In short: we collect the minimum needed to run Flixy Studio, we never sell your personal data, our own website uses no advertising or tracking cookies, and you can access, export or delete your data at any time by writing to privacy@flixy.studio.
1. Controller
The controller of personal data processed through flixy.studio and the Flixy Studio service is the company MSA TECHNOLOGY, a limited liability company (SARL) under French law, registered with the Paris Trade and Companies Register under SIREN 107 122 434 (SIRET of the registered office: 107 122 434 00015) and with the French National Business Register (RNE), whose registered office is at 47 rue Vivienne, 75002 Paris, France and whose main declared activity is computer programming (NAF/APE 62.01Z). MSA Technology alone determines the purposes and means of the processing described in this policy, and operates the Service under the brand Flixy.
Contact for any privacy matter: privacy@flixy.studio or contact@flixy.studio. We answer any legitimate privacy request within one month of receipt, in accordance with the GDPR.
This policy applies to visitors of our website, to customers and users of the Service, to people who contact us, and to prospects. It does not cover the personal data of visitors of websites created by our customers: for those, our customer is the controller and Flixy acts as processor under the Data Processing Addendum.
2. Data we process, purposes and legal bases
| Data | Purpose | Legal basis (GDPR art. 6) | Retention |
|---|---|---|---|
| Account data: name, email, password (hashed), language, account settings | Create and manage your account, authenticate you, secure the Service | Performance of the contract (b) | Life of the account + up to 3 years for claims |
| Prompts, instructions, generated websites, uploaded content, versions | Generate, edit, host and publish your websites | Performance of the contract (b) | Life of the account; deleted within 90 days after closure (backups included) |
| Billing data: billing name and address, VAT number, plan, invoices, payment status, country of connection at the time of payment (VAT evidence; card data is handled by the payment processor, never stored by us) | Billing, accounting, tax compliance, fraud prevention | Contract (b); legal obligation (c) | Invoices: 10 years (French Commercial Code, art. L.123-22), tax data: as required by law |
| Domain registration data (WHOIS): as required by registries | Register and renew domains | Contract (b); legal obligation (c) | Life of the domain + period required by the registry |
| Professional email addresses: mailbox content (messages, attachments, contacts), address settings, mailbox password (encrypted) | Provide the mailbox, send and receive email, display it in your dashboard | Performance of the contract (b) | Life of the address; deleted when you delete the address, or 60 days after the plan ends |
| Google services you connect to your website: the business name, address and Google place identifier chosen for the map; for Search Console, the authorisation you gave (date, text version), the verified property and its search statistics (clicks, impressions, queries, pages, indexing status); the email address you add to receive owner access | Display your map, declare and verify your website with Google on your behalf, show your search performance in your dashboard | Performance of the contract (b), on your instruction | Until you withdraw the service or close your account; search statistics are refreshed and only the last 28 days are kept |
| “Improve my site” features you turn on: their settings; for your website’s visitors and customers (as your processor): reviews, chat messages, newsletter subscribers and consent proof, coupon and gift card use, loyalty stamps, members, quotes and invoices, SMS and email reminders sent, anonymous A/B test counts; team members you invite (email, access rights) | Provide the features you chose and show their results in your dashboard | Contract (b); for your visitors’ data, your own legal basis as controller | As long as the feature or your account exists; deleted with your website or on your request |
| Import of your existing website: the address of the website or the PDF or image you upload, the public content read from it (texts, contact details, photos, logo, colours), the date and IP address of your confirmation that the content is yours | Prepare your new website from your own content | Performance of the contract (b) | Uploaded files are deleted after the analysis; the imported content stays in your project for its life |
| Multilingual website: the texts of your website sent to the AI for translation, the translations produced and your manual corrections | Publish your website in the languages you choose and avoid translating the same text twice | Performance of the contract (b) | For the life of your project; deleted with your project or your account |
