1. Introduction

BehindVideo is operated by Mobilefunk, based in the Netherlands. We are committed to protecting your privacy and processing your personal data in compliance with the General Data Protection Regulation (GDPR) and applicable Dutch data protection laws.

This Privacy Policy explains what data we collect, why we collect it, and your rights regarding your data.

2. Data Controller

Mobilefunk
The Netherlands
Email: info@mobilefunk.nl

3. Data We Collect

Account data: When you register, we collect your name, email address, and password (hashed). If you sign in via Google or Facebook, we receive your name, email, and account ID from the provider.

Payment data: When you subscribe to a paid plan, payments are processed by Stripe. We do not store your credit card details. We store your Stripe customer ID, subscription status, and payment history (amounts, dates, invoice IDs).

Content data: Videos, images, audio files, and project data you upload or create in the editor are stored on our servers. You retain full ownership of your content.

Usage data: We collect basic usage information such as IP address, browser type, pages visited, and feature usage. This helps us improve the Service.

Cookies: We use essential cookies for authentication and session management. We may use analytics cookies to understand how the Service is used. See Section 8 for details.

4. Why We Process Your Data

We process your personal data based on the following legal grounds (GDPR Article 6):

Purpose	Legal basis
Providing and operating the Service	Contract performance (Art. 6(1)(b))
Processing payments	Contract performance (Art. 6(1)(b))
Account security and fraud prevention	Legitimate interest (Art. 6(1)(f))
Customer support	Contract performance (Art. 6(1)(b))
Service improvement and analytics	Legitimate interest (Art. 6(1)(f))
Sending service-related emails (password reset, billing)	Contract performance (Art. 6(1)(b))
Marketing emails (if opted in)	Consent (Art. 6(1)(a))

5. Data Sharing

We do not sell your personal data. We share data only with the following third parties, solely to provide the Service:

• Stripe (payment processing) — Privacy Policy
• SendGrid (transactional emails) — Privacy Policy
• Google (if you use Google Sign-In) — Privacy Policy
• Anthropic / Claude (AI video generation features) — prompts and generated content only, no personal data

All processors are GDPR-compliant or operate under adequate safeguards (e.g., Standard Contractual Clauses for US-based processors).

6. Data Retention

• Account data: Retained for as long as your account is active. Deleted within 30 days of account deletion.
• Project data: Retained for as long as your account is active. You may delete individual projects at any time.
• Payment records: Retained for 7 years to comply with Dutch tax and accounting obligations.
• Server logs: Retained for up to 90 days.

7. Your Rights (GDPR)

As a data subject in the EU/EEA, you have the following rights:

• Access — Request a copy of the personal data we hold about you.
• Rectification — Request correction of inaccurate data.
• Erasure ("Right to be forgotten") — Request deletion of your account and personal data.
• Restriction — Request that we limit processing of your data.
• Portability — Request your data in a machine-readable format.
• Objection — Object to processing based on legitimate interests.
• Withdraw consent — Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, email us at info@mobilefunk.nl. We will respond within 30 days.

You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

8. Cookies

We use the following types of cookies:

Cookie	Type	Purpose
Session cookie	Essential	Keeps you logged in
CSRF token	Essential	Protects against cross-site request forgery
Cookie consent	Essential	Remembers your cookie preference

Essential cookies do not require consent under GDPR. If we introduce analytics or marketing cookies in the future, we will ask for your explicit consent before setting them.

9. Data Security

We take appropriate technical and organizational measures to protect your data, including:

• Passwords are hashed using bcrypt (never stored in plain text).
• All data is transmitted over HTTPS/TLS.
• Access to production systems is restricted to authorized personnel.
• Payment data is handled entirely by Stripe (PCI DSS Level 1 certified).

10. International Transfers

Some of our processors (Stripe, SendGrid, Anthropic) are based in the United States. Where data is transferred outside the EU/EEA, we ensure adequate safeguards are in place, such as Standard Contractual Clauses (SCCs) or the EU-US Data Privacy Framework.

11. Children

The Service is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child under 16 has provided us with personal data, please contact us and we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a notice on the Service. The "Last updated" date at the top indicates the most recent revision.

13. Contact

For any questions or requests regarding this Privacy Policy or your personal data:

Mobilefunk
The Netherlands
Email: info@mobilefunk.nl