Privacy Policy
Last updated noviembre de 2026
What we collect
Your name, email and avatar from your sign-in provider; the prompts, reference photos and outputs you create; the characters and films you save; the reports you send; business quote requests (name, work email, company, team size and message); billing records from our payment processor; and, if you join the affiliate program or turn on notifications, your payout email and your browser's notification address.
How we use it
To run the studio, process payments and send service emails: sign-in links, receipts, render notifications and a few tips while you get started. If you request a Business quote, we use your contact details to answer and follow up about that request. Offers and product news are only sent if you tick the box for them. Every email has a one-click unsubscribe link.
Public creations
Without a plan, every creation is public: it appears in Examples and on its own page with its prompt. Your name and avatar never show there. Paid plans can keep creations private and switch each one on or off. The reference photo files you upload are never shown, but a creation made from a photo can show what's in it, faces included.
Photos of people you upload
When you animate or edit a photo, we use it only to make the creation you asked for. It is sent to fal.ai and to the company that made the model you picked, which may process it in the United States or elsewhere under their own terms. Cirrela never uses your photos to train AI models and never runs face recognition on them.
The photo file stays private: it is never shown on public pages, even when the creation is public. But the creation made from it can show what's in the photo, faces included, and without a plan that creation is public. We keep the photo with the creation until you delete the creation or your account, which deletes the photo too. fal.ai keeps the inputs and outputs of requests for up to 90 days by default under its own policy.
Only upload photos you have the right to use, with the consent of the people in them.
Filters and reports
Our filter checks each prompt before a render starts. When it refuses one, we keep the category and, except for child-safety refusals, the first words of the prompt for 30 days, to stop abuse and fix our mistakes. Reports you send (the reason, your details and your account) are kept while we handle them, and deleted about a year after they were sent once a decision is made.
The AI-generated label
As the EU AI Act asks, the PNG, JPEG and MP4 files we store carry metadata saying they were generated by AI with Cirrela. An original the model maker already signed with C2PA Content Credentials keeps that signature and gets no metadata from us; a copy we change can lose it, and then gets ours. WebP files, files over 200 MB and files we can't label safely get no metadata from us. Our metadata contains no personal data: no name, email or prompt.
Cookies and storage on your device
We only use what the site needs, so there is no consent banner:
- a sign-in cookie that keeps you signed in;
cirrela_via, set when you follow an affiliate partner's link: it holds the partner's code and the date of the click, for 60 days, so the partner is credited if you sign up. It holds no personal data. A copy is kept in your browser's local storage in case the cookie is dropped;- a few preferences in your browser's local storage, such as light or dark mode.
Our audience measurement writes nothing on your device (see below).
Notifications
If you turn on notifications for this device, your browser gives us an address at its push service (Google, Mozilla, Apple or Microsoft, depending on the browser) and the keys to encrypt messages to it. We use them only to tell you a render is ready. They are deleted when you turn notifications off, when the browser stops accepting them, or with your account.
Audience measurement and error reports
We may use two optional services, each only when we have switched it on:
- PostHog, on its EU cloud, counts page views. It stores nothing on your device, identifies nobody, receives page addresses without their parameters, and respects your browser's Do Not Track setting. We also send it a few product events (such as a sign-up or a finished render) under a one-way code instead of your account, never your email or prompts.
- Sentry receives error reports from the site so we can fix bugs: errors only, with emails, page parameters and what you type removed, and no IP address or cookies.
To object to audience measurement, use the switch below (also in Settings once signed in), or turn on Do Not Track. To object to error reports, write to hello@cirrela.com.
Processors
We rely on Convex (database and storage), Cloudflare (hosting), fal.ai and the model makers it connects to (model inference), Anthropic (the “Improve” prompt assistant and film mode's Director), Stripe (payments, and the sentence of a first video, shown back to you on its payment page), Resend (email), your browser's push service (notifications), and, when switched on, PostHog (audience measurement, EU) and Sentry (error reports). Each only receives what it needs to provide its service.
Retention and deletion
Deleting a creation removes its stored files and the photo you uploaded for it. In Settings you can download everything we hold about you, with nothing left out, or delete your account: your creations, photos, characters, films, likes, credit history, reports, notification devices and activity records are then erased. Payment records, and the payouts we made to affiliate partners (without the payout email), are kept for as long as accounting law requires. Business quote requests are deleted 12 months after submission. A withdrawal declaration (name, email, contract, date) serves as proof: it is kept for 5 years, even after the account is deleted. Copies of the emails we sent you are deleted within 30 days. See also our legal notice.
Your rights
You can access, export or delete your data yourself in Settings. To correct it, object to how we use it or ask anything else, write to hello@cirrela.com. You can also complain to the CNIL, the French data protection authority (cnil.fr).