| Email automations (as your processor): the email address, first name and language of the people concerned, the scenario sent, its date and status, the personal promo code created, unsubscriptions | Send the scenarios you turned on, only once per person, and honour unsubscriptions | Performance of the contract (b); for your customers, the legal basis chosen by you as controller (consent or existing customer relationship) | Sending log 24 months; unsubscriptions kept for as long as the website exists so that they are always honoured |
| Customers file (as your processor): the contacts gathered from your websites’ orders, bookings, forms, newsletter, reviews, members, quotes, chats and loyalty cards, the tags and private notes you add, the customers you add by hand | Show you one profile per customer, segments and history; export at your request | Performance of the contract (b); for your customers, the legal basis chosen by you as controller | As long as the underlying data exists; tags, notes and manual profiles until you erase them or close your account |
| Pixels & Conversions on your websites (as your processor, only after the visitor accepts cookies): a random conversion key and the Flixy ad click identifier saved with the request, booking or order, and the conversion events (type, amount) | Count each conversion once with its real amount and attribute it to the right campaign | Your legal basis as controller (consent of the visitor) | Kept with the request, booking or order; conversion statistics 13 months |
| Origin of your first visit (campaign source, medium and name, ad-click indicator, landing page), recorded on your account when you sign up | Measure which campaigns bring new customers | Legitimate interest (f) | Life of the account |
| Agency space: your agency’s details and branding (logo, colors, legal and bank details you enter); as your processor, the data of your own clients and prospects you record (company, contact name, email, phone, address, VAT number, tags, notes, history of calls, emails and meetings, deals, quotes and invoices, change requests, portal access and their language); if you choose to send from your own email address, the settings of your sending mailbox (server, address, and its password, stored encrypted and never displayed) | Provide the CRM, quotes and invoices, recurring billing and reminders, the client portal under your brand and monthly reports; export at your request | Performance of the contract (b); for your clients, the legal basis chosen by you as controller | As long as your agency space exists; sent quotes and invoices are kept for the period required by accounting law (up to 10 years) unless you ask us to delete them and that obligation does not apply to us |
| Marketing studio: what you ask the AI to promote, your brand voice and area, and the campaigns and posts it writes | Write and keep your marketing texts | Performance of the contract (b) | Until you delete them or close your account |
| Flixy Studio mobile apps for iPhone, Android and Huawei (if you connect a phone): device name (for example “Pixel 8 · Application”), a hashed device key, the notification token given by your phone’s notification service (Apple Push Notification service, Firebase Cloud Messaging or Huawei Push Kit), your app settings (alerts, websites followed, quiet hours, time zone, language, appearance), dates of connection and use; if you turn on Face ID or fingerprint, nothing leaves your phone (your face and fingerprints are checked by your phone and never sent to us) | Sign you in on your phone, send you the alerts you choose, lock the app | Performance of the contract (b) | Until you remove the phone or sign out, or your account is deleted |
| Flixy Studio mobile apps — data kept on your phone: the latest version of the screens you opened (websites, orders, bookings, messages, statistics) and the actions made without a connection, encrypted with a key kept in your phone’s secure storage (Android Keystore / iOS Keychain), never readable by another app; the FAQ of the app is included in the app itself | Open the app instantly, keep it readable without a connection, send your actions once the connection is back | Performance of the contract (b) | Replaced at each update; erased (and the key destroyed) when you sign out |
| Flixy Studio mobile apps — files you share with Flixy to create a website (photos, flyer, menu, business card, invoice or quote, PDF, short video), only after you confirm that the content is yours and that Flixy may read it: images reduced on your phone, a few frames of a video (the video itself stays on your phone), the PDF; read by the AI to prepare the description of your website. For an invoice, only the details of the business that issued it are used, never those of the customer it is addressed to. Photos you choose to use are kept in the files of your website | Prepare the description of your website, which you review before anything is created; add the photos you choose to your website | Performance of the contract (b); your instruction | The files received are deleted right after reading; the description and the photos you keep stay with the website until you delete it |
