Privacy Policy.

NataSquad S.A.S. — 10 Rue de la Paix, 75002 Paris, France Email: contact@storyface.ai | Website: www.storyface.ai

2.1 Account data (registered B2B users) • Name, surname and professional email address • Billing information (handled by PCI-DSS certified provider) • Credit history and activation records 2.2 Event activation participant data • Instant facial photograph taken at the moment of activation • AI-generated image created from the source photograph 2.3 Technical data • IP address (anonymised after processing) • Anonymous analytics (no third-party advertising cookies) • Technical logs required for security

• Provision of the AI animation service — Consent (Art. 6.1.a GDPR) • Account management and billing — Contract performance (Art. 6.1.b GDPR) • Security and product analytics — Legitimate interest (Art. 6.1.f GDPR)

Participant data: automatic deletion within 48 hours of the event. B2B user account data: duration of the contractual relationship + 3 years. Billing data: 10 years (legal obligation). IMPORTANT: No image is ever used to train artificial intelligence models.

• Hosting exclusively within the European Union (OVH France & o2Switch France/Spain). • No transfer of data outside the European Economic Area. • HTTPS/TLS encryption across all communications.

You may exercise your rights to access, rectification, erasure, and portability at any time by writing to contact@storyface.ai. Guaranteed response time: 30 days.

Any material change will be notified by email to registered users at least 30 days before taking effect.