FlixyThis is a translation provided for convenience. The French version is the legally binding one: Version française
Privacy policy
Last updated: 24 octobre 2026
Data controller
MSA Technology, SARL registered under SIREN 107 122 434, registered office: [adresse du siège à compléter]. Contact for any question about your data: [adresse e-mail de contact à compléter] or the Contact page.
Data collected
| Category | Data |
|---|---|
| Account | Email address, password (stored only in irreversibly hashed form), display name and profile photo if you add them, language and preferences. |
| Sign in with Google | If you choose “Continue with Google”: your email address, your name and your Google account identifier, sent by Google with your consent. Flixy never receives your Google password and does not access any other data in your Google account. |
| Creations | Texts (prompts) typed or dictated, photos you add, chosen settings, images and videos created, assistant replies, share links and gallery publications. |
| Credits | Purchases, balance and history of credit use, including credits offered by Flixy. Card data is processed only by the payment provider. |
| Connection and usage | IP address, date and time of visits and actions, browser, operating system, device type, screen size, language, time zone, referring page and campaign parameters (utm), connected devices. |
| Contact | Name, email, subject and content of messages sent through the contact form. |
| Evidence | Timestamp, IP address and version of the terms accepted at sign-up. |
Purposes and legal bases
- Providing the service: account, creations, projects, sharing, credits (performance of the contract).
- Analysing requests before creation to improve results and refuse unlawful requests (performance of the contract and legitimate interest).
- Securing the service and preventing abuse and fraud (legitimate interest).
- Measuring audience and improving the service, with the site's own tools (legitimate interest).
- Replying to your messages (legitimate interest / consent).
- Meeting our legal obligations, in particular accounting and evidence (legal obligation).
Recipients
Your data is used by MSA Technology and shared only with the providers needed for the service, acting on our behalf: website host, artificial intelligence model providers (creating images and videos, analysing requests, transcribing voice) and payment provider. Some of these providers may be located outside the European Union, notably in the United States; these transfers are covered by the safeguards provided by the GDPR (adequacy decision or standard contractual clauses). Your data is never sold.
Retention periods
- Account and creations: as long as the account is active. When the account is deleted, its projects are removed and the email address is detached from the account.
- Evidence of acceptance of the terms and purchase history: 5 years, and 10 years for accounting records.
- Connection and usage logs: 12 months.
- Contact messages: 3 years after the last exchange.
Your rights
Under the GDPR, you have the right to access, rectify, erase, object, restrict and port your data. You can download all your data and delete your account from My account → My data, or write to us through the Contact page. You can also lodge a complaint with the French data protection authority, the CNIL (cnil.fr), or your local authority.
Cookies
See the cookies page.