Kinetik

Privacy policy

Last updated: 14 October 2026

This policy explains what personal data we process when you use Kinetik and how to exercise your rights. We do not sell your data or use it for advertising.

1. Data controller

Lenny GOMES, Sole trader (French micro-enterprise), 5 rue Auguste Bernard, 78320 La Verrière, France (SIRET 938 832 987 00011). Contact for your data: gleam-pro@proton.me.

2. Data we collect

  • Account: name, email address, password (stored with irreversible hashing), profile picture and identifier if you sign in with Google or Discord.
  • Content: projects, descriptions, messages exchanged with the assistant, video versions, brand kit, uploaded files (logos, images, sounds), website captures and exported videos.
  • Purchases: plan, credit history, customer ID and payment status sent by Stripe. We never receive your card numbers.
  • Technical data: IP address, browser and device (for sessions), security logs.
  • Correspondence: messages you send us by email.

3. Purposes and legal bases

  • Providing the service (account, generating, editing, exporting and sharing videos): performance of the contract.
  • Managing payments, credits and invoicing: performance of the contract and legal accounting obligations.
  • Securing the service and preventing abuse (rate limiting by IP address, detecting disposable emails, bots and multiple accounts): legitimate interest.
  • Sending emails about your account and purchases (confirmations, renewal reminders, changes to the Terms): performance of the contract and legal obligation.
  • Answering your requests: legitimate interest.
  • Featuring some videos as examples (see the terms, section 9): legitimate interest, with the right to object at any time.

If we ever send promotional emails, it will be with your consent, or about offers similar to those you have bought, with an unsubscribe link in every email.

4. Recipients and providers

Your data is only accessible to the Publisher and to the technical providers that help run the service, each for its own task:

  • Vercel (United States): hosting of the website and app.
  • Neon (database hosted in London, United Kingdom): accounts, projects, credit history.
  • Cloudflare (R2 storage): uploaded files, captures and media.
  • Amazon Web Services (Frankfurt, Germany): rendering of exported videos.
  • Anthropic (United States): the artificial intelligence that generates and edits videos. It receives the content of your requests and the copy and images needed for generation.
  • Upstash: rate limiting (IP address and technical identifiers, kept for a few hours at most).
  • Stripe (Ireland and United States): payment and invoicing.
  • Google and Discord: only if you choose to sign in with them.

Some providers are located outside the European Union. These transfers are covered by an adequacy decision of the European Commission (including the Data Privacy Framework for certified US companies, and the decision on the United Kingdom) or by the Commission's standard contractual clauses.

We may also disclose data to authorities where required by law.

5. Retention periods

  • Account and content: as long as your account exists. An account inactive for 3 years is deleted, after a warning email.
  • After account deletion: your data is erased from our database immediately, and your files within 30 days. Technical backups are overwritten within 30 days at most.
  • Accounting records (invoices, payments): 10 years, as required by the French Commercial Code.
  • Sign-in sessions: 30 days.
  • Security data and technical logs: 12 months at most.
  • Correspondence with us: as long as needed to handle your request, then the applicable limitation period where necessary.

6. Your rights

You have the right to access, rectify, erase, restrict, port and object to the processing of your data, and to set instructions for what happens to it after your death.

You can edit your profile and delete your account directly from Settings. For other requests, write to gleam-pro@proton.me. We reply within one month. We may ask you to prove your identity if in doubt.

If you believe your rights are not respected, you can lodge a complaint with the CNIL, the French data protection authority (cnil.fr), or with the authority of your country.

7. Security

Traffic is encrypted (HTTPS), passwords are never stored in plain text, files are kept in private storage only accessible to their owner, and access to administration tools is restricted.

8. Children

Kinetik is not intended for children under 15. If you believe a child under 15 has given us data, contact us so we can delete it.

9. Cookies

See our cookie policy.

10. Changes

We may update this policy. If there is a significant change, we will let you know by email or in the app.