LEGAL / DRAFT TEMPLATE
Privacy notice
Template — complete before launch. Fields in [square brackets] need your details and policy decisions. This document is a draft, not finalized legal terms.
Controller and contact
Controller: [COMPANY NAME AND REGISTERED ADDRESS]. Privacy contact: [EMAIL AND POSTAL ADDRESS]. Data protection officer, if appointed: [CONTACT]. Effective date: [DATE].
Account and service data
Account information includes a username, email, authentication records and membership status. The editor processes uploaded or imported video/audio, prompts, markers, edits, subtitles and voice references to provide the requested tools. [CONFIRM ALL DATA CATEGORIES, REQUIRED FIELDS AND CONSEQUENCES OF NOT PROVIDING THEM].
Purposes and legal bases
Operating an account and the requested editing service: [CONFIRM CONTRACTUAL NECESSITY]. Billing and statutory records: [CONFIRM CONTRACT / LEGAL OBLIGATION]. Security and abuse prevention: [IDENTIFY LEGITIMATE INTEREST AND BALANCING]. Optional marketing or trackers: [STATE PURPOSE AND CONSENT MECHANISM IF USED]. [DOCUMENT EACH PURPOSE, ITS LEGAL BASIS AND WHETHER THE DATA IS MANDATORY].
Recipients and international transfers
Drupal manages accounts; Stripe processes billing. Media storage, email delivery and AI processing may involve [LIST ACTUAL PROVIDERS, ROLES AND COUNTRIES]. [IDENTIFY AUTHORIZED INTERNAL RECIPIENTS, PROCESSORS AND ANY TRANSFERS OUTSIDE THE EEA WITH THEIR SAFEGUARDS]. Do not claim a storage region or training policy until verified.
Retention and deletion
[SET AND VERIFY RETENTION FOR ACCOUNTS, UPLOADS, GENERATED AUDIO, VOICE REFERENCES, EDITS, LOGS, BILLING RECORDS AND BACKUPS]. [EXPLAIN DELETION AFTER ACCOUNT CLOSURE, LEGAL RETENTION EXCEPTIONS AND BACKUP EXPIRY].
Your rights
Subject to applicable conditions, you may request access, correction, erasure, restriction or portability of your data, and object to certain processing. Where consent is the basis, it can be withdrawn. Contact [PRIVACY EMAIL] to exercise your rights. You may complain to the CNIL in France (cnil.fr) or your competent supervisory authority. [DESCRIBE IDENTITY VERIFICATION, RESPONSE PROCEDURE AND ANY AUTOMATED DECISIONS WITH SIGNIFICANT EFFECTS].
Media involving other people
Ensure you have a lawful basis and the necessary permissions to process other people’s personal data, images and voices. [CLARIFY THE CONTROLLER / PROCESSOR ROLES FOR CUSTOMER MEDIA AND PROVIDE A DATA PROCESSING AGREEMENT WHERE REQUIRED].
Cookies and changes
See the cookie notice for browser storage used by the website and editor. [DESCRIBE HOW MATERIAL POLICY CHANGES WILL BE COMMUNICATED].