PRIVACY
Privacy notice
The controller is Steingraf Limited · Dafnis 4b · 5296 Paralimni · Cyprus. Privacy requests can be sent to steingraf.ltd@gmail.com.
Data and purpose
For your film gift we process contact details, selected photos, videos, audio and text, usage permissions and project, order and payment data. Account access, preparation, production, private delivery, the order-confirmation PDF, the certificate provided once the film is finished and order support rely on contract or pre-contract steps (GDPR Art. 6(1)(b)). The order confirmation is generated from the contract as recorded when you ordered and is separate from the invoice. If you pay by bank transfer, we use the details of the incoming payment to match it manually to your order. The banks involved carry out the transfer itself. Without the contact, order and media information needed for your order, we cannot fulfil it.
Invoices and security
Invoice and tax records are processed to meet legal obligations (GDPR Art. 6(1)(c)). Security logs and abuse prevention support our legitimate interest in protecting accounts, payments and the service (GDPR Art. 6(1)(f)).
Signing in with Google
If you choose Google sign-in, we receive your basic profile information and email address for your account and its security. Sign-in does not permit advertising or publication of your film. You link an existing account yourself in account settings.
Hosting, payment and film production
Hostinger operates the application, database and private media delivery; Cloudflare supports delivery and protection. Stripe or PayPal processes the necessary payment data according to the method you select. Transactional email uses Hostinger SMTP. Required text or media may go to fal.ai or Replicate for the relevant production step. OpenAI or Anthropic is involved only when the actual text, analysis, review or narration workflow needs the data. Not every provider receives every order.
For neutral narration, OpenRouter (USA) forwards the required narration text to Google as the Gemini model provider. OpenAI and Anthropic may process data in the USA; international transfer arrangements are explained below.
Family photos and personal rights
You confirm that you may use the selected material for the private film gift, including ordinary, harmless family photos with children. The normal order flow does not ask for birth certificates or custody documents. Safety rules still apply. Audio is not automatically turned into a voice clone. Identity-based face or voice cloning requires separate permission; a deceased person’s face or voice is not artificially imitated. A neutral narrator may accompany a remembrance film.
Private films, sharing and reviews
Films are private initially. Saved favourites are visible only in your account. You can share the film, PDF or both yourself as files through your device. Alternatively, you explicitly create a public sharing link with a randomly generated identifier. Anyone with this link can view and download the selected files. You can disable the link; this prevents further access through that link but does not delete copies already saved or posts on other services. A shared PDF remains the version selected when the link was created; later changes are not included automatically. Recipients, apps or services receive what you share, and their privacy notices also apply. Nothing is automatically published to social networks. If you request an optional wording suggestion, we send the names you enter, the part of your film’s saved narration text needed for this and your optional note to OpenAI; photos, film files and payment data are not sent for this purpose. You review and edit the suggestion and choose whether to apply it to your message. Public reviews are moderated. Private ideas, favourites and messages are not automatically published or turned into catalogue stories.
Optional news by email
With a verified account you can choose to receive Videomento news. This is not required to order. We rely on your consent (GDPR Art. 6(1)(a)) and store the date and version of your choice. You can withdraw it at any time in your account or through our contact, with effect for the future. Necessary order emails are separate.
Optional reference discount
The optional 10% reference discount is a separate, unticked consent. It covers only the finished film on videomento.com and Videomento-owned organic social channels, not paid advertising, email marketing or partner reuse. You can order at the regular price without this consent. Withdrawing through our privacy contact stops future publication and controllable reuse; a discount already granted is not reclaimed.
Transfers outside the EEA
Some services we use may process necessary data in the USA or other countries outside the EEA. We do not promise EU-only processing or zero retention. The applicable transfer arrangements must be established for each service, account and actual data flow. The public contractual and privacy documents linked below describe possible standard terms; those links alone do not prove acceptance for our account or all required annexes, regions or additional safeguards. The transfer basis applicable to our Replicate account has not yet been established in the available evidence. A public link or this notice does not replace that missing evidence. Providers may retain data for limited periods under their applicable rules, for example to detect abuse.
How long we keep data
Your account, projects, favourites and finished films stay available as long as you keep your account. Originals and final films do not expire automatically. Hiding something doesn't delete it. We keep uploads and intermediate files as long as they are needed for your order, for corrections you request or for disputes. Deletion is not automatic: when you ask us to delete data, we check ownership and any legal holds, then delete it manually. If we must keep data by law, or need it as evidence in a specific dispute, we restrict it instead of deleting it. Tax books and records covered by section 30(2) of Cypriot Law 4/1978 are retained for at least six years from the later of the relevant filing deadline or actual filing of the tax return, including an amended return. Where a tax audit starts in the last year of that period, the statutory extension runs until the earlier of audit completion or one year after the audit began. Other statutory or specific dispute-related retention obligations are considered separately. Your photos and films are not part of these records. Drafts in your browser stay on your device until you clear them. A cookie's lifetime only limits access. Security logs are rotated by size, keeping two older files. Evidence about a specific security incident may be kept longer. Backup copies may remain until they are overwritten. We can't currently give a fixed period for this.
Your rights
You have the right to access, rectify and erase your data, to restrict its processing, to data portability and to object. You can withdraw consent at any time; this applies from then on. The newsletter is off by default, needs a separate confirmed sign-up and can be cancelled in your account. Publication as a reference is optional and off by default. To withdraw it, email steingraf.ltd@gmail.com. Reviews are private by default. We reply to requests within one month. If we lawfully need more time, we will tell you why. You can complain to a supervisory authority: in Cyprus, the Commissioner for Personal Data Protection, or the authority in the EU country where you live or work.
Sources
Last updated: 11 October 2026
Data about other people
The contractual basis for the order concerns the necessary processing of the customer’s data. Where your media contain data about other people, their privacy rights and, where relevant, representation of children must also be considered. Confirmation of media and depiction rights does not replace an independent data protection basis or required information to those people. Optional public reference use remains separate from private production.
Additional archive storage
Bunny is also used for private archival storage of media. Hostinger remains responsible for the application and database. An archive transfer does not mean that all films are delivered through Bunny. The applicable recipient and transfer arrangements depend on the storage path actually used; we do not promise EU-only processing or immediate deletion of every backup.