| Flixy Studio mobile apps — usage statistics (can be turned off in Account → Usage statistics): the names of the screens opened and the time spent on them, the names of the features used, the system and version of the app, a random identifier for the session; never what you type, your customers, your orders or the content of your websites | Understand which features are used and improve the app | Legitimate interest (f) | 13 months |
| Flixy Studio mobile apps — optional phone features: the camera (only while the scanner is open, images analysed on the phone and never sent), the Bluetooth printers already paired with your phone (name and address of the printer you choose, kept on the phone), the calendar app (a booking is added only when you ask), local booking reminders and the “Today” widget (calculated on the phone) | Scan QR codes and barcodes, print order tickets, add a booking to your calendar, remind you of bookings | Performance of the contract (b) | On your phone only, until you change the setting or sign out |
| Flixy Studio mobile apps — caller recognition (only if you turn it on and allow it on your phone): the names of your customers, the last 9 digits of their phone numbers and their number of orders, bookings and requests, taken from your own orders, bookings and forms, kept encrypted on your phone and updated twice a day; the phone compares incoming numbers on the device, no call and no number is sent to us | Show the name of a customer who calls you | Performance of the contract (b); your instruction | On your phone only, erased when you turn it off or sign out |
| Flixy Studio app for iPhone — caller recognition: the iPhone identifies calls from a list given to the phone, so the full phone numbers of your customers (up to 3 per customer) are kept encrypted in the app and handed to the call identification of the iPhone, on the phone only; no call and no number is sent to us | Show the name of a customer who calls you | Performance of the contract (b); your instruction | On your phone only, erased when you turn it off or sign out |
| Flixy Studio app for iPhone — live tracking (only if you turn it on): the token given by Apple for each live tracking and the order or booking it follows, so that your lock screen updates even when the app is closed | Keep your lock screen up to date | Performance of the contract (b) | Deleted when the tracking ends, at the latest after 12 hours |
| Flixy Studio mobile apps — live tracking, quick settings button, voice answers, phone search shortcuts (your orders in progress and today’s bookings) and NFC tags: calculated and kept on your phone; the voice answers use the speech synthesis of your phone | Show and act on your activity from the lock screen, the quick settings, the assistant and the search of your phone | Performance of the contract (b) | On your phone only, until you change the setting or sign out |
| Passkeys (if you create one): the public key of the passkey, its identifier, a name (the model of the phone), the dates of creation and last use; your face, fingerprint and the private key stay on your device | Sign in without a password | Performance of the contract (b) and our legitimate interest in security (f) | Until you remove the passkey or your account is deleted |
| Flixy Studio mobile apps — everyday tools: the photo of a product, a supplier invoice or a receipt, or a photo to post on social media, sent to the AI provider only when you ask for it (the background of a product photo is removed on your phone before sending), with the name of your business, its language and currency; the suggestions returned (name, description, category, price, text and hashtags, supplier, date, amounts, VAT, category) | Suggest the details of a product, read a supplier invoice, write a post you publish yourself | Performance of the contract (b); your instruction | Photos: like the other images of your website (until you delete them or the website); suggestions are not kept unless you save them |
| Expenses entered in the app: supplier, date, total, VAT, currency, category, note and the photo of the invoice; your monthly sales are calculated from the paid orders of your websites | Show your expenses and your margin for the month | Performance of the contract (b) | Until you delete the expense or your account is deleted |
| Smart alerts (if you turn them on): your choices, the date of the last alert sent for each website or product; to check that a website responds, our servers request its home page every 30 minutes; for new emails, the identifier of the last message seen on each professional address (the content is never read for this) | Tell you on your phone about a drop in visits, a website not responding, low stock or a new email | Performance of the contract (b) | As long as the alert is on |
| Position of your shop (only if you save it from the app, while you are in it): latitude and longitude of the shop, never your movements | Show your customers’ Wallet cards on their lock screen when they pass by your shop | Performance of the contract (b); your instruction | Until you change or remove it, or delete the website |
