Privacy policy
Last updated: 12 October 2026
Data controller: Chillax Capital, 54 passée des Vaches, 77630 Arbonne-la-Forêt, France, contact@lumette.app.
In short
- No account: your film is reached through a private link. Your email is optional.
- Your photos are shrunk in your browser before upload, without their metadata or GPS position.
- No face recognition. Your images are not used to train AI models.
- Music you add yourself never leaves your device.
- Everything is erased 30 days after payment, or 30 days after creation for an unpaid film.
Data processed
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Email, if you give it | Send you your film's private link and the payment confirmation; answer your messages | Contract | Erased with the film's files (see below) |
| Film settings: occasion, title, format, chosen length | Create and edit the film | Contract | Erased with the film's files |
| Photos and videos you add, shrunk and converted in your browser; photos without metadata (location included); date taken when the file states it | Create the film | Contract | 30 days after payment; for an unpaid film, 30 days after creation |
| Photos and videos added by family and friends through the invite link, with the first name or nickname they type | Add them to your film and show you who sent them | Contract (performance of the service requested by the film's author) | Same periods as above |
| Random key kept in a contributor's browser (local storage), not linked to their identity | Count what they sent and show them what they already added | Necessary for the service requested | Until the film is erased; can be removed at any time by clearing the site's data in the browser |
| Small thumbnails of the photos and videos, your comments and the film title, sent to our AI provider | Suggest the order, lengths, transitions and captions of the edit | Contract | On our side: edit versions and comments erased with the film's files. At Anthropic: 30 days at most, no training |
| Music description of the edit (style, tempo, mood in a few words, no personal data) and the generated tracks | Compose the suggested music | Contract | Tracks erased with the film's files |
| Your own audio file (track, voice memo) | Mix it into your film | Not collected: read by your browser only | Never sent to or stored by us |
| Amount, date, offer, payment identifier, and date and version of the waiver of the right of withdrawal | Accounting obligations; proof of the order | Legal obligation | 10 years, without your email or your files; invoice issued and kept by Link; no card data stored by us |
| Salted fingerprint of the IP address (never the address itself), counted per day | Limit abuse (films created per day) | Legitimate interest | 2 days at most |
| Cookieless audience measurement (Plausible): pages seen and steps reached, private page addresses (film, invite) hidden | Aggregated statistics | Legitimate interest | Aggregated data, without identifiers |
| Technical error reports (Sentry): error message, page concerned (private addresses hidden), browser and system; never your email, your photos or your IP address | Detect and fix outages | Legitimate interest | 30 days |
The website sets no advertising or audience measurement cookie.
What we do not do
- No face recognition, neither on our servers nor in your browser. The AI looks at small thumbnails to choose the order and the pace, without trying to identify anyone.
- No training: data sent to our AI providers is not used to train their models, in accordance with their commercial terms.
- No resale and no targeted advertising based on your photos.
- No upload of your own music: it stays in your browser.
Photos of children and of your family and friends
Lumette films often show children. Your film's link is private: share it only with people you trust, and send the invite link only to the family and friends you want to contribute. Before publishing a film, make sure the people who can be recognised agree; for a child, that decision belongs to their parents. Avoid images that reveal an address, a school or health information.
Processors
| Processor | Role | Data location |
|---|---|---|
| Vercel | Website hosting and file storage (Vercel Blob) | EU (Frankfurt) for the application; European Union (Paris); US company |
| Neon | Database | EU (Frankfurt) |
| Anthropic | Suggesting the edit from thumbnails, comments and title | United States |
| ElevenLabs | Composing the music, from descriptions without personal data | United States |
| Resend | Email delivery | United States |
| Stripe and Link (Stripe group, merchant of record for the transaction) | Payment, invoicing, VAT, fraud prevention | EU / United States |
| Plausible | Cookieless audience measurement | EU |
| Sentry (Functional Software) | Technical error tracking | EU (Frankfurt), US company |
These providers act on our instructions, as processors. Transfers outside the European Union are governed by the EU-US Data Privacy Framework where the provider participates in it, or by the European Commission's standard contractual clauses.
Your rights
You have the rights of access, rectification, erasure, restriction, objection and portability. To erase a film before the deadline, or for any question, write to contact@lumette.app with the link of the film concerned. A family member or friend who added photos can also write to us to have them removed. You may lodge a complaint with the CNIL (www.cnil.fr).