Privacy Policy

Effective date: 1 June 2025

1. Introduction

This Privacy Policy explains how NDEY KNTENT ("NDEY KNTENT", "we", "us", or "our") collects, uses, and safeguards the personal data you provide when you use our social content creation and editing services (the "Service").

NDEY KNTENT is operated by Lars Gruber, Ignazgasse 9, 1120 Wien, Austria.

2. Information We Collect

• Account Information - name, email address, authentication tokens, and payment identifiers.
• Content Data - photos, videos, and other media you upload for editing. Unless you explicitly opt-in for extended storage, all raw files are deleted within 30 days of project completion.
• Usage Data - log files, device information, IP addresses, and analytics events that help us secure and improve the Service.
• Cookies & Tracking - small files placed on your device to remember preferences and measure site performance.

3. Legal Bases for Processing (GDPR)

We process your personal data only when we have a lawful basis to do so, including: (i) contract performance, (ii) legitimate interests such as fraud prevention and Service improvement, (iii) your consent, and (iv) legal obligations.

4. How We Use Your Data

• To provide, maintain, and improve the Service.
• To process transactions and manage your subscription.
• To edit and create content based on materials you provide.
• To detect, investigate, and prevent security incidents and abuse.
• To communicate with you about updates, support requests, or marketing (where permitted).
• To comply with applicable laws and payment-processor requirements.

5. Sharing & Disclosure

We never sell your personal data. We share it only with:

• Service Providers (e.g., cloud hosting, payment processors, authentication, analytics) that process data on our behalf under strict confidentiality.
• Affiliates / Corporate Transactions in connection with a merger, acquisition, or sale of assets, provided the recipient observes this Policy.
• Law Enforcement when required by law or to protect our rights, users, or the public.

6. International Transfers

We are headquartered in Austria but work with global service providers. When we transfer data outside the European Economic Area, we rely on Standard Contractual Clauses or other lawful mechanisms.

7. Data Retention

We retain account-related data for as long as your account is active and for as long as necessary to comply with our legal obligations. Uploaded content is deleted within 30 days of project completion unless you request extended storage.

8. Your Rights

Depending on your jurisdiction, you may have rights to access, rectify, erase, restrict, or port your personal data, object to certain processing, or withdraw consent at any time. California residents may also request information about categories of personal information we disclose for business purposes.

You can exercise these rights by contacting us at privacy@ndey-kntent.com. We may need to verify your identity before responding.

9. Cookies & Analytics

We use essential cookies for authentication and security, and optional analytics cookies to understand Service usage. You can manage cookie preferences in your browser or opt-out of analytics via the cookie banner.

10. Security

We employ industry-standard safeguards such as TLS encryption in transit, access controls, and regular security audits. No Internet transmission is 100% secure, so we cannot guarantee absolute security.

11. Children's Privacy

The Service is not directed to children under 16, and we do not knowingly collect personal data from them. If we learn that a child has provided us personal data, we will delete it promptly.

12. Changes to This Policy

We may update this Policy periodically. We will notify you of material changes via email or through the Service. Continued use after changes constitutes acceptance of the revised Policy.

13. Contact

For privacy questions, requests, or complaints, contact us at: