01What information do we collect
In short: We collect personal information that you provide to us.
We collect personal information that you voluntarily provide when you register on the Services, express an interest in our products, participate in activities on the Services, or otherwise contact us.
Information you give us
Sensitive information
We do not process sensitive information.
Payment data
If you make a purchase we may collect data necessary to process your payment, such as your payment instrument number and its security code. All payment data is handled and stored by Stripe. Their privacy notice is at stripe.com/en-it/privacy.
Social media login data
You may register using an existing social media account. If you do, we receive certain profile information from that provider: often your name, email address, friends list and profile picture, plus anything else you have made public there.
All personal information you provide must be true, complete and accurate, and you must tell us if any of it changes.
02How we process your information
In short: To provide, improve and administer our Services, communicate with you, for security and fraud prevention, and to comply with law.
- To facilitate account creation and authentication, and otherwise manage user accounts, so you can create an account, log in, and keep it in working order.
- To save or protect a person’s vital interest, such as to prevent harm.
We may also process your information for other purposes, but only with your prior explicit consent.
03What legal bases we rely on
In short: We only process your personal information when we have a valid legal reason to do so under applicable law.
If you are in the EU or UK
The GDPR and UK GDPR require us to explain the legal bases we rely on. We may rely on:
- Consent: where you have given us permission for a specific purpose. You can withdraw it at any time.
- Legal obligations: where processing is necessary to comply with the law, cooperate with law enforcement or a regulator, or exercise or defend legal rights.
- Vital interests: where processing is necessary to protect your vital interests or those of a third party, such as a potential threat to someone’s safety.
If you are in Canada
We may process your information where you have given express consent, or where consent can reasonably be inferred. You can withdraw consent at any time. In limited cases the law permits processing without consent, for example where collection is clearly in your interests and consent cannot be obtained in time, for fraud detection and prevention, for certain business transactions, or where disclosure is required by a subpoena, warrant or court order.
04When and with whom we share your information
In short: Only in the specific situations described here.
- Business transfers: we may share or transfer your information in connection with, or during negotiations of, a merger, sale of company assets, financing, or acquisition of all or part of our business.
We may also disclose personal information to service providers under a written contract with each of them.
05AI-powered features
In short: We offer features powered by artificial intelligence, machine learning and similar technologies.
We provide these through third-party AI service providers, namely OpenAI and Anthropic. Your input, output and personal information are shared with and processed by those providers to enable the AI features. You must not use them in any way that violates those providers’ terms or policies.
What the AI features do
All personal information processed using AI features is handled in line with this notice and our agreements with those third parties.
06How we handle social logins
In short: If you register or log in using a social media account, we may receive certain information about you.
We use what we receive only for the purposes described in this notice, or as otherwise made clear to you. We do not control, and are not responsible for, other uses of your personal information by your social media provider. We recommend reviewing their privacy notice and their privacy settings.
07How long we keep your information
In short: Only as long as necessary for the purposes set out here, unless the law requires longer.
No purpose in this notice requires us to keep your personal information for longer than the period during which you have an account with us, unless a longer retention period is required or permitted by law, for tax, accounting or other legal requirements.
When we have no ongoing legitimate business need to process your information, we will delete or anonymise it. Where that is not possible, for example because it sits in a backup archive, we will store it securely and isolate it from further processing until deletion is possible.
08How we keep your information safe
In short: Through a system of organisational and technical security measures, with the honest caveat below.
We have implemented appropriate and reasonable technical and organisational security measures designed to protect any personal information we process.
However, no electronic transmission over the internet and no information storage technology can be guaranteed to be 100% secure. We cannot promise that hackers, cybercriminals or other unauthorised third parties will never defeat our security and improperly collect, access, steal or modify your information. Transmission to and from our Services is at your own risk, and you should only use the Services within a secure environment.
09Your privacy rights
In short: Depending on where you live, you may have rights giving you greater access to and control over your personal information.
In the EEA, UK, Switzerland and Canada these may include the right to request access and obtain a copy of your personal information, to request rectification or erasure, to restrict processing, to data portability where applicable, and not to be subject to automated decision-making. If a decision producing legal or similarly significant effects were ever made solely by automated means, we would tell you, explain the main factors, and offer a simple way to request human review. In certain circumstances you may also object to processing.
Withdrawing your consent
Where we rely on your consent, you can withdraw it at any time by contacting us, or by updating your preferences. Withdrawal does not affect the lawfulness of processing before it, nor processing carried out on a lawful basis other than consent.
Your account
You can review or change the information in your account, or terminate it, by logging in to your account settings. On termination we will deactivate or delete your account and information from our active databases. We may retain some information to prevent fraud, troubleshoot problems, assist investigations, enforce our legal terms, or comply with legal requirements.
If you want to complain
You can complain to us directly using the contact details below. If you are in the EEA or UK and believe we are processing your information unlawfully, you may also complain to your Member State data protection authority or the UK data protection authority. In Switzerland, contact the Federal Data Protection and Information Commissioner.
