1. Data controller

The controller responsible for the processing of personal data collected on Bluminoo Studio is Mathis Vergne, who can be reached at mathisvergne27@gmail.com.

2. Data collected

• Email address and (hashed) password, when an account is created.
• Photos uploaded for image or video generation, temporarily transmitted to third-party artificial intelligence providers for processing (see section 4).
• Payment data (card number, etc.), collected and processed directly by Stripe — never by Bluminoo Studio.
• Credit balance and subscription history, associated with your account.

3. Purposes of processing

This data is used to: create and secure your account, provide the image/video generation service, manage your subscription and credit balance, and respond to your support requests.

4. Subprocessors and transfers

The following providers process data on our behalf:

• Supabase — database hosting, account authentication, and storage of the photos you upload as well as your generation results.
• Vercel — application hosting.
• Stripe — payment and card data processing.
• Google — image generation through the Gemini API (Nano Banana Pro / Gemini 3 Pro Image). The photos you submit are sent to this provider for the time needed to produce the result.
• fal.ai — video generation (Kling O1). The videos you submit are sent to this provider for the time needed to produce the result.

Some of these providers may be located outside the European Union (in particular in the United States); any resulting data transfer relies on the safeguards provided by these providers (standard contractual clauses or equivalent).

5. Retention period

Account data is retained for as long as the account remains active. Photos you upload for a generation are stored in our own storage, associated with your account, and are transmitted to the AI provider only for the duration of processing. They are automatically deleted 7 days after they are uploaded. Successful generation results (images and videos) are stored in your Gallery, also associated with your account, and are kept until your account is deleted. You may request the removal of either at any time.

6. Your rights

In accordance with the GDPR, you have the right to access, rectify, erase, restrict, and object to the processing of your personal data, as well as a right to data portability. You may exercise these rights by contacting us at mathisvergne27@gmail.com. You also have the right to lodge a complaint with the CNIL (www.cnil.fr).

7. Cookies

The site only uses technical cookies that are strictly necessary for the service to function (maintaining your login session via Supabase). No advertising or third-party tracking cookies are used.