Privacy policy

Who we are

This website is run by moovie.me, an AI video production studio based in Novi Sad, Serbia. We are the controller of the personal data described below. For any privacy question or request, write to lets@moovie.me.

We process personal data in line with the EU General Data Protection Regulation (GDPR) and the Law on Personal Data Protection of the Republic of Serbia.

What we collect

When you send a brief or a message — only what you enter yourself:

• your name, company, email address, messenger and username or phone number;
• your answers about the project: what you need, where it will run, durations and number of videos, timing, budget range, task description, links;
• a file you attach (presentation, brief, references — up to 20 MB);
• your message, if you use “Just write to us”.

Technical data sent together with the request: the page language and the page from which you sent it, the website that referred you (referrer) and campaign tags from the link (utm_source, utm_medium, utm_campaign, utm_term, utm_content), and the time of sending.

For protection against spam: your IP address is used to limit the number of requests (no more than 5 in 10 minutes) and is stored only as a one-way pseudonymous key for 10 minutes. If bot protection is enabled, Cloudflare Turnstile checks the browser and returns a pass/fail token to us.

In your browser only: while you fill in the brief, a draft is saved in your browser’s local storage so nothing is lost if you close the page; it is deleted after a successful submission. Campaign tags of your first visit are kept in session storage until you close the tab. This data never leaves your device unless you send the brief.

We do not use advertising cookies and do not sell or share personal data for marketing.

Why we use it and on what legal basis

• To answer your request and prepare a proposal and estimate — steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR) and your consent given in the form (Art. 6(1)(a)).
• To protect the website from spam and abuse — our legitimate interest (Art. 6(1)(f)).
• To understand which pages and campaigns bring requests — our legitimate interest; we look at aggregated numbers only.

You can withdraw your consent at any time by writing to lets@moovie.me. This does not affect processing that already took place.

Who processes the data for us

Service	Purpose	Data
Vercel (USA)	website hosting, request processing, file storage (Vercel Blob), technical logs	all request data, attached file, IP address in logs
Resend (USA)	delivering the request to our team mailbox and the confirmation email to you	request data, your email
Google (USA / EU)	the request log in Google Sheets used by our team	request data
Telegram	instant notification of a new request in our team chat	request data
Cloudflare (USA)	Turnstile bot protection	technical browser signals, IP address
Upstash (USA / EU)	request counters for the rate limit	pseudonymous IP key, for 10 minutes
Bunny.net (Slovenia, EU)	delivery of videos on the website	IP address and technical data of video requests
Plausible Analytics (Estonia, EU)	privacy-friendly visit statistics without cookies	aggregated, non-identifying visit data

Each processor acts on our instructions under a data processing agreement. If we connect a CRM, the request is passed to it through a webhook under the same rules.

Transfers outside the EU and Serbia

Some processors are located in the USA. Transfers are based on the European Commission’s Standard Contractual Clauses and, where applicable, the EU–U.S. Data Privacy Framework.

How long we keep it

• Requests, attached files and correspondence — 24 months from our last contact, then deleted. If we sign a contract, data needed for it is kept for as long as the law requires.
• Rate-limit keys — 10 minutes.
• Technical server logs — according to the hosting provider’s retention, no longer than 30 days.

Your rights

You have the right to access your data, to have it corrected or deleted, to restrict or object to processing, to data portability and to withdraw consent. To delete your request or use any other right, write to lets@moovie.me from the address you used or tell us the request details — we will reply within 30 days.

You can also lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection of the Republic of Serbia (poverenik.rs) or with the data protection authority of the EU country where you live.

Changes

We will update this page when the list of services or the way we process data changes. The date at the top shows the current version.