The German version is the binding one. This English text is an informational translation. If they differ, the German version applies.
Privacy policy
Information under Art. 13 and 14 GDPR
1. Controller
Oleksandr Makovetskyi, Kleeblatt 64, 42119 Wuppertal, Germany
Phone: +49 170 9054363 · E-mail: [set e-mail address for Nuvocue]
We have not appointed a data protection officer. [check: obligation under § 38 BDSG]
2. In short
The website uses no cookies, no analytics and no tracking. Fonts are loaded from our own server, not from Google or any other third party. Videos you record in the app stay on your device.
3. Visiting the website, server logs, hosting
When you open a page, the server stores technically necessary data: IP address, date and time, requested page, amount of data, browser type. Purpose: secure and stable operation. Legal basis: Art. 6(1)(f) GDPR. Retention: [enter period, e.g. 7 days].
Hosting: our own server, run at Metaliance ISP Systems e.K. (Serverdiscounter), Friedrichstraße 155, 10117 Berlin. [check server location] A data processing agreement under Art. 28 GDPR exists with the provider. [check]
4. Data in the app on your device
The app stores scripts, takes and settings in your browser storage (IndexedDB, local storage). This data stays on your device and does not reach us unless you use an account. Recorded videos are not uploaded. You can delete all local data in your browser settings.
5. Account and script sync
If you create an account, we process your e-mail address and your script texts to let you sign in and sync scripts between your devices. Legal basis: Art. 6(1)(b) GDPR. Retention: until you delete the account [enter period for backups]. Deleting and exporting your data is planned in the app. [check before launch whether implemented]
6. Sign-in e-mails (Resend)
We send the sign-in link by e-mail through Resend (Plus Five Five, Inc., USA) as processor. Your e-mail address is passed to Resend. Transfer to a third country relies on the EU-US Data Privacy Framework or standard contractual clauses. [check]
7. Payments (Stripe) – once Pro starts
Stripe processes Pro payments (Stripe Payments Europe, Limited, Ireland, and Stripe, LLC, USA). We receive payment status, plan and a customer ID, not full card or bank details. Legal basis: Art. 6(1)(b) and (c) GDPR (tax and commercial record keeping). Retention of invoice data: [check, usually 8 or 10 years]. This feature is not active yet.
8. Sign-in with Google (optional) – planned
If we offer sign-in with Google, we receive your e-mail address and name from Google if you agree. Google’s privacy policy also applies. This feature is not available yet. [check]
9. AI scriptwriter (OpenAI) – planned
If you use the AI scriptwriter, we send your input (idea, text) to OpenAI (OpenAI Ireland Ltd., Ireland, and OpenAI, L.L.C., USA) to create a script draft. This happens only with your explicit consent (Art. 6(1)(a) GDPR), which you can withdraw at any time. Do not enter sensitive data. This feature is not available yet. [check third-country basis and processing agreement]
10. Auto-subtitles – planned
Auto-subtitles would require processing audio or video. Before that, we will tell you about the provider, purpose and duration and ask for your consent. Until then nothing is uploaded. [complete at launch]
11. Cookies and local storage
The website sets no cookies. After you sign in to the app, we set one technically necessary session cookie so you stay signed in. This needs no consent (§ 25(2) no. 2 TDDDG). Browser local storage is used only to keep your scripts and settings. Cookie lifetime: [enter].
12. Recipients
Recipients are only the providers named above (hosting, Resend, later Stripe, OpenAI), to the extent needed. We do not sell data.
13. Your rights
You have the right to:
- access (Art. 15 GDPR)
- rectification (Art. 16)
- erasure (Art. 17)
- restriction of processing (Art. 18)
- data portability (Art. 20)
- object to processing based on legitimate interests (Art. 21)
- withdraw consent for the future (Art. 7(3))
Write to us at the address above. Deletion and export will also be available in the app.
14. Complaint to a supervisory authority
You may complain to a data protection authority. The authority responsible for us is: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, www.ldi.nrw.de. [please check]
15. Changes
We will update this policy when features change, for example when accounts, payments or AI features start.
Last updated: [enter date]