Legal
Privacy Policy
This policy explains what Melies collects, why it is used, which providers may process it, how long it is kept, and the choices available to you.
Effective and last updated: August 1, 2026
The short version
You provide account details and filmmaking material so Melies can operate. Selected providers process content when you use their models.
Melies does not currently train its own foundation models on private Customer Content or sell personal data for money.
You can request access, correction, deletion, portability, restriction, or objection by emailing [email protected].
1. Controller and scope
YUKI CAPITAL is the controller of personal data collected through melies.co, the Melies web app, VibeFilm services linked to Melies, and related support.
- YUKI CAPITAL, also trading as YUKI
- SIREN: 941 353 567
- 305 chemin de Vallauris, 06160 Antibes, France
- [email protected]
This policy covers visitors, account holders, subscribers, and people who contact us. A third-party site or model may have its own privacy terms.
2. Data we collect
2.1 Account and profile data
This may include your name, email, profile image, password hash, preferences, language, and account status.
If you use Google, Facebook, or Discord login, we receive identifiers and profile details approved in that login flow. We do not receive your provider password.
2.2 Subscription and transaction data
This includes plan, credit balance and use, billing status, invoices, transaction identifiers, tax details, and payment events.
Stripe receives and processes payment-card information. Melies does not store your full card number or card security code.
2.3 Filmmaking and project data
This may include ideas, prompts, scripts, characters, names, images, video, audio, voices, reference files, edits, metadata, and generated outputs.
It also includes project structure, model choices, generation settings, exports, and feedback connected to your work.
2.4 Technical and usage data
This may include IP address, device, browser, operating system, user agent, approximate location, session events, referring page, and timestamps.
We also process feature use, generation events, errors, performance data, security signals, and interactions recorded by analytics or session-replay tools.
2.5 Acquisition and communication data
This may include campaign and referral tags, marketing preferences, support messages, survey answers, feedback, and emails we send or receive.
3. Filmmaking content and AI processing
Melies sends the content and settings needed for a request to the AI provider that runs the selected model.
For example, an image-to-video request can require the source image, prompt, settings, account reference, and callback information.
The selected provider may process content on infrastructure outside France or the EEA. Its own retention and model-use terms may vary.
Melies does not currently train foundation models developed by YUKI CAPITAL on private Customer Content.
We may use limited content to investigate a support request, enforce safety rules, prevent abuse, or improve a feature when a lawful basis applies.
We will ask for separate permission before using private Customer Content in marketing or training a model developed by YUKI CAPITAL.
Do not upload sensitive personal data unless it is necessary and lawful. Obtain required releases for a person’s image, voice, identity, or performance.
Melies does not use uploaded faces or voices to authenticate people or create a biometric identity database.
4. Why we use data and our legal bases
Under the GDPR, each purpose needs a legal basis. The basis can differ according to the context and your relationship with us.
| Purpose | Main data | Legal basis |
|---|---|---|
| Create accounts, authenticate, and provide Melies | Account, project, content, usage | Contract |
| Generate, store, edit, and export media | Prompts, uploads, outputs, settings | Contract |
| Process subscriptions, credits, invoices, and tax | Account and transaction data | Contract and legal obligation |
| Provide support and service communications | Account, support, relevant project data | Contract and legitimate interests |
| Secure Melies, prevent fraud, and enforce rules | Technical, account, usage, content signals | Legitimate interests and legal obligation |
| Measure reliability and improve the product | Usage, performance, errors, feedback | Legitimate interests or consent where required |
| Measure campaigns and personalize advertising | Device, referral, campaign, interaction data | Consent where required |
| Send product news or marketing | Email, preferences, account relationship | Consent or legally permitted existing-customer marketing |
| Meet legal duties and handle claims | Relevant account, transaction, usage, content data | Legal obligation and legitimate interests |
Our legitimate interests include operating a reliable service, securing accounts, improving features, preventing abuse, and defending legal claims.
We balance those interests against your rights. You may object to processing based on legitimate interests.
