1. Controller
Publisher and operator: Mathis Ghislain Delolmo, French sole trader (entrepreneur individuel / EI), trading as BIOMECASE and operating the MOTIONEST service — 17 avenue Gambetta, 69250 Neuville-sur-Saône, France — SIREN 947 914 800 — EU VAT number FR68947914800 — +33 7 49 35 64 79 — contact@nettoyage-propre-lyon.com. The publisher confirmed active trading under the BIOMECASE name on 13 August 2026. The active establishment number will be added after documentary verification and before payments are enabled.
The controller is Mathis Ghislain Delolmo EI. Rights requests go to contact@nettoyage-propre-lyon.com; this address is not represented as that of an appointed DPO.
2. Data processed
MOTIONEST may process account and authentication data, briefs and assistant conversations, photos, logos and visible people, settings, projects, tasks and generated media, orders, prices, discounts, memberships, balances and Stripe references, support requests and limited technical security logs. Full card details are handled by Stripe and are not received by MOTIONEST.
3. Purposes and legal bases
Account, order, generation, delivery and library processing are necessary for pre-contractual steps and contract performance. Payment, invoices and records support the contract and legal obligations. Fraud prevention, security and service defence rely on legitimate interests. Support uses the contract, pre-contractual steps or legitimate interests according to the request.
Marketing consent is never preselected. MOTIONEST currently uses no non-essential advertising or audience-measurement tool. Prior consent controls will be added if such a tool is introduced.
4. Required and optional data
Required fields are necessary for account, order or delivery. The service cannot produce a creation without essential photos and settings. Logo, additional creative context and social details are optional.
5. Recipients and processors
Data may be accessed by authorised BIOMECASE personnel and, depending on the flow, by Netlify for public delivery, OpenAI Ireland Ltd/ChatGPT Sites for platform, authentication, storage and database services, Stripe for payments and memberships, and Kie and the model subprocessors it uses for prompts, reference media and generation.
Detailed countries, transfer safeguards, retention periods and subprocessors remain governed by each provider’s applicable contract and policy. These providers are not represented as commercial partners.
6. International transfers
Some providers may process data outside the EEA. The destination and safeguard — adequacy decision, standard contractual clauses or another lawful mechanism — must be verified in each provider agreement. No unverified safeguard is claimed here.
7. Retention
Assistant conversations are limited to forty messages per language and deleted after thirty days, or immediately through the widget. Projects and media currently remain in the library while the account is active or until a verified email request; a precise contractual library period must still be displayed before sales open.
Payment, invoice and ledger data is retained for statutory accounting and tax periods. Support requests are retained to answer and protect applicable rights. Temporary files and security logs must follow short, documented operational periods before commercial launch.
8. Files and AI
Necessary prompts and references are sent to generation providers solely to produce the requested creation. Do not upload secrets, identity documents, medical data or content you cannot authorise. Obtain permission from recognisable people.
Provider retention and any use for model improvement depend on the applicable agreement and must be confirmed before a promise such as ‘never used for training’ can be made.
9. Automated processing
The assistant suggests creative direction and settings. It does not make a decision with legal or similarly significant effects. Users review the reply, approve enhanced images and choose whether to start video generation. When the model is unavailable, the interface labels the automatic guide fallback honestly.
10. Your rights
You may request access, correction, deletion, restriction and, where applicable, portability; object to certain processing; and withdraw consent without affecting prior processing. Contact contact@nettoyage-propre-lyon.com. Proportionate identity evidence may be requested where there is reasonable doubt.
A response is normally provided within one month. You may complain to the French CNIL or another competent supervisory authority.
11. Cookies and local storage
The service uses only data needed for authentication, security, checkout, payment return and session continuity. MOTIONEST currently places no advertising or audience-measurement cookie. Session storage may retain a draft or studio state on the device.
12. Security and changes
Payment and generation secrets remain server-side, and project access is account-scoped. No system is completely secure; please report anomalies promptly.
This policy is dated and updated when processing changes. Material changes are notified appropriately.