Privacy
What we do with your data.
Numeri sets one cookie, keeps you signed in with it, and loads no third-party script of any kind. The one thing you should read before uploading anything: your product photograph is processed in the United States.
Last updated 30 August 2026. Controller: Odratta, a French SARL.
The short version
Three things, then the detail.
One cookie, no banner
It keeps you signed in. There is no analytics, no tracking pixel and no third-party font. That is why you are not being asked to consent to anything.
Your photo goes to the US
Rendering happens at fal.ai, in the United States. It is not incidental: it is how the service works. The detail is below.
EXIF is stripped
Every uploaded image is re-encoded on our server. Colour profile, comments and GPS coordinates are destroyed before anything else happens.
Collected
What we hold, and why.
Nothing on this list is optional decoration. If a field is not needed to run your account or to make your video, we do not ask for it.
Your account
Your content
Billing
Technical records
IP addresses kept beyond a session — on Business enquiries, for instance — are hashed with a secret, never held in clear.
Processors
Four companies touch your data. There is no fifth.
No CDN, no analytics provider, no font host, no embedded player. The site's content security policy blocks outbound requests to third parties outright.
fal.ai, and the transfer outside the EU
Product photographs are processed in the United States by our rendering provider, fal.ai, which operates the AI models used to generate your image and your video. This is the only transfer of personal data outside the European Union that Numeri performs.
We do not upload your file to them. We hand over a signed URL, valid for one hour, that grants access to that single file, and fal.ai fetches it from our server. The result is then pulled back to us. The provider's output URL is never handed to you, and never made public.
TODO Joseph Le fondement juridique du transfert (Data Privacy Framework ou clauses contractuelles types), la durée de conservation chez le prestataire, et la liste de ses propres sous-traitants seront publiés ici dès que l'accord de sous-traitance sera signé.
Mollie, and your card
We never see a card number. You are redirected to a page hosted by Mollie; there is no iframe, no SDK and no third-party script in our pages. What we keep on our side is the Mollie identifiers, the amount, the currency, the status, and the label of the payment method — “Visa”, “PayPal” — never the number itself. Mollie is established in the European Union, so nothing leaves it on that side.
Retention
How long we keep it.
A published retention period is a commitment. We publish the ones that are settled, and leave the others open rather than guess.
TODO Joseph Trois durées de conservation restent à valider avant publication. Elles sont proposées côté technique et n'engagent rien tant qu'elles ne sont pas écrites ici.
Legal basis
Why we are allowed to.
There is no marketing, no newsletter, no profiling and no advertising here. So nothing on this site relies on your consent.
Cookies
One cookie. That is the whole list.
It keeps you signed in. There is no analytics, no tracking, and no third-party script on this site.
This cookie is strictly necessary to the service you asked for — signing in to your account — so it falls under the consent exemption of the ePrivacy directive. That is not a shortcut: it is simply what happens when a site calls no third party at all.
The browser also stores a form draft locally on your own machine. It never reaches us.
Your rights
Access, correct, export, erase.
You may request access to your data, correct it, have it erased, take it elsewhere, restrict how it is used, or object to a given use. No processing here rests on consent, so there is no consent to withdraw.
Two of these are built into the application and take effect without writing to anyone: you can request a full export of your data, which arrives by email, and you can close your account from your settings.
What closing an account does
Your files — the photograph, the intermediate image, the video — are deleted from disk. The account is anonymised after 30 days; that delay exists for accounting, and so that a closure made by mistake, or by someone who took over your session, can still be undone.
Invoices are kept for 10 years. That is a legal obligation and it is not erasable. We say so plainly, because otherwise you would assume everything disappears.
Odratta has not appointed a data protection officer and is not required to. The person to write to is the company's manager. If you believe your rights are not respected, you may lodge a complaint with the French supervisory authority: CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, www.cnil.fr.
TODO Joseph L'adresse de contact pour l'exercice des droits reste à arrêter ; elle sera publiée ici.
Still reading?
The terms of service cover what the product does, what it does not promise, and how the subscription works.