| Waiting list of your shop (as your processor): first name, number of people, the mobile number or email your customer chooses to give, the day requested if they want to be told when a place frees up, the status and times (waiting, called, served); booking reminders: the answer of your customer (confirm or cancel) and its date | Manage your queue, tell your customers when it is their turn or when a place frees up, reduce no-shows | Performance of the contract (b); for your customers, your legitimate interest (f) | Waiting list entries: 6 hours after they are served or leave, and the day after the requested day; reminder answers: with the booking |
| Quotes signed on screen (as your processor): the name typed by the signer, the image of the signature, the date, the time and the IP address of the connection | Proof of acceptance of the quote; automatic deposit invoice if you set one | Performance of the contract (b); your legitimate interest (f) in keeping proof | With the quote, as long as the quote is kept |
| Wallet cards of your customers (gift cards, loyalty cards, reward coupons added to Apple Wallet or Google Wallet): card code, balance or stamps, the name given for the card, expiry date; for Apple Wallet, an identifier of the device and a notification token to update the card | Deliver and update the cards your customers add to their phone (as your processor) | Performance of the contract (b); for your customers, your legitimate interest (f) | As long as the card exists; device registrations are removed when your customer deletes the card |
| Two-factor authentication (if you turn it on): the secret key of your authenticator app (encrypted), fingerprints of your backup codes (never the codes themselves), the date it was turned on | Protect your account at sign-in | Performance of the contract (b) and our legitimate interest in security (f) | Until you turn it off or your account is deleted |
| Ask Flixy (guide in the dashboard): your questions, the answers, the screen from which you asked, the topic, your rating of the answer and whether tips were shown; to answer, a summary of your account (websites, status, features turned on, simple counts) is sent to the AI provider, never your customers’ personal details | Guide you in the use of the Service and suggest relevant features; improve the guide | Performance of the contract (b); legitimate interest (f) for the improvement of the guide | 90 days, then deleted |
| Support conversations, tickets, AI assistant messages | Answer requests, improve support quality | Contract (b); legitimate interest (f) | 3 years after the last exchange |
| Technical logs: IP address, browser, timestamps, errors, security events | Security, abuse prevention, debugging | Legitimate interest (f) | Up to 12 months |
| Flixy API (developers): developer account (name, email, password fingerprint, linked Flixy Studio organization if any), key fingerprints, call log (date, endpoint, status, duration, price, IP address), data sent in requests, balance movements | Providing the API, billing, security and abuse prevention | Contract (b), legitimate interest (f), legal obligation (c) for accounting | Request data 30 days; call log 12 months; balance movements and invoices 10 years |
| Website audience measurement on flixy.studio: pages viewed, time spent, scroll depth, sections viewed, buttons and links clicked, referrer website, language, device and browser type, country (derived from the request, the IP address is not stored), a random session identifier kept only for the browser tab (no cookie, deleted when the tab is closed); robots: robot name and page only. No form content is ever recorded. | Measure audience and improve the website (aggregated statistics only) | Legitimate interest (f) — audience measurement exempt from consent (CNIL guidelines): anonymous, first-party, not shared, not combined with other data | 13 months |
| Use of the Service by customers: screens and windows opened, steps of the creation, publication and payment journeys (including the step at which a journey is interrupted), buttons used, errors displayed, time spent, type of website created (sector, style, structure, language, requested features) — never the content you type | Understand how the Service is used, fix problems and decide on improvements | Legitimate interest (f): improvement of the Service; you can object by writing to us | 13 months |
| Contact and partner form data | Answer your message, follow up on partnership requests | Pre-contractual steps (b); legitimate interest (f) | 3 years after the last exchange |
| Newsletter: email, language, consent date | Send product news and tips | Consent (a), withdrawable at any time | Until you unsubscribe |
| News, new features and offers from Flixy by email, sent to customers about services similar to those they use | Information and marketing communications to existing customers | Legitimate interest (f) and article L.34-5 of the French Postal and Electronic Communications Code: you can refuse at checkout (box “I do not wish to receive…”) and unsubscribe at any time with the link in every email | Until you object, or 3 years after the end of the customer relationship |
