Privacy Policy
1. Data Controller
This Privacy Policy describes how your personal data is collected, used, and protected by:
- Company Name: HUMI DIGITAL SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ
- KRS: 0000897633
- NIP: 9492247885
- REGON: 388769843
- Address: Krótka 33, 42-202 Częstochowa, Polska
- Legal Form: Spółka z ograniczoną odpowiedzialnością
- Contact Email: kamil@humi.digital
2. Legal Basis for Processing
We process your personal data based on the following legal grounds under GDPR Article 6:
- Contract performance (Art. 6(1)(b)): To provide our video generation services
- Legitimate interests (Art. 6(1)(f)): For service improvement, security, and fraud prevention
- Legal obligation (Art. 6(1)(c)): For tax and accounting requirements
- Consent (Art. 6(1)(a)): For marketing communications (where applicable)
3. Data We Collect
3.1 Account Information
- Email address
- Name (if provided)
- Account creation date
- Authentication data (encrypted)
3.2 Service Usage Data
- Video scripts you submit
- Generated videos
- Credit balance and transaction history
- Service usage statistics
3.3 Technical Data
- IP address
- Browser type and version
- Device information
- Usage logs and analytics
3.4 Payment Information
- Payment method details (processed by Stripe)
- Billing address
- Transaction records
4. How We Use Your Data
We use your personal data for the following purposes:
- Providing and maintaining our video generation service
- Processing payments and managing your credit balance
- Communicating with you about your account and service updates
- Improving our service quality and developing new features
- Ensuring service security and preventing fraud
- Complying with legal and regulatory requirements
5. Data Sharing and Third Parties
We may share your data with:
- Stripe: For payment processing (subject to Stripe's privacy policy)
- Supabase: For database and authentication services
- Google Cloud Platform: For video storage and processing
- Legal authorities: When required by law or to protect our legal rights
We do not sell, rent, or otherwise commercially exploit your personal data.
6. Data Retention
We retain your personal data for the following periods:
- Account data: Until account deletion or 3 years of inactivity
- Generated videos: Stored until you delete them or your account is closed
- Payment data: 7 years for tax and accounting purposes
- Technical logs: Up to 24 months
7. Your Rights Under GDPR
You have the following rights regarding your personal data:
- Right of access: Request information about your personal data
- Right to rectification: Correct inaccurate or incomplete data
- Right to erasure: Request deletion of your personal data
- Right to restrict processing: Limit how we use your data
- Right to data portability: Receive your data in a portable format
- Right to object: Object to processing based on legitimate interests
- Right to withdraw consent: Withdraw consent for specific processing activities
8. Data Security
We implement appropriate technical and organizational measures to protect your personal data:
- Encryption of data in transit and at rest
- Access controls and authentication
- Regular security audits and updates
- Staff training on data protection
9. International Data Transfers
Your data may be processed in countries outside the European Economic Area (EEA). When this occurs, we ensure adequate protection through:
- Adequacy decisions by the European Commission
- Standard Contractual Clauses (SCCs)
- Other appropriate safeguards under GDPR
10. Cookies and Tracking
We use essential cookies for service functionality and analytics. You can control cookie preferences through your browser settings. For detailed information, please see our Cookie Policy.
11. Children's Privacy
Our service is not intended for children under 16 years of age. We do not knowingly collect personal data from children under 16. If you become aware that a child has provided us with personal data, please contact us.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any significant changes via email or through our service interface. Continued use of our service after changes constitutes acceptance of the updated policy.
13. Contact Information
For questions about this Privacy Policy or to exercise your rights, please contact us:
- Email: kamil@humi.digital
- Address: Krótka 33, 42-202 Częstochowa, Polska
- Company: HUMI DIGITAL SP. Z O.O.
14. Supervisory Authority
You have the right to lodge a complaint with the Polish Data Protection Authority (UODO):
Urząd Ochrony Danych Osobowych
ul. Stawki 2, 00-193 Warszawa, Polska
Website: uodo.gov.pl
Last updated: October 16, 2025