Privacy Policy
Last updated: [date]
1. Data Controller
The controller of personal data relating to the website and Fantasy Creator is the Publisher of Fantasy Creator, identified and contactable using the details provided in the Legal Notice.
2. Data Collected
Depending on the use of the website and Fantasy Creator, the Publisher may process in particular:
- contact information, including the email address;
- information relating to the order and subscription;
- the amount, currency, status and transaction references;
- information required for activation and management of access rights;
- certain technical information required for operation, security and application support.
Sensitive payment data, such as complete bank-card details, are processed directly by the relevant payment providers and are not retained by the Publisher.
3. Prompts and Generated Images
Prompts and images generated with Fantasy Creator are processed locally on the user’s equipment.
During normal operation of the product, they are neither transmitted to the Publisher nor stored on its servers, nor used to train an artificial-intelligence model.
Operations required for activation, access-rights verification, updates or subscription management are separate from the local image-generation process.
4. Use of Data
The data collected are used only where necessary to:
- process orders and payments;
- create and manage access rights;
- activate Fantasy Creator and verify the validity of access;
- manage subscriptions, renewals and cancellations;
- provide support requested by the user;
- ensure the security and proper operation of the service;
- comply with the Publisher’s legal and accounting obligations.
5. Legal Basis for Processing
Personal data are processed in accordance with the General Data Protection Regulation (GDPR) and, where applicable, other rules relating to the protection of personal data.
Depending on the purpose concerned, processing is based on:
- performance of the contract, to process the order, manage the subscription, activate Fantasy Creator, verify access rights and provide support;
- compliance with the Publisher’s legal obligations, in particular accounting and tax obligations and the retention of certain transaction information;
- the Publisher’s legitimate interests, where necessary for service security, abuse prevention, technical operation or the defence of its rights.
Where regulations require the user’s consent for a particular processing activity, that consent is obtained separately.
6. Service Providers and Recipients
Certain data may be processed by service providers necessary for the operation of Fantasy Creator, including:
- payment providers;
- hosting and infrastructure services;
- technical services used to manage orders and access rights;
- email delivery services.
These providers access only the data necessary to provide their services.
The Publisher does not sell users’ personal data.
7. Data Retention
Data are retained only for as long as necessary for the purposes for which they were collected.
Data required to perform the subscription are retained for the duration of the contractual relationship and may then be archived for the periods necessary to comply with legal or accounting obligations or to defend the Publisher’s rights.
Technical data are retained for a limited period corresponding to operational, security or incident-resolution needs.
8. Security
The Publisher implements reasonable technical and organisational measures to protect personal data against unauthorised access, loss, alteration or disclosure.
The local operation of Fantasy Creator notably avoids transmitting generated prompts and images to a cloud-generation service operated by the Publisher.
9. User Rights
In accordance with applicable regulations, the user may in particular request:
- access to their personal data;
- rectification of their personal data;
- erasure where the legal conditions are met;
- restriction of certain processing activities;
- data portability where applicable;
- objection to certain processing based on legitimate interests.
These rights may be exercised by contacting the Publisher at the address provided in the Legal Notice.
The user also has the right to lodge a complaint with the competent data-protection authority, in particular in their country of residence within the European Union. In France, the competent authority is the CNIL.
10. Changes to This Policy
This Privacy Policy may be updated to reflect changes to Fantasy Creator, its service providers or applicable legal requirements.
The version in force is the version published on the website.