Privacy Policy

At Picnosia, protecting your privacy is our top priority. This Privacy Policy explains what information we collect, how we use it, and what rights you have in accordance with the General Data Protection Regulation (GDPR) and applicable French laws.

1. Data Controller

The data controller responsible for your personal data is:

Picnosia SAS
29 Rue de l’Église Saint-Pierre
33240 Val de Virvée — France
Email: contact@picnosia.com

2. Data We Collect

We collect only the data necessary for the proper functioning of our services:

• Account data (email, encrypted password, language preferences);
• Billing data (Stripe) for paid subscriptions;
• Technical data (IP address, browser, login logs);
• User-generated content (images, videos, prompts).

3. Use of Data

The collected data is used to:

• Allow you to create and manage your account;
• Ensure the technical operation of the platform;
• Improve the quality of the service and user experience;
• Manage subscriptions, payments, and invoices;
• Guarantee the security and confidentiality of your creations;
• Comply with legal and tax obligations.

4. Data Confidentiality and Storage

All creations generated on Picnosia — including those made by free users — are strictly private. No image, video, or prompt is made public or used to train external models. Data is hosted on secure servers located in Europe (AWS / Outscale).

5. Data Retention

Account data is kept as long as the account remains active. If you delete your account, your data will be permanently removed within 30 days unless legal obligations require otherwise (e.g. accounting, fraud prevention, or security).

6. Cookies and Analytics

Picnosia uses cookies strictly necessary for website operation (authentication, language, preferences). We also use anonymized analytics cookies to measure audience metrics and advertising cookies only for users of the free plan. You can manage your cookie preferences at any time via the consent banner displayed on the site.

7. Data Sharing

We do not sell, rent, or share your data with third parties, except with service providers essential to platform operation (Stripe, hosting, GDPR-compliant analytics tools). All our subcontractors are contractually bound to confidentiality and data protection.

8. Your Rights

Under the GDPR, you have the following rights:

• Right to access, rectify, and delete your data;
• Right to restrict or object to processing;
• Right to data portability;
• Right to withdraw your consent at any time.

To exercise your rights, please contact us at: privacy@picnosia.com.

9. Security

Picnosia implements advanced security measures (SSL encryption, secure authentication, regular backups) to protect your data from unauthorized access, alteration, or disclosure.

10. Updates

We may update this policy to reflect legal, technical, or organizational changes. In case of major updates, a notice will be displayed on the website and/or sent by email.

Last updated: October 2025