Privacy Policy

This policy explains how NetMovIA collects, uses and protects your personal data when you use the streaming platform, Creator features, the upload Studio, or the generation and editing Studio services, in accordance with the General Data Protection Regulation (GDPR) and applicable French law.

Version dated 14 October 2026 · privacy 1.3

The data controller is NetMovia, a French SASU with share capital of EUR 100.00, registered under number 131 241 762 RCS Paris, with its registered office at 47 rue Vivienne, 75002 Paris, France. For personal data requests: support@netmovia.com.

The main categories of data processed are as follows:

• Account data: email address, username, data required for authentication and profile preferences.
• Platform usage data: viewing history, video progress, number of views given and received, unlocking of badges and avatars, player settings.
• Studio billing and credit data: email address, billing country or territory, selected pack, order reference, amounts, currency, displayed taxes, payment status and credit history. Depending on the country or territory and the enabled checkout flow, the sale and payment are handled by Stripe Managed Payments / Sold through Link as Merchant of Record. Information needed for the order, payment, fraud prevention, invoicing and verification is sent to the relevant seller or provider.
• Creator-status data: uploads, publications, validations, views, stars, badges, promotional credits granted and possible participation in reward programmes such as NetMovIA Awards. No general subscription-revenue sharing mechanism for Creators is currently active.
• Technical and security data: IP address, technical session identifiers, login timestamps, security and error logs.
• Cookies and technical trackers: please see the Cookies Policy for more details. Cookies
• Studio data: prompts, generation settings, images, videos, audio files, music, voices, references, imported files, generated results, projects and editing assets, together with the technical metadata required for their processing and storage.

The streaming catalogue is free after registration and email verification. The generation and editing Studio is a separate service: NetMoviz credit packs are one-time purchases, with no subscription or automatic renewal. Prices and bonuses are shown on the Studio pricing page.

NetMovIA currently allows the use of official avatars provided by the platform and, depending on available features, the upload of a profile image by the user.

Your data is processed for the following purposes:

• Account management and provision of the service — legal basis: performance of a contract.
• Site security and fraud prevention — legal basis: legitimate interest.
• User support and handling of requests — legal basis: legitimate interest.
• Sending information relating to the operation of the service — legal basis: legitimate interest.
• Management of billing and accounting obligations — legal basis: legal obligations.
• Provision of the generation and editing Studio, file processing, execution of generations, project storage and credit management — legal basis: performance of a contract.

Some data requested when creating an account or using the service is necessary for NetMovIA to operate properly.

Other data is optional and is used only to personalise the user experience or improve the service.

Your data may be transmitted only to persons and providers who need to access it in the course of their duties:

• NetMovIA technical and support team;
• website and database hosting provider;
• technical providers supplying hosting, storage, encoding, media processing and delivery services;
• Stripe Managed Payments / Sold through Link for credit-pack purchases, depending on the country or territory and the available checkout flow;
• technical providers and model/API suppliers used for image, video, voice, audio or music generation and for certain Studio functions;

The legal role of each provider depends on the service concerned. When a provider acts as a processor for NetMovIA, the processing is governed in accordance with applicable requirements and our instructions. Some providers, depending in particular on the payment flow or service used, may also act as separate controllers for their own purposes; their privacy information then applies to those processing activities.

Data may be hosted or processed in the European Union and, depending on the technical providers or models used by the Studio, in countries outside the European Union. Where personal data is transferred outside the EU/EEA, NetMovIA safeguards that transfer using the GDPR mechanisms applicable to the transfer concerned, including an adequacy decision or, where necessary, appropriate safeguards such as Standard Contractual Clauses.

Data is kept only for the period strictly necessary for the purposes pursued:

• Account and profile data: kept as long as the account is active.
• Inactive account: after 24 months without authentication or meaningful user activity, NetMovIA may deactivate the account after prior notice. Data that is no longer necessary is deleted or anonymised. Only data still required for a legal obligation, security, a dispute, the defence of rights, or to preserve a service or content that NetMovIA must still provide may be placed in restricted-access archives. The need for retention is periodically reassessed and the data is deleted or anonymised when the reason ends. Where reactivation remains justified, it may be offered under the applicable conditions.
• Billing data and records: retained for the statutory period applicable to accounting and tax obligations, which may be up to 10 years depending on the type of record.
• Technical and security logs: kept for a maximum of 12 months.
• Studio projects and media: kept while the account remains active and until the user deletes them. When an item is deleted by the user, it is removed from active storage, subject to temporary technical copies, security logs or retention required by law.

If the user deletes their account, the personal data associated with the account and the Studio projects and media are removed from our active systems, except where temporary or longer retention is necessary to comply with a legal obligation, maintain security, handle a dispute or defend our rights.

NetMovIA implements reasonable technical and organisational measures to protect your data.

As no system is completely invulnerable, we undertake to react as quickly as possible in the event of an identified security incident.

Under the conditions set out in the regulations, you have the following rights over your personal data:

• right of access and rectification;
• right to erasure;
• right to restriction of processing;
• right to object;
• right to data portability.
• where processing is based on your consent, the right to withdraw that consent at any time, without affecting the lawfulness of processing carried out beforehand.

To exercise your rights, you can contact us at: support@netmovia.com.

You may also lodge a complaint with the competent supervisory authority: CNIL (France). cnil.fr.

NetMovia, the controller identified in section 1, processes content links and identifiers, report reasons and explanations, names and e-mail addresses when supplied, account identifiers where applicable, the good-faith statement and its version, language and dates. Technical session and request hashes help secure registration and prevent duplicates. Case records include relevant notes, decisions, grounds, appeals and records of communications actually made.

These data are used to receive and assess reports, reply to the parties, explain decisions and handle challenges. Applicable statutory notice and moderation duties provide the basis for the corresponding processing (GDPR Article 6(1)(c)). Security, abuse prevention and the defence of rights rely on the legitimate interests of NetMovia and the parties (Article 6(1)(f)), after balancing their rights. The good-faith statement is not advertising consent. Required fields and the contact-details exception are indicated in the form; without an electronic address, an individual e-mail response is not possible.

Access must be limited to authorised case handlers and technical providers needed for hosting and communications. Only necessary information is disclosed to the creator, advisers or authorities on a lawful basis. The reporter's name and e-mail are neither published nor routinely passed to the creator; disclosure may be necessary to examine a rights infringement or legally required. The transfer rules in section 5 and rights in section 8 also apply.

The case is retained during handling and any review. On closure, retention is reassessed: unnecessary information is deleted or anonymised; only information needed for a legal obligation or the establishment, exercise or defence of a right may be archived with restricted access. The period depends on the applicable obligation, the limitation period relevant to the dispute and, if proceedings begin, their duration and avenues of appeal. The need for retention must be reassessed and data deleted when that reason ends. These criteria do not provide for indefinite retention of every case. Account deletion does not automatically erase information still needed for these purposes.