| Important information about your account: changes to the Terms and policies, security, billing, service changes | Performance of the contract, legal obligation to inform | Contract (b); legal obligation (c) | Life of the account |
| Product emails and tips to customers: service updates, suggestions of features your website does not use yet, notices about your use of the AI included in your plan; the type of email, its language, the date it was scheduled and sent, and whether it was opened (a pixel image) and clicked (a redirect link) | Help you get the most out of the Service without sending unnecessary emails (never for a feature you already use, at most one tip every few days), measure their usefulness | Legitimate interest (f) / French Postal and Electronic Communications Code art. L.34-5; opt-out in every email and in your profile. AI usage notices: performance of the contract (b) | Life of the account; sending history deleted 13 months after sending |
| AI usage: the AI jobs run for your websites (type, date, amount of AI used) and the notices sent | Apply the AI included in your plan, the welcome credits and fair use, show you your usage gauge | Performance of the contract (b); legitimate interest (f) in preventing abuse | Life of the account + up to 3 years for claims |
We do not make decisions based solely on automated processing that produce legal or similarly significant effects on you. Abuse-detection systems may automatically flag content, but suspension decisions affecting your account are reviewed by a human, and you can contest them.
3. AI processing
Your prompts, instructions and the content needed to build your website are sent to the AI model provider(s) we use to generate the output. Under our provider agreements, this data is processed to provide the Service and is not used by those providers to train their models. We do not use your Customer Content to train AI models of our own; we may use aggregated and de-identified usage information to improve the Service. Avoid entering sensitive personal data (health, religion, etc.) into prompts. See also the AI Transparency Notice.
4. Recipients and sub-processors
We never sell or rent personal data and do not share it for cross-context behavioural advertising. We share it only with service providers acting on our instructions, with authorities when legally required, and with a successor in case of a business transfer.
| Provider | Role | Location / safeguards |
|---|---|---|
| Anthropic, PBC | AI models for website generation, the support assistant and the Ask Flixy guide | USA — EU-US Data Privacy Framework and/or Standard Contractual Clauses |
| Google Ireland Ltd / Google LLC (Gemini API) | Creation of the AI images and videos you request (your instruction and, when you edit an image, that image) | EU / USA — DPF / SCCs |
| Cloudflare, Inc. | Hosting of published websites, CDN, DNS, SSL, security | Global network — DPF / SCCs |
| Hostinger International Ltd. | Domain name registration (reseller) and platform hosting | EU (Lithuania / Cyprus) and as per their DPA |
| Mollie B.V. (Amsterdam, Netherlands) | Card payment processing, fraud prevention and strong customer authentication (3-D Secure) | EU |
| Forward Email LLC or Hostinger International Ltd. (depending on the address) | Hosting of professional email addresses (mailboxes, sending and receiving) | USA — Standard Contractual Clauses |
| Google Ireland Ltd / Google LLC | Google services you choose to connect (Google Maps display, Search Console verification and statistics, Google Analytics on your website) | EU / USA — DPF / SCCs |
| Sendinblue SAS (Brevo), Paris, France | Sending of booking confirmation and reminder SMS, only when you turn them on | EU |
| OVH SAS (OVHcloud), Roubaix, France | Sending of the platform’s emails (account, invoices, reminders, notifications) | EU |
| Apple Inc., Google LLC or Huawei Technologies (depending on your phone) | Delivery of the notifications of the mobile apps you turn on: the title and short text of each notification pass through the notification service of your phone (Apple Push Notification service, Google Firebase Cloud Messaging or Huawei Push Kit), without advertising use | Worldwide — DPF / SCCs |
| Apple Inc. and Google LLC (only for the Wallet cards your customers add) | Apple Wallet: the card file is downloaded by your customer’s iPhone and updated through Apple Push Notification service; Google Wallet: the card (code, balance or stamps, name of the shop) is stored by Google to display it in Google Wallet | Worldwide — DPF / SCCs |
| Domain registries and ICANN-accredited registrars | Registration data required by registry rules | Worldwide, per registry policy |
An up-to-date list is available on request at privacy@flixy.studio. Where data is transferred outside the European Economic Area, we rely on an adequacy decision (including the EU-US Data Privacy Framework), the European Commission’s Standard Contractual Clauses, or another valid mechanism under Chapter V GDPR.