5. Where data comes from
We receive data directly from you, your device, your use of Melies, and the authentication or payment provider you choose.
We may also receive generation status and output from AI providers, delivery status from email providers, and campaign data from referral partners.
If another person invites you or submits your data, they must have a lawful reason to do so.
6. Recipients and service providers
Authorized YUKI CAPITAL personnel and contractors access personal data only when needed for their work.
We also use providers that process data for us or provide their own connected service:
- AI generation: fal.ai, Replicate, OpenAI, Anthropic, Runway, ElevenLabs, and model operators available through them;
- Hosting and media delivery: Cloudflare and server, database, queue, and storage infrastructure providers;
- Payments: Stripe;
- Authentication: Google, Meta/Facebook, and Discord when you choose those methods;
- Email: Postmark;
- Reliability and product analytics: Sentry, Plausible, PostHog, and Microsoft Clarity;
- Advertising measurement: Meta Pixel and Meta Conversions API where configured.
The exact AI recipient depends on the model selected. Models and providers change, so the product interface is the most current source for a request.
We may disclose data to advisers, courts, authorities, acquirers, or counterparties when required by law or reasonably needed for a transaction or claim.
We do not sell personal data for money. Advertising providers may receive device and campaign data where the law and your choices allow it.
7. International transfers
Some providers or their subprocessors operate outside France and the EEA, including in the United States.
Where required, we rely on an adequacy decision, approved standard contractual clauses, or another lawful transfer mechanism.
We also assess appropriate supplementary safeguards according to the service and transfer. Contact us for more information about relevant safeguards.
9. Retention and deletion
We keep account and project data while your account is active and as needed to provide the service.
When you request account deletion, Melies marks account, project, and asset records as deleted and makes them unavailable through ordinary product access.
Deletion is not always immediate from every system. Limited copies may remain in backups, provider systems, security logs, or records required by law.
Billing, tax, fraud, and dispute records are kept for the period required by law or reasonably needed to establish, exercise, or defend legal claims.
Analytics, support, and technical records are retained according to their purpose, configuration, and provider schedule, then deleted or anonymized.
External AI providers may keep prompts, uploads, logs, or outputs under their applicable terms. We seek to limit provider access to what a request needs.
You may request erasure at any time. We will explain any data we must retain and the reason.
10. Security
We use technical and organizational measures designed to protect personal data against unauthorized access, loss, alteration, or disclosure.
Measures include access controls, password hashing, encrypted network transport, restricted provider credentials, monitoring, and backup procedures.
No online system is completely secure. Protect your account credentials and contact us promptly if you suspect misuse.
11. Your data-protection rights
Depending on the law and context, you may have the right to:
- access your personal data and receive information about its use;
- correct inaccurate or incomplete data;
- request deletion;
- restrict processing;
- object to processing based on legitimate interests or direct marketing;
- receive portable data you provided where the legal conditions apply;
- withdraw consent at any time, without affecting earlier lawful processing;
- give instructions about personal data after death where French law allows it;
- complain to a supervisory authority.
Email [email protected] to exercise a right. We may verify identity and ask for details needed to handle the request.
We normally respond within one month. The GDPR permits an extension for complex or numerous requests, and we will tell you if that applies.
You can complain to the CNIL or your local EEA supervisory authority.
12. Automated processing and moderation
Melies and its providers may automatically detect abuse, filter a prompt, block content, estimate fraud, or decide whether a generation can run.
These controls are not intended to make decisions that produce legal or similarly significant effects about you.
Contact us if you believe an automated control restricted your account or content incorrectly and you want human review.
13. Children
Melies is for adults aged 18 or older. We do not knowingly create accounts for children.
If you believe a child has provided personal data, contact us so we can investigate and take appropriate action.
14. Changes to this policy
We may update this policy when the product, providers, or law changes. The current version and effective date will remain available on this page.
We will give appropriate notice if a change materially affects how we use personal data or requires a new consent.
15. Contact
Privacy requests and questions can be sent to [email protected].
Postal address: YUKI CAPITAL, 305 chemin de Vallauris, 06160 Antibes, France.