Privacy policy

This notice explains what personal data is processed when you use this site, for what purposes and what rights you can exercise, under Regulation (EU) 2016/679.

Data controller

Malatacca Ottavio, Via Nino Bixio 33, 98123 Messina (ME), Italy. Contact: [email protected].

What we process

• Account data: name, email address and password (stored only in hashed form).
• Order data: package purchased, amount, job status, brief and chat messages.
• Uploaded files: the material you send for the work and the delivered results.
• Payment data: handled directly by SumUp. We only receive the transaction identifier and the outcome.
• Language preference: a cookie remembering which language you want the site in.
• Attribution data: with your consent, the campaign parameters you arrived from, to understand which ads work.
• Technical data: IP address and connection information, for security and abuse limitation.

Why we process it

• Performance of the contract: managing the order, editing the video, communicating with you (Art. 6(1)(b) GDPR).
• Legal obligations: invoicing and accounting retention (Art. 6(1)(c) GDPR).
• Consent: measuring where visits come from (Art. 6(1)(a) GDPR), withdrawable at any time.
• Legitimate interest: site security and abuse prevention (Art. 6(1)(f) GDPR).

How long we keep it

Account data stays while the account is active. Transaction data is retained by SumUp under its own policies; all we keep is the payment identifier, for as long as the order remains viewable. Working files are kept for six months after delivery and then deleted; you can ask for earlier deletion at any time. Attribution data lasts thirty days.

Who receives it

We use the following providers, acting as processors:

• SumUp — payment processing;
• Appwrite — database and file storage (servers in the European Union);
• Resend — transactional email delivery;
• Render — application hosting;
• Cloudflare — network and protection services.

Data is never sold or shared for third-party marketing.

Your rights

You can request access, rectification, erasure, restriction and portability, and object to processing based on legitimate interest. Write to [email protected]: we answer within thirty days. You may also lodge a complaint with your national data protection authority.

Security

The site is served only over encrypted connections. Sessions use cookies that JavaScript cannot read, uploaded files are not reachable from public URLs, and every request is authorised on the server before any content is returned.