Privacy policy

Who we are

doppio (doppio.design) is a platform for turning static design work into motion reels. It is operated by Appart (Brussels, Belgium), the data controller for the personal data described here. For anything privacy-related, contact phil@appart.agency.

What we collect

• Account data — your email address and authentication state when you sign up or log in.
• Content you upload — images, videos and design files you add to your projects, and the reels you render from them.
• Payment data — handled by Stripe. We never see or store your card details; we keep only your subscription/credit status and invoicing records.
• Usage data — product analytics (pages, feature usage, device type) collected via PostHog, and referral attribution if you arrive through a partner link.
• Communications — emails we exchange, and delivery/open metadata for emails we send.

Why we use it

• To provide the service (contract): accounts, uploads, rendering, exports, payments.
• To improve the product (legitimate interest): understanding which features are used and where they fail.
• To communicate (contract / consent): transactional email always; product updates only where you have not opted out.

We do not sell personal data, and we do not use it for third-party advertising.

Where it lives (processors)

doppio runs on a small set of infrastructure providers, each processing data on our behalf under their own data-processing agreements:

• Supabase — database, authentication and file storage
• Vercel — application hosting
• Amazon Web Services (eu-central-1) — video rendering
• Stripe — payments and billing
• PostHog (EU cloud) — product analytics
• Resend — email delivery
• Cloudflare Turnstile — bot protection on signup
• Rewardful — partner/affiliate attribution

Some providers process data outside the EU; where that happens it is covered by standard contractual clauses or an adequacy decision.

Cookies

We use cookies for signing you in (session cookies), remembering that you have an account, analytics (PostHog) and referral attribution (Rewardful). We do not run third-party advertising cookies.

Retention

Your account data and uploads stay as long as your account exists. If you delete your account, we delete personal data and uploaded content within 30 days, except records we must keep for legal or accounting reasons (e.g. invoices). Analytics data is retained in aggregate.

Your rights

Under the GDPR you can request access to, correction of, or deletion of your personal data; ask for a portable copy; or object to processing based on legitimate interest. Email phil@appart.agency and we will respond within 30 days. You can also lodge a complaint with your local supervisory authority — in Belgium, the Gegevensbeschermingsautoriteit / Autorité de protection des données.

Social publishing

Where doppio publishes content to social platforms (e.g. Pinterest) on our own or — in the future — on your behalf, we store only the access tokens and post metadata needed to publish and report status. Your use of those platforms remains governed by their own privacy policies.

Changes

If this policy changes materially, we will note it here with a new effective date and, for significant changes, tell you by email.