FluidGhost (“FluidGhost”, “we”, “us”) operates the FluidGhost service at ghost.fluidvip.com (the “Service”). This policy explains what personal data we collect, how we use it, and your rights.

1. Scope

This policy applies to personal data processed when you use the Service or visit our website. FluidGhost shares one account system with the other Fluidvip services, so your account data is common to them; the photos and videos you process here are specific to this Service.

2. Data we collect

3. How we use data

To provide, operate and secure the Service; to process the files you upload and return the variants; to meter and bill usage; to provide customer support; to improve and develop features; and to comply with legal obligations.

4. Legal bases (where the GDPR applies)

Performance of a contract (providing the Service); our legitimate interests (securing and improving the Service); consent (where required); and compliance with legal obligations.

5. What we do not do with your files

We do not sell your personal data. We do not use the photos or videos you upload to train models, and we do not publish or share them with anyone other than the providers listed below acting on our behalf to run the Service.

6. Service providers / processors

We share personal data only as necessary with providers acting on our behalf under appropriate agreements, including: our authentication and database provider (self-hosted Supabase, running on our infrastructure); Cloudflare (R2 object storage, network and DNS); FluidCloud, our own media-storage service, which holds uploaded and processed files; Redis, for the processing queue; and our hosting and deployment infrastructure and email provider.

7. Data retention

We retain personal data for as long as your account is active or as needed to provide the Service, after which we delete or anonymise it within a reasonable period, unless a longer retention period is required by law. Uploaded files and their variants remain available in your account until you delete them or your account is closed. You may request deletion (see Your rights).

8. Your rights

Depending on your location, you may have the right to access, correct, delete, export (portability), restrict, or object to processing of your personal data, and to withdraw consent. To exercise these rights, contact [email protected]. You may also lodge a complaint with your local data-protection authority.

9. Security

We use industry-standard safeguards, including encryption in transit and access controls. No system is completely secure, and we cannot guarantee absolute security.

10. International transfers

Your data may be processed in countries other than your own. Where required, we rely on appropriate safeguards (such as standard contractual clauses) for such transfers.

11. Children

The Service is not directed to children. You must be at least 18 years old to create an account, and we do not knowingly collect personal data from anyone under that age. If you believe someone under 18 has provided us personal data, contact us and we will delete it.

12. Cookies

We use essential cookies for authentication and session management and may use limited analytics cookies. A cookie banner or preferences control will be added where legally required.

13. Changes

We may update this policy from time to time; we will notify you of material changes in-product or by email and update the effective date.

14. Contact

Questions about this policy, or to exercise your rights: [email protected].