Privacy Policy

At Picnosia, your data privacy is a top priority. This Privacy Policy explains what information we collect, how we use it, and your rights in accordance with the General Data Protection Regulation (GDPR) and applicable French laws.

1. Data Controller

The data controller for personal data is:

Picnosia SAS
29, rue de l’église Saint-Pierre
33240 Val de Virvée — France
Email : contact@picnosia.com

2. Data Collected

We only collect data essential for the proper functioning of our services:

• Account data (email, encrypted password, language preferences);
• Billing data (Stripe) for paid subscriptions;
• Technical data (IP address, browser, connection logs);
• User-generated content (images, videos, prompts).

3. Use of Data

Collected data is used to:

• Enable the creation and management of your account;
• Ensure the technical operation of the platform;
• Improve service quality and user experience;
• Manage subscriptions, payments, and invoices;
• Guarantee the security and confidentiality of creations;
• Comply with our legal and tax obligations.

4. Confidentiality and Storage

All creations generated on Picnosia — including those by free users — are strictly private. No images, videos, or prompts are made public or used for training external models. Data is hosted on secure servers located in Europe (AWS / Outscale).

5. Data Retention Period

Account data is retained as long as the account is active. If an account is deleted, data will be erased within a maximum of 30 days, unless otherwise required by legal obligations (accounting, fraud, security).

6. Cookies and Analytics

Picnosia uses cookies strictly necessary for the proper functioning of the site (authentication, language, preferences). We also use anonymized analytical cookies to measure audience, and advertising cookies only for users of the free plan. You can manage them at any time from the consent banner displayed on the site.

7. Data Sharing

We do not sell, rent, or share your data with third parties, except for providers necessary for the operation of the service (Stripe, hosting provider, GDPR-compliant analytics tools). All our subcontractors are contractually bound to confidentiality and data protection.

8. Your Rights

In accordance with the GDPR, you have the following rights:

• Right to access, rectify, and erase your data;
• Right to restriction of processing and to object to processing;
• Right to data portability;
• Right to withdraw your consent at any time.

To exercise these rights, please contact us at: privacy@picnosia.com.

9. Security

Picnosia implements advanced security measures (SSL encryption, secure authentication, regular backups) to protect your data against unauthorized access, modification, or disclosure.

10. Changes to This Policy

We may update this policy to reflect legal, technical, or organizational changes. In the event of significant changes, a notification will be displayed on the website and/or sent via email.

Last updated: October 2025