Privacy policy

Emmanuel Smadja LTD, registration no. 336519525, 55 Rothschild Blvd, Tel Aviv-Yafo, Israel, is the controller for CineGeny and CineGeny Studio data. Contact contact@cinegeny.com about your data.

Account, project, order and delivery data are processed to provide the requested service. Security, fraud prevention and moderation serve our legitimate interest in protecting the service and its users. Required invoices and evidence are retained to meet applicable obligations. The personal face option, public supporter names and optional audience measurement rely on your explicit choice.

We use account and sign-in information, projects and files you provide, preferences, support requests, orders, receipts and credit transactions. Google identifiers and profile information link your account and verify sign-in.

Festival entry records the author name, country, adult declaration, declared rights, category and accepted rules. Votes are linked to the account and technical information needed to prevent fraud. Your votes are not published as a named list.

A published work’s page, author, counters and distinctions are public. A supporter’s name appears only with consent. Technical connection and navigation data also support diagnostics and security.

The identity document and face data are linked to the consent and the specific work. The document stays in private storage for human verification. It is never sent to generation engines. The face reference is sent to the engine needed to produce the requested reference sheet or images.

The consent displays the exact retention period and deletion deadline for face data and the identity document. The selfie is deleted once the sheet is produced, unless you explicitly choose retention until that deadline. Revocation blocks future use; it does not automatically remove shots already rendered.

Detection of resemblance to a public figure can block processing. You can request human review through support.

Your name, delivery address and contact details are requested only after a poster is awarded. They are encrypted in our records and sent to Gelato for printing, shipping and delivery issues. The provider also receives the artwork to print.

Our copy of the address is deleted 90 days after confirmed delivery. An account deletion request triggers cancellation where still possible and file deletion. An uncertain provider operation may need reconciliation before information essential to resolving it can be deleted. The carrier’s or provider’s own obligations remain applicable.

Access is limited to staff responsible for the service and necessary providers: hosting, storage, generation engines, Google authentication, transactional email through Resend where configured, and Gelato printing and delivery. The payment provider and its terms will be identified at checkout before any payment. CineGeny does not request card numbers in profile fields.

Data may be processed in Israel and countries used by the providers involved. Transfers requiring legal safeguards must use the applicable mechanism, including an adequacy decision or standard contractual clauses. Contact us about the recipients and safeguards relevant to your processing.

No optional audience measurement tool is enabled on this application.

Account and project data are used while providing the service. On closure, affected data is deleted or anonymised, subject to pending operations, claims and accounting or legal obligations. Necessary financial records are retained separately from public display.

Security logs and moderation evidence are limited to the period needed for their purpose, incident resolution or a legal claim. You can ask for the criteria and deadline applicable to your data. The specific face and delivery periods above apply to those activities.

You may request access, correction, deletion, restriction or portability where applicable, object to processing and withdraw consent for future use. Contact contact@cinegeny.com from your account or its contact email.

GDPR requests receive a response within one month; a reasoned extension may be notified within that period. Additional identity information is requested only where there is reasonable doubt. You may complain to the competent data protection authority.