Privacy policy

Who we are

Castmorph is published by NOVA SARL, 71 boulevard Raymond Poincaré, 06160 Antibes, France, company number 941 222 671. For any question about your data: privacy@castmorph.com.

Data we process

Account: email address, name and profile picture if you sign in with Google, an encrypted fingerprint of your password if you choose one.

Content: the videos you upload, the videos we produce, the personas you create.

Biometric data: when a persona uses a real face, we compute a face fingerprint to check consent and result quality. This relies on your explicit consent; the fingerprint is encrypted and never shared.

Usage and billing: creation history, credits, technical logs.

Why

To provide the service (contract), to secure accounts and prevent abuse (legitimate interest), and to meet legal obligations (invoicing, transparency on AI-made content).

We do not sell your data and we do not use it to train AI models.

How long we keep it

Uploaded and produced videos: deleted automatically after 30 days, or immediately on request.

Account: while it is active. Creation audit log: 12 months. Accounting records: 10 years.

Where your data lives and who can access it

Hosted in the European Union (Hetzner servers in Germany, Cloudflare R2 storage under EU jurisdiction).

Processors: Cloudflare (storage, security), Google (sign-in), Resend (emails), Stripe (payments), and the compute providers that transform your videos. Some are outside the EU; transfers rely on the European Commission's standard contractual clauses.

Your rights

You can access, correct, delete or export your data, object to processing or withdraw consent by writing to privacy@castmorph.com. You may also complain to the French data protection authority (cnil.fr) or your local authority.

Cookies

We only use cookies needed for sign-in and security. No advertising cookies without your consent.