Legal
Privacy policy
Data controller
- Controller
- Nourdine Chebcheb, sole trader (France)
- Registration
- SIRET 834 331 027 00021 · SIREN 834 331 027
Contact for any request about your data: bonjour@fleekio.com.
On this website (fleekio.com)
- No account, no form and no analytics or advertising cookie is used on this website at this time.
- Our host, Cloudflare, technically processes your IP address and request headers to serve pages and protect the site against abuse.
- Free tools: images you drop into the preview or the resizer are processed in your browser and are never sent to us.
- Thumbnail downloader: images are loaded directly from YouTube's (Google's) servers, which then receive your IP address under their own policies.
In the Fleekio application
When you create an account, we process:
- your email address, display name and password (stored as a hash, never in plain text);
- the photos you upload to build your avatar, after you confirm you have the right to use each image. They are used only to generate your thumbnails;
- the videos, links, transcripts, instructions and images you provide, and the thumbnails, titles and texts generated;
- your AI provider API keys, encrypted (AES-256-GCM) and never shown again: only their last four characters are displayed;
- the log of your runs: step, model, duration and cost, so we can show you what you spend.
Legal bases: performance of the contract (providing the service you request), your consent for face photos, and our legitimate interest in security and abuse prevention.
Your AI providers
Fleekio works with your own API keys. When you run a generation, the data required (instructions, reference images, avatar photos, transcript) is sent to the provider you chose (for example OpenAI, Google, Black Forest Labs, fal.ai or Replicate), under YOUR account with that provider and under its terms. Please review them, especially regarding reuse of data for training.
Processors
| Processor | Role | Location |
|---|---|---|
| Hostinger International Ltd. | Hosting of the application and its database | European Union |
| Cloudflare, Inc. | Website hosting, network, file storage (R2) | Worldwide (United States) |
| Resend, Inc. | Account emails (verification, password) | United States |
| Apify Technologies s.r.o. | Fetching YouTube videos and public data at your request | European Union |
Transfers outside the European Union rely on the European Commission's standard contractual clauses or the EU-US Data Privacy Framework.
Retention
- Account data and content: for as long as the account exists.
- Deleted projects: kept 30 days in the trash, then erased.
- After account deletion: erased within 30 days, except where the law requires retention (billing records, if any).
Your rights
You have the right to access, rectify, erase, restrict, port and object to the processing of your data, and to withdraw your consent at any time. To exercise them, including to delete your account, write to bonjour@fleekio.com. We answer within one month.
You may also lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr).