Data processing

Plain-language summary. The binding terms live in the Terms of Service; a countersigned DPA is available for Agency customers on request.

Roles

For content you submit, you are the controller and Xentavi sp. z o.o. is the processor (or your sub-processor). For the account, billing, security, and this website, Xentavi is an independent controller. Xentavi is not your EU representative.

What we store

Account and plan; a 30-day analysis receipt (source name, content type, score, rule, time, workspace). Not the raw upload. Not a full report. Billing records are kept as the law requires. See Subprocessors for who else can see what.

Retention

We delete receipts after 30 days and exclude them from routine backups. We delete account data within 30 days after account closure. We ordinarily retain invoices for five years.

Transfers

Images, and up to three still frames from each video, go to Kozelo SAS (Sightengine), Paris. Default processing: the EU (France, Ireland, Germany, Finland), Canada, or the United States — no region lock under Terms version 1.1. Sightengine deletes submissions by default after processing (Feedback API and storing features are not used). STAiMP's 30-day receipt deletion covers our receipts only, not Sightengine-side processing. Other providers are not used for customer content until they are named on the subprocessors page.

Your rights

Email legal@xentavi.com. We respond within one month. You can complain to UODO (uodo.gov.pl) or, where UK GDPR applies, the ICO (ico.org.uk). Export receipts from the cabinet; a full machine-readable export is available in account settings.

Countersigned DPA

Agency customers can request a countersigned DPA.

Request a DPA