If you complain to us we will acknowledge it within 30 days, investigate without unjustifiable delay, keep you informed of progress, and explain the outcome.
10Do Not Track and Global Privacy Control
There is no finalised uniform standard for recognising Do Not Track signals, so we do not currently respond to DNT browser signals or similar mechanisms. If a standard is adopted that we must follow, we will say so in a revised version of this notice.
We do recognise and honour Global Privacy Control. If you use a browser or extension that supports GPC, we treat it as a valid opt-out of the sale or sharing of your personal information for targeted advertising under applicable state privacy laws, and apply it automatically without any further action from you. More at globalprivacycontrol.org.
11United States residents
In short: Residents of many US states have rights to access, correct, obtain a copy of, or delete their personal information.
This applies if you live in California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah or Virginia. Those rights may be limited in some circumstances by applicable law.
Categories of personal information we collect
The categories we have collected in the past twelve months. Examples are illustrative of each category and do not all describe information we hold about you.
Categories of personal information collected in the past twelve months| Category | Examples | Collected |
|---|
| AIdentifiers | Contact details such as real name, alias, postal address, telephone number, unique personal identifier, online identifier, IP address, email address, and account name | YES |
|---|
| BPersonal information as defined in the California Customer Records statute | Name, contact information, education, employment, employment history, and financial information | NO |
|---|
| CProtected classification characteristics under state or federal law | Gender, age, date of birth, race and ethnicity, national origin, marital status, and other demographic data | NO |
|---|
| DCommercial information | Transaction information, purchase history, financial details, and payment information | NO |
|---|
| EBiometric information | Fingerprints and voiceprints | NO |
|---|
| FInternet or other similar network activity | Browsing history, search history, online behaviour, interest data, and interactions with our and other websites | NO |
|---|
| GGeolocation data | Device location | NO |
|---|
| HAudio, electronic, sensory, or similar information | Images and audio, video or call recordings created in connection with our business activities | NO |
|---|
| IProfessional or employment-related information | Business contact details, job title, work history, and professional qualifications | NO |
|---|
| JEducation information | Student records and directory information | NO |
|---|
| KInferences drawn from collected personal information | A profile or summary about an individual’s preferences and characteristics | NO |
|---|
| LSensitive personal information | : | NO |
|---|
Your rights
- To know whether we are processing your personal data
- To access your personal data
- To correct inaccuracies in it
- To request its deletion
- To obtain a copy of the personal data you previously shared with us
- Not to be discriminated against for exercising these rights
- To opt out of processing for targeted advertising, sale of personal data, or profiling with legal or similarly significant effects
Depending on your state you may also have the right to a list of the categories of third parties we have disclosed personal data to, a list of specific third parties, or the right to review and question how personal data has been profiled.
How to exercise them
Submit a data subject access request, email us, or use the contact details at the bottom of this page. On receiving a request we need to verify your identity, using only the information in your request. If we cannot verify you from what we already hold, we may ask for more.
You may designate an authorised agent. We may deny a request from an agent who does not provide proof of valid authorisation. If we decline to act on your request, you may appeal by emailing us; we will respond in writing with our reasons, and if the appeal is denied you may complain to your state attorney general.
Selling and sharing
We have not disclosed, sold or shared any personal information to third parties for a business or commercial purpose in the preceding twelve months, and we will not sell or share personal information belonging to website visitors, users or other consumers.
12Other regions
Australia and New Zealand
We collect and process your personal information under Australia’s Privacy Act 1988 and New Zealand’s Privacy Act 2020. This notice satisfies the notice requirements of both. If you do not provide the personal information necessary for a given purpose, it may affect our ability to offer you the products or services you want, respond to your requests, manage your account, or confirm your identity and protect your account.
You may request access to or correction of your personal information at any time. If you believe we are processing it unlawfully you can complain to the Office of the Australian Information Commissioner or the Office of the New Zealand Privacy Commissioner.
Republic of South Africa
You may request access to or correction of your personal information at any time. If you are unsatisfied with how we handle a complaint, you can contact The Information Regulator (South Africa): general enquiries at enquiries@inforegulator.org.za, complaints at POPIAComplaints@inforegulator.org.za.
13Updates to this notice
In short: Yes, we will update it as necessary to stay compliant with relevant laws.
The updated version will be marked by a revised date at the top. If we make material changes we may notify you by prominently posting a notice, or by contacting you directly. We encourage you to review it from time to time.
14How to contact us, and how to get your data
To review, update or delete the personal information we hold about you, submit a data subject access request. For anything else about this notice, email support@flashfx.app.
FlashFX S.r.l.xxv aprilePontecchio, RO 45030ItalyThis page reproduces our privacy notice in full. The privacy policy is the authoritative version. If the two ever disagree, that one governs. See also our terms of service and acceptable use policy.
