Privacy

Who is responsible for your data

The data controller is Real Soft Invest SRL, tax ID 32595470, trade register no. J32/1092/2013, registered office Str. Doamna Stanca nr. 1, bl. 1, ap. 12, Șelimbăr, Sibiu county, Romania, share capital 200 lei. For any question about your data, write to us from the support page.

What data we use

• Account: e-mail, name, verified phone number, chosen language.
• Billing: name or company name, tax ID, address, invoice e-mail.
• Your listings: photos, listing details, texts, brand logo and, if you make them, recordings of your voice and your “You in the clip” videos (front camera; the background is removed on your own device, without sending the image to any provider).
• Technical data: the devices you export videos from, security logs and the IP address of requests, as far as needed for security.
• Payments: amount, date and status. Card details are processed only by Stripe; we never see them.
• Affiliates: if you came through an affiliate's link, the link between your account and that affiliate. Clicks on affiliate links are counted without keeping the IP address.
• If you are an affiliate: the details for the agreement and payment (name or company name, address, e-mail, phone, IBAN, the tax ID for companies and the personal numeric code, CNP, for individuals), the accepted agreement with the date, time and IP address of acceptance, commissions and payments. The CNP and the IBAN are stored encrypted.
• Messages to support: your name, e-mail and what you write.

Why, and on what basis

• To provide the service (our contract): account, listings, videos, payments and support.
• Legal obligations: invoices, accounting records, answers to authorities and, for individual affiliates, withholding the income tax and filing the tax returns (forms 100 and 205), which need the CNP.
• Our legitimate interest: the security of the app and preventing abuse, for example one trial video per phone number.
• Your consent: only where we explicitly ask for it. We currently send no marketing messages.

Who else sees the data

We work with providers that process data only on our instructions: Supabase (database and files, in the European Union), Vercel (app hosting), Stripe (payments), Twilio (the SMS code for phone verification), Google Cloud (the AI voice, only the text you choose to have read; the AI texts and photo animations), Meta and TikTok (only the videos you choose to publish), SmartBill (invoices) and the public ANAF and VIES services (tax ID checks). Some providers may process data outside the European Union, with the safeguards required by the GDPR. We do not sell your data.

How long we keep it

• Account data and listings, as long as the account exists. When you delete your account from the Account page, we delete your listings, photos, voice recordings, videos and account data.
• Invoices and payment records, as long as accounting law requires.
• Affiliate details, the accepted agreement, commissions and payments: for the duration of the affiliate agreement and then 10 years from the end of the year of the last payment, as accounting and tax law requires. After the agreement ends we use them only for these obligations.
• The phone number used for the trial video is kept after the account is deleted, so the trial cannot be used more than once.
• Messages to support, as long as needed to answer and at most 2 years.
• Withdrawals from the contract (the statement and its confirmation), also after the account is deleted, as proof that we respected your right.

Social networks

If you connect Facebook, Instagram or TikTok on the Social networks page, we keep the name and picture of the account and of its pages, and the access keys the network gives us, encrypted, to publish the videos you ask us to. We do not read messages, comments or statistics and publish nothing without your command. A video sent for publishing stays with us for at most 3 days. When you press “Disconnect”, we delete the keys and give up the access at the network too. You can also remove the access from your Facebook or TikTok settings at any time, and if Facebook asks us to delete your data, we delete it.

Cookies

We use the cookies needed for the app to work: your login session and your chosen language. If you came through an affiliate's link, we keep their code (60 days) only if you agree when we ask; without your consent we store nothing. We use no analytics or advertising cookies.

Your rights

You have the right to know what data we hold about you, to correct it, to ask for it to be deleted or restricted, to receive it in a portable format and to object to some processing. You can download a copy of your data at any time in the app (Account → A copy of your data → Download my data) and delete the account there too. For anything else, write to us from the support page and we will answer within one month. You may also contact the Romanian data protection authority (www.dataprotection.ro).

Data security

Each user can access only their own data, through rules enforced in the database itself. Connections are encrypted, and secret keys stay on the server.