Animaator – Privacy Policy
1. Data controller
Animaator OÜ (“we”, “us”). Contact: info@animaator.ee.
2. What data we process
- Account data: email, display name/username, auth provider metadata.
- Service data: projects, animations, gallery submissions, preferences, profile images.
- Billing data: subscription status, Stripe customer and subscription IDs (payment cards handled by Stripe).
- Technical data: logs for security and debugging; optional analytics events (if enabled).
3. How we collect data
- Sign-in via Supabase Auth (email/password) or Google (OAuth, email and basic profile).
- Data you create/upload (projects, GIF exports, gallery posts).
- Payments through Stripe Checkout (we do not store card details).
4. Purposes and legal bases
- Provide and operate the app (contract performance).
- Authenticate users (legitimate interest/contract).
- Billing and subscriptions via Stripe (contract/legal obligation).
- Moderate public gallery (legitimate interest, user consent to publish).
- Product improvement and analytics (legitimate interest or consent, if analytics enabled).
- Security, fraud prevention, and abuse handling (legitimate interest/legal obligation).
5. Sharing and processors
- Supabase: authentication, database, storage, and hosting.
- Stripe: payments and subscription management.
- Google: optional sign-in, and Google Analytics if enabled.
- We do not sell personal data. Public gallery submissions may be visible to all users when approved.
6. Storage location and retention
Data is hosted on Supabase (database and storage buckets); billing data resides in Stripe. Account and project data are kept while your account exists. Billing records may be kept as required by tax and accounting law. Logs are retained for a limited period for security/debugging. You can request deletion of your account; some data may be retained where law requires.
7. Cookies and local storage
We use cookies/local storage for authentication sessions and preferences. Analytics cookies may be set if Google Analytics is enabled; you can opt out via browser settings or blockers.
8. Your rights (GDPR)
- Access, correction, deletion, restriction, and portability where applicable.
- Object to processing based on legitimate interest and to direct marketing/analytics.
- Withdraw consent where processing relies on consent.
- Lodge a complaint with your data protection authority.
9. Security
We use TLS and Supabase-managed security controls. No method is 100% secure; keep your credentials safe and log out on shared devices.
10. Minors
The service is intended for users 16+. We do not knowingly collect data from younger users.
11. Changes
We may update this policy. Material changes will be communicated in-app or by email when feasible. Continued use after changes means acceptance.
12. Contact
Privacy questions: info@animaator.ee.