1. Controller and contact
The controller is OSIAX S.R.L., VAT number 03095520999. Contact hello@netflaix.net for information or to exercise your rights. This notice covers Netflaix under Regulation (EU) 2016/679 (GDPR).
2. The data we process
We process your wallet identifier, creator name, email where supplied, language and last-watch preferences; stories, scripts, dialogue, notes, character photos and generated files; Gas balances, contributions, order references and payment status; technical information such as IP addresses, requests, errors and job status.
Face photos and references help depict characters and check consistency. Netflaix does not provide biometric authentication. You may describe fictional characters without uploading photos. Do not provide unnecessary sensitive or confidential information.
Stripe collects complete card details directly. We receive customer, payment-method and transaction references, results and, where available, email. We do not store the full card number or security code.
3. Purposes and legal bases
Contract performance and steps you request before a contract (GDPR art. 6(1)(b)): developing stories, producing and hosting films, managing wallets and funding, carrying out edits and providing support. Necessary project data is required to perform these activities.
Legal obligations (art. 6(1)(c)): accounting, tax, data-subject requests and valid authority requests. Legitimate interests (art. 6(1)(f)): security, abuse prevention, troubleshooting and defending rights in disputes, subject to your applicable right to object.
Photos and public email are optional. Your email appears on the movie page only if you choose to publish it; contact us to withdraw that choice. Any processing requiring consent is activated only with that consent, which may be withdrawn without affecting earlier lawful processing. We do not sell personal data or use the site for advertising profiling.
4. What becomes visible
When you approve publication, others can see and share the movie or trailer, poster, title, description and creator name, plus email if you made it public. Funding information may appear during fundraising. Drafts are not listed in the catalogue before an approved publication.
Media is distributed through storage links. Anyone holding a direct link may access that file even if it is not listed in the catalogue. The service is not a confidential file vault. Removing material from the site does not erase copies others already downloaded or independently shared.
5. Providers and recipients
We use Vercel for hosting, files, production processes and technical logs; Neon for the database; OpenAI and fal.ai, including model providers available through fal.ai, to generate, analyse and review text, images, audio and video. They receive the content necessary for the operation, including photos used as references.
Stripe handles payments and also acts as an independent controller for some legal and fraud-prevention purposes. Resend delivers magic links and other service emails. Advisers and authorities may receive data within their duties or legal requirements.
Netflaix does not use projects to train its own AI models. Provider processing follows the applicable service contracts and conditions. Social sharing links activate when you choose to share; the receiving network applies its own privacy notice.
6. Processing outside the European Economic Area
Some providers and the database, storage and production infrastructure operate in the United States or other countries outside the EEA. Transfers subject to GDPR require an applicable adequacy decision or other safeguards under the Regulation, such as standard contractual clauses and necessary supplementary measures. Contact hello@netflaix.net for information about recipients and safeguards for your project, or a copy of those safeguards.
7. Retention and deletion
We keep projects, materials and wallet data for as long as needed to provide the service, keep films you want to retain available and manage remaining credit, or until a deletion request compatible with legal obligations. Email us to request removal of a project, photos or account data.
Records subject to accounting retention are kept for the legally required period, generally ten years. Data needed for disputes or investigations may be retained for those purposes. Technical logs follow the retention periods of the services used and are retained for operational and security needs.
Backups and migration archives are separate from the catalogue and maintained for recovery, reconciliation and protection of rights. Deletion requests are assessed against those copies too. Deleted data must not be returned to ordinary use following a restore.
9. Your rights and reports
Where applicable, you may request access, correction, deletion, restriction, portability or objection, and withdraw consent. Email hello@netflaix.net; we may request proportionate information to verify identity. We respond within one month, except for permitted extensions for complex requests, which we explain to you.
You may complain to the Italian Garante per la protezione dei dati personali or your competent supervisory authority. Automated quality or safety checks may pause a job. Contact us to request human review and challenge the result.
If a photo or film depicts you, or a child in your care, without necessary permission, send us the link and relevant information. Creating projects and making purchases is intended for adults; creators must obtain appropriate permission for children depicted.