Privacy Policy

Last updated: October 26, 2025

Back to Login

This Privacy Policy describes Our policies and procedures on the collection, use and disclosure of Your information when You use the Service and tells You about Your privacy rights under the General Data Protection Regulation (GDPR) and how the law protects You.

We use Your Personal data to provide and improve the Service. By using the Service, You agree to the collection and use of information in accordance with this Privacy Policy.

Interpretation and Definitions

Interpretation

The words of which the initial letter is capitalized have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.

Definitions

  • Account means a unique account created for You to access our Service or parts of our Service.
  • Affiliate means an entity that controls, is controlled by or is under common control with a party, where "control" means ownership of 50% or more of the shares, equity interest or other securities entitled to vote for election of directors or other managing authority.
  • Company (referred to as either "the Company", "We", "Us" or "Our") refers to WISHFUL.
  • Cookies are small files placed on Your computer, mobile device or any other device by a website, containing details of Your browsing history.
  • Country refers to: Frankfurt, Germany
  • Device means any device that can access the Service such as a computer, cellphone or digital tablet.
  • Personal Data is any information relating to an identified or identifiable individual.
  • Service refers to the Website.
  • Service Provider means any natural or legal person who processes data on behalf of the Company.
  • Usage Data refers to data collected automatically from the use of the Service.
  • Website refers to WISHFUL, accessible from https://wishfulitaly.com
  • You means the individual accessing or using the Service, or the legal entity on whose behalf such individual is using the Service.

Collecting and Using Your Personal Data

Types of Data Collected

Personal Data

While using Our Service, We may ask You to provide certain personally identifiable information, including but not limited to:

  • Email address
  • Account credentials (securely encrypted)
  • Payment information (processed through third-party payment processors)
  • AI generation prompts and text inputs
  • Generated video content and associated metadata
  • Usage quota and subscription information
  • Video generation history and preferences
  • Profile information and settings

Usage Data

Usage Data is collected automatically when using the Service, including: IP address, browser type, browser version, pages visited, time and date of visit, time spent on pages, unique device identifiers, and other diagnostic data.

On mobile devices, We may collect: device type, unique device ID, IP address, operating system, mobile browser type, and other diagnostic data.

Tracking Technologies and Cookies

We use Cookies and similar tracking technologies (beacons, tags, scripts) to track activity and improve Our Service.

  • Necessary / Essential Cookies: Session Cookies for authentication, security, and core functionality.
  • Cookies Policy Acceptance Cookies: Persistent Cookies to record Your consent.
  • Functionality Cookies: Persistent Cookies to remember login, language, and preferences.

You may disable Cookies in Your browser, but some features of the Service may not work.

Third-Party Service Providers

We work with GDPR-compliant third parties. These providers access Personal Data only to perform tasks on Our behalf and are obligated to protect Your information:

  • OpenAI
    Purpose: AI-powered video generation and content processing
    Data Shared: Your text prompts and generation requests
    Privacy Policy: https://openai.com/privacy
    Note: OpenAI processes prompts only to generate videos. We do not use Your personal prompts to train AI models.
  • BytePlus
    Purpose: AI-powered video generation and content processing
    Data Shared: Your text prompts and generation requests
    Privacy Policy: https://www.byteplus.com/privacy
    Note: BytePlus processes prompts only to generate videos. We do not use Your personal prompts to train AI models.
  • Stripe
    Purpose: Payment processing for subscription plans
    Data Shared: Payment information, billing details, transaction records
    Privacy Policy: https://stripe.com/privacy
    Note: We do not store full credit card information. Stripe processes all payment data securely in compliance with PCI-DSS.

Use of Your Personal Data

Legal bases under GDPR:

  • Performance of a contract
  • Your consent
  • Legitimate interests (security, fraud prevention, service improvement)
  • Compliance with legal obligations

We may use Personal Data to:

  • Provide, maintain and secure the Service
  • Manage Your Account and registration
  • Process payments and subscriptions
  • Contact You with service updates, security notices, and support
  • Analyze usage and improve the Service
  • Prevent fraud and illegal activities
  • Comply with legal requirements

We may share Personal Data:

  • With authorized Service Providers
  • For business transfers (merger, acquisition, asset sale)
  • With Your explicit consent
  • When required by law or public authorities

Retention of Your Personal Data

We retain data only as long as necessary:

  • Account Information: Duration of account + 30 days after closure
  • AI-Generated Content: Free Plan: Retained indefinitely; may be used for promotional purposes. You may request deletion.
  • Paid Plan: Retained for subscription duration + 90 days after cancellation
  • Payment Data: Transaction records retained for 7 years (tax compliance)
  • Usage Data: Retained for 2 years
  • AI Prompts & History: Retained for account duration; anonymized data may be kept for improvement

Data Deletion Requests

You may request deletion at any time:

  • Via "Delete Account" in account settings
  • By emailing: info@wishfulitaly.com (Subject: Data Deletion Request)

Deletion is irreversible. Backup data may remain up to 90 days. We may retain data where required by law.

Transfer of Your Personal Data

Your data may be transferred outside the European Economic Area (EEA). All transfers comply with GDPR using EU Standard Contractual Clauses (SCCs) or adequate safeguards.

Your GDPR Rights

If you are in the EEA, UK, or Switzerland, you have the right to:

  • Access Your Personal Data
  • Rectify inaccurate or incomplete data
  • Erasure ("Right to be Forgotten")
  • Restrict processing
  • Object to processing
  • Data portability
  • Withdraw consent at any time

To exercise these rights, contact: info@wishfulitaly.com (Subject: GDPR Request). We respond within 30 days.

Disclosure of Personal Data

  • Business Transactions: Data may be transferred with prior notice.
  • Law Enforcement: Disclosed if required by law, court, or government authority.
  • Legal Obligations: To comply with laws, protect safety, prevent fraud or liability.

Security of Personal Data

We implement commercially reasonable security measures. No internet transmission or storage is 100% secure; absolute security cannot be guaranteed.

AI-Generated Content & Intellectual Property

Free Plan Users

  • Ownership: All content belongs to WISHFUL.
  • License: Non-exclusive, non-transferable for personal, non-commercial use.
  • May be used for promotion and public display.

Paid Plan Users (Pro/Premium)

  • Ownership: You retain full intellectual property rights.
  • Commercial use allowed without restriction.
  • Content will not be used for promotion without Your explicit consent.

Children's Privacy

The Service is not intended for anyone under 13. We do not knowingly collect data from children under 13. If discovered, data will be deleted immediately.

Links to Other Websites

We are not responsible for third-party websites. Please review their privacy policies.

Changes to This Privacy Policy

We may update this policy. Changes are effective when posted. We will notify You via email or prominent notice and update the "Last updated" date.

Contact & Complaints

For questions, GDPR requests, or complaints:

You may also lodge a complaint with your local data protection authority (DPA) if you believe processing violates GDPR.