5. Your rights
Subject to applicable law you have the right to: access your data; rectify inaccurate data; erase data; restrict or object to processing (including at any time to direct marketing); data portability; withdraw consent at any time without affecting prior processing; and not to be subject to solely automated decisions with significant effects.
Exercise your rights from your dashboard (Data section: export and deletion) or by writing to privacy@flixy.studio. We answer within one month (extendable by two months for complex requests) and may ask you to verify your identity. You may lodge a complaint with a supervisory authority — in France the Commission nationale de l’informatique et des libertés (CNIL, cnil.fr) — or the authority of your country of residence or work.
6. Region-specific information
United Kingdom
We process UK personal data under the UK GDPR and the Data Protection Act 2018. International transfers rely on the UK Extension to the EU-US DPF or the UK International Data Transfer Addendum. You may complain to the Information Commissioner’s Office (ico.org.uk).
Switzerland
We comply with the revised Federal Act on Data Protection (nFADP). Transfers rely on the Swiss-US DPF or SCCs recognized by the FDPIC.
United States (California and other states)
Under the CCPA/CPRA and similar state laws (Virginia, Colorado, Connecticut, Utah, Texas, Oregon and others), you have the right to know which categories of personal information we collect (identifiers, commercial information, internet activity, customer content, as described above), to access, correct and delete them, to obtain a portable copy, and not to be discriminated against for exercising your rights. We do not sell or share personal information as defined by these laws and do not process sensitive personal information to infer characteristics. You may use an authorized agent. Requests: privacy@flixy.studio. If we deny a request, you may appeal by replying to our answer.
Canada
We handle personal information in accordance with PIPEDA and applicable provincial laws (including Québec Law 25). You may contact our privacy contact at privacy@flixy.studio and complain to the Office of the Privacy Commissioner of Canada.
Brazil
Under the LGPD, you have the rights listed in article 18 (confirmation, access, correction, anonymization, portability, deletion, information about sharing, revocation of consent). Our contact for data subjects (encarregado): privacy@flixy.studio. You may complain to the ANPD.
Australia, New Zealand and other countries
We handle personal information consistently with the Australian Privacy Principles, the New Zealand Privacy Act 2020 and other applicable laws. Contact us for any request or complaint; you may also contact your local regulator (e.g. OAIC).
7. Security
We implement appropriate technical and organizational measures: encryption in transit (TLS), hashed passwords, access restrictions, logging, isolated previews, protected publishing, minimization and regular reviews. No system is perfectly secure; in case of a personal data breach likely to result in a risk, we will notify the competent authority and, where required, the affected persons. See Security & trust.
8. Children
The Service is not directed to children under 18 and we do not knowingly collect their data. If you believe a minor has provided us with personal data, contact us and we will delete it.
9. Cookies
See our Cookie Policy. Our public website uses only strictly necessary cookies and cookie-free analytics.
10. Changes
We may update this policy. The date at the top shows the latest version; material changes will be notified by email or in the dashboard.
Questions about this document? Write to legal@flixy.studio.
This English version is the binding version. Translations are provided for convenience only, except where mandatory local law requires otherwise.