FIXYOUR/FILM

Privacy Notice

Last updated: 14 July 2026

1. Who we are

This service (FixyourFilm) is operated by Fixyourfuture, based in the Netherlands ("we", "us", "our"). Fixyourfuture is the data controllerfor personal data processed through this platform. You can reach us at hello@filmforge.nl.

2. Personal data we collect

  • Account data: email address, display name, locale, hashed credentials.
  • Product data: projects, prompts, uploaded reference images, generated assets, credit balance and transactions.
  • Support data: messages you send us via the contact form or email.
  • Technical data: IP address, device/browser information, log data, and cookies strictly necessary to operate the service.

3. Why we process it and on what legal basis

  • Providing the service (account creation, rendering, storing your projects) — necessary for performance of our contract with you.
  • Security, fraud prevention and abuse detection — our legitimate interest in keeping the platform safe.
  • Customer support — performance of the contract and our legitimate interest in responding to enquiries.
  • Legal and tax compliance (e.g. invoicing records) — compliance with a legal obligation.
  • Product improvement — our legitimate interest, using aggregated or minimised data.

4. Who we share it with

  • Paddle.com Market Ltd ("Paddle") — our Merchant of Record. Paddle processes your payment, billing address, tax data and related order information to complete the sale, manage subscriptions/one-off purchases, issue invoices, handle refunds and comply with tax law. See Paddle's privacy notice.
  • Hosting and infrastructure providers (e.g. Cloudflare, Supabase) used to run the platform.
  • AI/rendering providers (e.g. xAI, ElevenLabs, Runway, Suno) that execute the generations you request. Prompts and reference material you submit are transmitted to the provider you invoke.
  • Email delivery providers for transactional email.
  • Authorities where we are legally required to disclose.

We do not sell your personal data.

5. International transfers

Some processors are located outside the EEA/UK. Where that is the case, transfers are covered by Standard Contractual Clauses or an equivalent safeguard.

6. Retention

  • Account data: for as long as your account exists, plus up to 90 days after deletion for backups.
  • Projects and generated assets: until you delete them or delete your account.
  • Billing and tax records: 7 years, as required by Dutch tax law.
  • Support correspondence: up to 24 months.

7. Your rights

Under the GDPR you have the right to:

  • access your personal data;
  • rectify inaccurate data;
  • erase your data ("right to be forgotten");
  • restrict or object to processing;
  • data portability;
  • withdraw consent where processing is based on it;
  • lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

To exercise these rights, email hello@filmforge.nl. We respond within one month.

8. Security

We apply appropriate technical and organisational measures including TLS encryption in transit, encryption at rest for stored secrets (AES-256-GCM), row-level security on our database, least-privilege service credentials and access logging.

9. Cookies

We use only strictly necessary cookies for authentication and session state. We do not use advertising cookies. Paddle may set cookies during checkout that are essential to completing the payment.

10. Changes

We may update this notice; material changes will be announced in-app or by email.