This Privacy Policy explains how VIDEA — a service operated by Plastico Film — collects, uses, and protects your personal data in accordance with the EU General Data Protection Regulation (GDPR).

1. Data Controller

Plastico Film
Aldo Montesano
Elsa-Brändström-Straße 10, 13189 Berlin, Germany
Email: hello@videa.pro

2. What Data We Collect

Account data: email, name, password hash (via Supabase Auth)
Order data: shooting address, date, time, scripts, brief, references
Uploaded content: reference videos, graphic elements, brand assets
Company info: website, social handles, industry (optional, for script personalization)
Social connections: if you connect Instagram (Meta) or YouTube (Google), we store encrypted access tokens and aggregated performance metrics (views, likes, comments)
Technical data: IP address, browser type, timestamps (server logs)

3. Legal Basis (Art. 6 GDPR)

Contract performance (Art. 6(1)(b)): processing orders, delivering videos
Legitimate interest (Art. 6(1)(f)): service security, fraud prevention
Consent (Art. 6(1)(a)): social media connections, optional analytics
Legal obligation (Art. 6(1)(c)): tax retention, accounting

4. Data Processors (Sub-processors)

We engage the following categories of GDPR-compliant service providers:

Cloud database, authentication & storage provider (EU region)
Transactional email provider (order confirmations)
AI inference gateway for script generation
AI embedding provider for content similarity search
Meta Platforms (Instagram) — only if you connect your Instagram account (token + metrics retrieval)
Google (YouTube) — only if you connect your YouTube channel (token + metrics retrieval)

Data Processing Agreements (Art. 28 GDPR) are in place with each processor. A complete list of named sub-processors is available on request at hello@videa.pro.

5. International Transfers

Some processors (including our transactional email provider, Google, and Meta) may transfer data outside the EU. Transfers are protected by Standard Contractual Clauses (SCCs) approved by the European Commission.

6. Retention

Account data: until account deletion
Order data: 10 years (German tax law — § 147 AO)
Uploaded media: deleted 90 days after order completion unless required for delivery
Social tokens: until you disconnect or revoke access

7. Your Rights (Art. 15–22 GDPR)

Right of access
Right to rectification
Right to erasure ("right to be forgotten") — see Data Deletion
Right to restriction of processing
Right to data portability
Right to object
Right to lodge a complaint with a supervisory authority

To exercise any right, email hello@videa.pro.

8. Cookies

We use only essential cookies required for authentication and session management. We do not use tracking or advertising cookies.

9. Social Media Integrations

If you connect a social account, we receive and store the data listed below. Tokens are stored encrypted at rest. We never post on your behalf, and you can disconnect at any time from your dashboard.

Instagram (Meta): platform user ID, username, encrypted access token, and aggregated post metrics (views, likes, comments, shares).
YouTube (Google): channel ID, channel name, encrypted access token, and aggregated video metrics (views, likes, comments).

10. Changes to This Policy

We may update this policy. Material changes will be communicated by email.