YOUR INFORMATION
Privacy for your video project
This policy covers Dnarnya Entertainment’s public website, custom AI-assisted video service, customer portal, support and customer reviews. We use information to handle your request, produce and deliver your video, secure your account and meet our legal obligations.
Reference photos, reviews and website analytics are optional. You can order without accepting analytics. To access delivered videos in the private library, create or sign in to an account and verify the email address used at checkout.
DNARNYA, trading as Dnarnya Entertainment, is the data controller. Our registered office is 28 rue Hussenet, 93110 Rosny-sous-Bois, France, RCS Bobigny 987 905 080. Contact support@dnarnya.com. Our Legal Notice contains the full business details.
YOUR ORDER
What we collect to fulfil an order
We receive your name, email address, selected duration and video format, intended use, project brief, order reference, consent choices and any reference links or other project information you supply. Required fields identify the order and tell us what to make; without them we cannot complete the purchase or service. A saved brief or selected photo alone does not confirm payment.
Stripe collects payment-method details, billing address, tax information and technical payment information. We receive payment status and relevant billing, transaction, refund and dispute records, but not full card numbers or card security codes. Qonto processes billing details and invoice records for our invoicing and accounting.
We use your email for order, invoice, account verification, delivery, support and relevant review or reward messages. A withdrawal or complaint collects the contact details, order identification and explanation needed to handle it. These operational records are separate from optional visitor analytics.
REFERENCE MATERIALS
Your brief, photos and finished videos
Optional reference photos upload when you select them, before you submit the form or pay. Cloudinary stores the originals privately and Perception Point scans files for malicious content. After checks pass, prepared image copies can be shown to you and our authorised production team. Displayed copies have metadata removed; the original upload may contain metadata.
We use your brief and authorised reference materials to create the agreed video. Relevant material may be processed by the AI generation, audio and editing services used for your project. These services and their processing locations depend on the production tools required. Contact us if you need information about the providers used for your project before sharing sensitive material.
Only provide material you are authorised to share and use, including a person’s image or voice. If material concerns someone else, inform them about this processing and obtain any required permission. A child’s likeness requires the permissions and safeguards described in our Acceptable Use Policy. Do not include unnecessary confidential or sensitive information.
Finished video files are stored privately for delivery. We do not publish your private reference photos or commissioned videos as portfolio examples without your separate permission.
PRIVATE CUSTOMER ACCESS
Accounts, delivery and security
Clerk provides account creation, sign-in and email verification. We process your verified email, account identifier, optional profile name and authentication/session information. Orders are linked to the verified checkout email so that the account can access its own orders, invoices, approved references and delivered videos.
All released files for an order can be accessed together, including subtitle variants where supplied. Later deliveries and future orders using the same verified email join your library; they do not automatically replace earlier delivered videos. Download your files if you want your own backup.
We record operational events such as uploads, deliveries, email status and security checks to operate and secure the service. Security controls also use technical request information and limited IP-derived identifiers to prevent abuse. Automated payment or security checks can block a request; contact support if you believe a block is incorrect.
CUSTOMER FEEDBACK
Public reviews and private eligibility records
For a paid, delivered order, we verify access to the checkout email through your matching verified account or an email code before allowing a review. If you submit a review, your chosen public name, star rating, review text, video duration, relevant dates and any incentive label appear publicly. Your email address, payment details and order reference are not displayed.
Eligible customers may receive one lifetime 25% review reward per checkout email, regardless of the star rating. Private purchase, reward and moderation records, including a hashed email eligibility record, help enforce the one-time offer and prevent misuse. Removing a review unpublishes it; it does not automatically erase records needed for those purposes or legal obligations.
Participation is optional. The Review Policy explains publication, moderation, editing, removal and the full reward conditions.
YOUR CHOICE
Optional analytics and essential storage
Google Analytics loads only after you choose “Accept analytics” on the public website. It measures visits to the homepage and AI Video Production page, broad referral sources and selected order steps: page views, viewing a package, starting an order and continuing to checkout. Selected duration and format can be included. A checkout event is not proof of payment.
Google processes browser, device, cookie identifiers and approximate location information. Our configured events do not send names, emails, briefs, photos, account information or private delivery links. Private portal pages are excluded. Google signals and advertising personalisation are disabled, and no advertising pixels are enabled.
