1. Introduction

1.1 This is the privacy policy of Cameleos.

1.2 Cameleos SAS is a limited liability company registered in accordance with the laws of France, with its headquarters located at 200 rue de la Croix Nivert, 75015 Paris.

1.3 This privacy policy aims to inform visitors to our website and clients of our services and products (collectively referred to as “you”, “your”) about how we collect, process, and protect your personal data.

1.4 This privacy policy does not cover the processing of personal data concerning job applicants, employees, or subcontractors of the company. Specific policies have been established for these individuals. If you are identified as belonging to one of these categories during our interactions, we will provide you with the applicable privacy policy.

1.5 We will explain who we are, how and why we process your personal data, how you can exercise your privacy rights, and provide any other information that may be useful to you.

1.6 In this privacy policy, we have made every effort to provide clear and simple information. If you would like more details about how we process your personal data, you can contact us using the contact tab on our website.

1.7 This privacy policy is subject to periodic updates, and we recommend reviewing it regularly. By creating an account, using our services, or making a purchase, you acknowledge that you have read and accepted this privacy policy. The most recent version is always available on our website. Last updated: January 2026.

2. Who is responsible for data control?

2.1 Unless otherwise stated in this privacy policy or any other specific privacy policy made available to you, the controller of your personal data is Cameleos and its subsidiary(ies) specified in the terms and conditions on the website where you created your account and/or your photo product and/or placed an order.

3. How and why we process your personal data

3.1 Creating a video product

If you wish to create a product, we encourage you to create an account. To create an account, it is necessary to provide your first and last name, email address, and a password. You may also voluntarily add other personal data to your account, such as gender, date of birth, or address.

The processing of this personal data is based on a contract, specifically to take steps prior to entering into a contract with you, and on legitimate interest. Adding additional personal information to your account will save you time when placing your order. It is also in your interest to store your projects in your account so that you can work on them at your own pace.

3.2 File storage and organization

We provide a service to help you organize and store your files. You can upload your files via our website to create products and access your edits. The service can be canceled at any time. Processing of your files in this context is based on a contract or on legitimate interest if other people appear in the stored files (see section 4 of this privacy policy).

3.3 Ordering, payment, and delivery of your video product

We process your personal data to generate your products. This includes the files you upload, your order details, and billing and delivery addresses. The processing of these personal data is based on the performance of the contract we have concluded with you.

Payments are processed by a payment service provider with whom we have a contract. The payment service provider responsible for processing the payment uses your payment data and may only use your personal data to process the order and not for other purposes.

3.4 Contact with our customer service

We may also process your personal data to provide customer service, i.e., to respond to any questions or complaints you may have. This includes storing and recording all relevant information regarding your inquiry or complaint, whether submitted by phone, chat, or email. This may include your name, contact details, order number, and financial information. If your contact concerns a previous order with us, this processing is based on the performance of the contract we have with you. Otherwise, the processing of personal data is based on legitimate interest, which includes our mutual interest in handling your request efficiently.

For training purposes, we may record calls you make with our customer service. These recordings include all information exchanged during the call, including at least your name and contact details. We do this based on our legitimate interest in ensuring our service standards remain high.

3.5 Customer relations and marketing

To ensure our products and services meet our clients’ needs, we analyze website usage and sales of our goods and services. This may involve processing data related to your order history, interactions with customer service, your name, contact details, and information collected on our website. We may also perform automated analysis of any feedback you provide to improve our products.

We may also send advertising through various channels such as email or text messaging, which you may unsubscribe from at any time. Additionally, we may use targeted marketing and social media marketing on platforms such as Facebook and Instagram. These activities are carried out based on legitimate interest to ensure our products and services meet our clients’ needs, and, where necessary, on consent.

In some cases, we may contact you regarding important matters about our services or your account. This may be done by phone, email, or text message using the contact information you provided. These messages are strictly service updates and are not commercial communications; therefore, unsubscribing does not apply.

3.6 Personalized and interest-based advertising

We work with advertising entities, third-party ad companies (such as Google), and social media organizations to display online ads.

