Data Processing
This page explains how personal data is processed when you use Moments Studio, and how we support your obligations under data-protection laws such as the GDPR.
Roles
Moments Studio acts as the data controller for information collected through the Service, such as account details, billing information, and support correspondence. When you upload source material or generate posts, you remain the controller of that content, and we process it on your behalf.
Lawful basis
We process personal data on the basis of performing our contract with you, complying with legal obligations, pursuing legitimate interests (such as fraud prevention and service improvement), and, where required, your consent.
Subprocessors
We use carefully selected subprocessors to host, secure, and deliver the Service. These currently include our cloud infrastructure, database, authentication, payment, email delivery, and AI providers. A current list is available on request.
Data transfers
Your data may be stored and processed in jurisdictions other than your own. Where we transfer personal data outside the European Economic Area, we use appropriate safeguards such as Standard Contractual Clauses.
Retention
We keep your personal data for as long as your account is active or as needed to provide the Service. After account deletion, we remove or anonymise data within a reasonable period, unless a longer retention period is required by law.
Your rights
You may have the right to access, rectify, erase, restrict, or object to processing of your personal data, and to receive your data in a portable format. To exercise these rights, email hello@moments.studio.
Last updated: 21 August 2026