The essential dnarnya_analytics_consent cookie remembers your choice for six months. If accepted, Google’s _ga cookies can last up to 60 days; our Analytics event and user retention setting is two months. Use “Cookie settings” at the bottom of the public homepage or order page to change your choice. Withdrawing stops future collection and clears these analytics cookies; it does not automatically erase information already processed.
Essential cookies and browser storage support sign-in, security, photo selection and checkout recovery. Clerk maintains authentication sessions; Cloudflare may use cookies such as _cfuvid and __cf_bm for security. The order page uses temporary browser session storage to resume checkout for up to 24 hours. Rejecting analytics does not disable these necessary functions.
Webflow and Cloudflare process website requests and operational logs. Google Fonts delivers the site’s typefaces and may receive the IP address, browser details and requested font file. Font requests are separate from optional Google Analytics. Read the detailed analytics notice for more information.
LEGAL BASES
The reasons for processing
We process order, production, account and delivery information to take steps at your request before a contract and to perform the service contract. Accounting, tax, withdrawal and other mandatory records are processed to meet legal obligations.
We rely on legitimate interests to secure the service, prevent fraud and abuse, manage support and disputes, and administer verified reviews and one-time rewards. We consider the impact on your rights when using information for these purposes. Optional analytics and any separately authorised portfolio publication rely on your consent. Reviews are published at your request; you can use the review controls or contact us to remove them.
WHO PROCESSES DATA
Service providers and international processing
Access is limited to DNARNYA and providers needed for the relevant service: Webflow for the public site and forms; OpenAI Sites and Cloudflare for the portal, databases, security and private video storage; Clerk for accounts; Cloudinary and Perception Point for reference uploads and scanning; Stripe for payments; Qonto for invoices and accounting; Google Workspace and Apps Script for business email and related workflows; Google Fonts for typefaces; and Google Analytics only with your consent. AI production and editing providers may receive project material as described above.
Some providers act as processors for us; payment, banking or other providers may also process information under their own legal obligations and privacy notices. We may disclose relevant records to professional advisers or competent authorities where necessary for legal obligations or the establishment, exercise or defence of legal claims.
Providers may process information outside the European Economic Area. Applicable transfer arrangements can include an adequacy decision or contractual safeguards such as the European Commission’s standard contractual clauses. Contact support@dnarnya.com for information about the providers, destinations and safeguards relevant to your data and how to obtain a copy.
RETENTION
Access periods and recordkeeping
Unsubmitted reference-photo access expires after 24 hours. Photos attached to an order remain accessible for 90 days after attachment. Expired, failed or rejected photos enter our deletion process; physical deletion may occur later during routine service activity or while a provider is unavailable, with failed deletion attempts retried.
Unpaid brief copies in the portal become eligible for cleanup after 30 days. Separate form submissions, support messages and email copies are retained for the time needed to deal with the enquiry or order, any follow-up, and applicable legal claims. The portal cleanup period does not automatically delete those separate records.
Customer account and delivered-video records are retained while needed to provide the ongoing library and support the customer relationship, subject to deletion requests and applicable obligations. Delivered videos do not have the reference-photo 90-day access limit. There is currently no automatic time-based deletion of the library.
Accounting documents and supporting invoices are retained for the legally required period, generally ten years from the end of the relevant financial year. Other contract, transaction and dispute records may be kept for applicable statutory retention or limitation periods. Account deletion does not remove records we must lawfully retain.
Published reviews remain until removed or hidden under the Review Policy. We retain necessary private review, moderation and reward eligibility records to administer existing reviews and the lifetime reward limit. Review invitations last one year; email review codes last ten minutes and the review authorisation cookie lasts thirty minutes. Analytics periods are explained above.
YOUR CONTROLS
Access, correction, deletion and choices
Depending on the applicable legal basis and circumstances, you may request access, correction, deletion, restriction, portability, or object to processing of your personal data. You may withdraw consent at any time without affecting the lawfulness of earlier processing. Cookie choices can be changed through “Cookie settings”; other requests can be sent to support@dnarnya.com or our registered office.
We may need proportionate information to verify your identity and locate your records. We normally respond within one month; if the law permits an extension because a request is complex or numerous, we will explain it. Please never send passwords, complete card details or sign-in codes.
You may also complain to the CNIL in France or your local data-protection authority. This policy may be updated when services or legal requirements change; the date on this page identifies the current version.