Legal
Privacy Policy — Disfame
Effective date: March 3, 2026
This Privacy Policy explains how Disfame collects, uses, and shares information when you use the Disfame SaaS platform.
1. Data Controller
Disfame, EI
200 rue de la Croix Nivert, 75015 Paris, France
Email: contact@disfame.com
2. Information We Collect
Account data: name, email, password (hashed by Firebase Auth).
Profile data: photo, preferences, onboarding progress.
Workspace data: team and brand information, collaborators, roles.
Content: assets, creatives, prompts, scripts, outputs, and related metadata.
Support communications: messages, feedback, and any files you send to us.
Usage data: pages viewed, features used, click paths, and similar analytics.
Device and technical data: IP address, browser type, OS, timestamps, error logs.
Cookies: essential cookies, analytics cookies (PostHog), affiliate attribution cookie.
Third parties: payment and subscription metadata from Polar, payout metadata from Stripe, public data sources via Bright Data when used.
3. Sensitive Data
Do not provide sensitive data (health, biometric, government IDs, financial account numbers).
4. How We Use Your Information
Provide, operate, and improve the Service.
Create and manage accounts, teams, permissions, and billing.
Generate content and deliver requested outputs.
Prevent abuse, enforce policies, and secure the Service.
Provide support and respond to requests.
Analyze product usage.
We do not use your data to train third-party AI models.
5. Legal Bases (EU/France)
Contract: account creation, authentication, Service delivery, billing.
Legitimate interests: security, fraud prevention, product improvement.
Consent: analytics cookies where required.
6. How We Share Information
Service providers under confidentiality obligations.
Authorities or legal parties if required by law or to protect our rights.
We do not sell personal data.
7. Subprocessors (Current)
Firebase (Auth, Firestore, Storage, Functions)
PostHog (analytics)
Polar (billing)
Stripe (affiliate payouts)
Bright Data (public data extraction)
OpenRouter (AI requests)
FAL (AI video generation)
KIE AI (voice generation)
Discord (feedback webhooks)
8. International Transfers
Some providers may process data outside France or the EU. Appropriate safeguards apply where required.
9. Data Retention
We retain data as long as your account is active or as needed for legitimate business purposes.
You can request deletion at any time by contacting contact@disfame.com.
Residual data may remain in backups for a limited period after deletion requests.
10. Your Rights
Access, correction, deletion, restriction, objection, portability, and withdrawal of consent where applicable.
Contact contact@disfame.com to exercise your rights.
You may file a complaint with the CNIL (France).
11. Security
We use reasonable technical and organizational measures to protect your data.
12. Children
The Service is intended for users 18+ only.
13. Cookies & Tracking
Essential cookies for login and security.
Analytics cookies (PostHog) to understand feature usage.
Affiliate attribution cookies if you arrive via a referral link.
You can manage cookies in your browser settings.
14. Automated Decision-Making
We do not use automated decision-making that produces legal or similarly significant effects on you.
15. Changes
We may update this policy from time to time. We will update the effective date above.
16. Contact
contact@disfame.com
