Privacy Policy

Miravela AI (“we”) is an AI image and video production service, operated by ECD – Estée Creative Direction (see the legal notice). This policy explains what data we process, why, with whom, and the rights you have. For any question: info@miravela.ai.

Data we process

• Account: name, email address, and the sign-in history needed for authentication.
• Project content: creative briefs, reference photos you entrust to us, generated images and videos, and your comments / approvals.
• Technical & billing data: technical logs, session cookies, and billing information.

Why (purposes) and on what basis

• Provide the service (create, generate and deliver visuals) — basis: performance of the contract.
• Security and abuse prevention — basis: legitimate interest.
• Billing and accounting obligations — basis: legal obligation / contract.

Who we share with

We use technical providers (“sub-processors”) strictly to run the service. The full, up-to-date list is on the Sub-processors page (including Anthropic, OpenRouter, Supabase, Vercel, Google, Resend). We never sell your data and never share it for advertising.

Transfers outside the European Union

Your data is hosted in the European Union (Supabase, Paris region). Some providers are located in the United States; those transfers are governed by Standard Contractual Clauses (SCCs) approved by the European Commission.

How long we keep it

Active projects are kept for the duration of our relationship. Completed projects stay accessible for about 90 days, then are archived and deleted. Account data is kept until the account is closed, plus legal retention periods (e.g. accounting).

Your rights

You have the right to access, rectify, erase, port, restrict and object. To exercise them, email info@miravela.ai. You may also lodge a complaint with the French data authority, the CNIL (cnil.fr).

Cookies

We use essential cookies only (sign-in and session). No advertising trackers, no third-party analytics — which is why no consent banner is needed.

Security

Data is encrypted at rest and in transit, every client is strictly isolated from the others, and access is limited to what is strictly necessary.

Minors

Miravela AI is a professional (B2B) service and is not directed at minors.

Changes

This policy may change; the last-updated date is shown at the top of the page.