igol_session for order access, igol_language for language. The private area also uses a technical administrator authentication cookie. Recovery codes stored in the browser remain until you or the browser remove them. Do not share these codes and remove them from shared devices.

Privacy requests do not require an order: if you are pictured, provide the minimum information needed to identify the material. We normally respond within one month; complex requests may be extended by two further months, with notice within the first month. You do not need to send an identity document unless necessary to verify the request.

Your rights

You may request access, rectification, deletion, restriction, portability and, where applicable, object to processing. Where processing is based on consent, you may withdraw it without affecting the lawfulness of earlier processing. Contact the controller with your order number. We may request only the information needed to verify the request.

We respond within the time limits set by the GDPR. You may lodge a complaint with the Italian Data Protection Authority or the competent authority in your country.