These entities may use your data, cookies, and similar technologies to collect information about your interactions with our services, communications, and other online platforms. The data is then used to deliver ads tailored to your potential interests, including personalized ads. You can learn more about Google’s privacy rules and how they protect your data (here).

3.7 Cookies

We collect information through cookies. Cookies are small information files that store and can retrieve details about your visit to this website, such as how you arrived, how you navigated, and what you found interesting. More information is available in our Cookie Policy.

3.8 Compliance with legal requirements

We may process personal data, such as your name, contact details, and financial information, to comply with laws and regulations. For example, this may include fulfilling tax or business obligations. To comply with applicable laws, we may sometimes disclose your personal data to governmental or regulatory authorities.

4. Personal data of others provided by you

4.1 When using our services, you may provide personal data of other individuals. This occurs when you upload or order files showing other people besides yourself. These files may be considered personal data. Entering other people’s contact details during the ordering process to deliver a product directly to them is another example.

4.2 When you provide personal data of others, processing is based on legitimate interest. These interests include your interest in quickly and easily creating a product featuring friends, relatives, acquaintances, and others, as well as our commercial interest in providing these services to our clients. In most cases, it is practically impossible, or at least very difficult, for us to identify individuals in the images, and we do not process your images for this purpose.

However, we strongly advise against sharing personal data of people who may not consent. Ensure they are informed, have read our privacy policy, and provide consent before sharing their images or other personal information with us.

5. Who will your personal data be disclosed to?

5.1 Employee access to personal data is strictly limited to what is necessary to perform their duties related to our services, as well as research and product innovation to improve customer experience and marketing. All employees are required to maintain data confidentiality.

5.2 Your personal data will not be disclosed to third parties, except for our subsidiaries and/or affiliated companies and data processors (including delivery and payment service providers) under contract with us, such as:

• Payment service providers

• Delivery and courier services

• Advertising and marketing agencies, including Google, for personalized ads

5.3 We will not share your personal data with other third parties without your consent, except if:

• We are legally required or authorized to do so (e.g., court order or for crime/fraud prevention or detection)

• We are negotiating with a third party for the sale or purchase of our business or assets, in which case we may disclose personal data to the potential buyer or seller

• The company and its subsidiaries or substantially all of its assets are acquired by a third party, in which case personal data held by the company on its clients will be one of the transferred assets

• We wish to enforce or protect our rights, property, security, or those of our clients or others.

6. How your personal data is secured

We take the protection of your personal data seriously and have implemented appropriate technical, physical, and organizational measures to safeguard personal data against accidental or unlawful destruction, loss, damage, alteration, disclosure, or unauthorized access, and any other form of unlawful processing.

7. How long your personal data will be retained

7.1 We retain personal data as long as necessary to achieve the purposes described in this privacy policy, which may include legal, accounting, or reporting obligations. Please refer to our Terms and Conditions for more information about photo storage and retention periods.

7.2 When deciding on retention periods, we consider legal retention requirements, our legal position, reasons for data collection, and the nature and sensitivity of the data.

8. How to exercise your privacy rights

8.1 Under the EU General Data Protection Regulation (GDPR), you have several rights regarding your personal data. These include:

• The right to receive a copy of your personal data

• The right to receive certain personal data in an electronic format

• The right to correct personal data if inaccurate. Most data can be corrected by logging into your account

• The right to request processing to stop or object in certain circumstances

• The right to request deletion of personal data in certain circumstances

• The right to withdraw consent at any time when consent is the legal basis for processing. Withdrawal does not affect the lawfulness of processing based on prior consent

8.2 To exercise any of these rights, please contact us using the contact information below. We may request additional information to verify your identity before responding to your request.

9. How to contact us

9.1 If you have questions or complaints about this privacy policy or how we process your personal data, please first consult our FAQ. If your question is not answered, use our contact form on our website.

9.2 You also have the right to lodge a complaint with your local data protection authority regarding how we process your personal data. You can find their contact details on their website. Before filing a complaint, we recommend contacting our Data Protection Officer via email at contact@cameleos.com