Privacy Policy
This English version is provided for convenience. The French version prevails.
Data collected
When you create an account: your email address and, if you sign in with Google, your name and profile picture. No password is ever stored: Rewatch works only with single use sign-in codes or Google sign-in.
Abuse prevention
So that sign-up credits cannot be collected over and over, we record when an account is created and at each sign-in: a non-reversible fingerprint of the IP address, a device identifier (browser cookie and storage) and a technical fingerprint of the browser, also made non-reversible. This data is used only to detect several accounts created from the same device, is never resold and is deleted with the account.
Cookies and trackers
Needed for the service: your sign-in session, your chosen language and the anti-abuse device identifier. Internal source measurement: the page you landed on and the campaign that brought you (90 days); this information never leaves our servers. Analytics and advertising: the PostHog cookie (1 year at most) and the TikTok pixel (13 months at most) are set from your first visit. You can block them in your browser settings, and object to this measurement by writing to us.
Analytics and advertising
Analytics: PostHog, hosted in the European Union, records page views and the steps of your journey (sign-up, first video, purchase); the steps of your account (sign-up, rendered video, payment) are also measured from our servers to improve the service. Advertising: the TikTok pixel and our servers tell TikTok about the pages you view, your sign-up, your first video, your checkout and your purchases, to measure how well our ads perform. Your email address and account identifier are sent hashed (SHA-256), along with your IP address, your browser and the identifier of the TikTok ad click that brought you. You can object to this measurement by writing to us.
Generated content
The stories, images, voices and videos created from your account are stored so you can come back to them and export them. They are never resold or used to train a model without your explicit consent.
Processors
Google (sign-in, if you use it), Resend (emails), PostHog (analytics, hosted in the EU), TikTok (ad measurement) and the artificial intelligence providers kie.ai and ElevenLabs, called only at the time of each generation. Payments are collected by Suby SAS, our reseller (Merchant of Record): it sells credits and subscriptions in its own name, processes your payment data, issues receipts and collects VAT.
Retention period
Account data, projects and the account's source are kept for as long as the account exists. Data sent to TikTok and PostHog is deleted from our servers 30 days after sending, and the record of your cookie choices 13 months after the choice. You can request the complete deletion of your account and your data at any time.
Your rights
Under the GDPR, you have the right to access, rectify, delete and port your data. Contact us from your account settings to exercise these rights.