Privacy Policy

Last updated: 9 July 2026 — DRAFT, subject to legal review.

1. Controller

[LEGAL ENTITY NAME], [ADDRESS], [COUNTRY] — contact: [CONTACT EMAIL]. We are the data controller for personal data processed through limou.

2. What we process

  • Account data: name, email, hashed password (or Google sign-in identifiers).
  • Content you provide: scripts, product descriptions, product photos, brand profile.
  • Generated media: rendered videos and voice previews stored for your account.
  • Billing data: handled by Stripe; we store plan, credit balance and transaction history, never card numbers.
  • Technical logs necessary to operate and secure the service.

We do not offer cloning of real people’s faces or voices, and you must not upload photos of real persons for avatar generation.

3. Purposes and legal bases

Contract performance (rendering your videos, managing your account and credits), legitimate interest (service security, abuse prevention, aggregate product analytics), and legal obligation (tax and accounting records). We do not sell personal data and do not use your content to train our own models.

4. Processors and transfers

We use Convex (hosting and storage), Replicate (AI model inference), Stripe (payments) and Vercel (web hosting). Some processors are in the United States; transfers rely on the EU-US Data Privacy Framework and/or Standard Contractual Clauses. A current subprocessor list is available on request at [CONTACT EMAIL].

5. Retention and deletion

Content and generated media are kept while your account is active. You can request account deletion at [CONTACT EMAIL]; we delete account data and stored media within 30 days, except records we must keep by law. Voice previews are served from temporary provider URLs and are not stored by us.

6. Your rights

Access, rectification, erasure, restriction, portability and objection — write to [CONTACT EMAIL]. You can complain to your local supervisory authority ([e.g. CNIL in France]).

7. Cookies

We use only cookies strictly necessary for sign-in and session security; no advertising or cross-site tracking cookies.