WARRIHUM AI

Privacy policy — 27 September 2026

Data controller: PALDAVO, 138 avenue Victor Hugo, 75016 Paris, France; paldavo.support@gmail.com; +33 7 65 59 66 66. Use this contact for privacy requests.

We process account identity and email, authentication identifiers handled by Supabase, preferences and consents, prompts, uploaded and generated media, generation history, purchases and credits, support and community messages, security data and, if consented to, analytics. We do not receive your full payment card number.

Contract performance supports account administration, generation, private storage, billing and support; legal duties support accounting and lawful requests; legitimate interests support security and fraud prevention; consent supports optional analytics and marketing when enabled, and may be withdrawn.

Authorised PALDAVO personnel and service providers may receive data: Supabase for accounts and data, Vercel for the website, Render for background jobs, fal.ai and model providers for requested generation, Stripe for payment, and OVHcloud for email. Generation inputs are sent to the relevant provider to fulfil your request. Their own terms and policies may also apply.

Some providers or sub-processors may process data outside the European Economic Area. Where GDPR requires it, transfers need a lawful mechanism and appropriate safeguards. Actual model-processing locations and safeguards should be checked before commercial launch in each target country.

Media retention is configurable and currently intended for 30 days before purging, unless you act sooner or law requires retention. Account data is kept until deletion; invoices and transaction evidence may be retained for applicable legal periods. Backups may take additional time to expire.

Private media requires authentication or short-lived signed links; server access is restricted. No system can guarantee absolute security. Do not upload third-party or confidential material without an appropriate legal basis and permissions.

Subject to applicable law, you may request access, correction, deletion, restriction, portability or object to processing. You may withdraw consent without retroactive effect. Export and deletion tools are available in Settings. You may contact us or complain to France’s data protection authority, the CNIL.

Minors require particular protection. Parental permission for digital consent or purchases may be needed depending on age and country.