Privacy policy

Who the data controller is

The data controller is [NAME OR COMPANY NAME], with tax ID (NIF) [NIF] and address at [ADDRESS]. For anything about your data, write to us at [CONTACT EMAIL].

What data we process

Your account: your email, your name if you give it to us and, if you sign in with Google, your Google profile name. We never see your Google password.

What you tell us in the onboarding: what you’d like us to call you, where you post, your industry and your profile. Answers saved without an account are anonymous: they don’t include your name or your email.

Your email, if you leave it on the website so we can save your plan, let you know about “Connect your Claude” or add you to the waitlist, and whether you want to receive news (a separate, unchecked box).

Your videos: the raw video you upload, its working copies, the transcript of what is said, where the face is at each moment (only its position, for framing; we don’t identify anyone), the edited versions, and the comments and drawings you make on them.

If you work in a team or share a link with a client: the emails in the invitations, and the name and comments your client leaves.

Payments: your plan, your subscription and your invoices. Your card details are processed by Stripe; we don’t see them.

Usage: the jobs you run, how long they take and what they cost, to provide the service, enforce your plan’s limits and improve it.

Why and on what legal basis

To provide the service you sign up for (creating your account, editing your videos, storing your versions, charging you and letting you know when a video is ready): this is the performance of the contract.

To save your plan, or to let you know about “Connect your Claude” or that there’s a spot for you in the beta: because you ask us to when you leave your email.

To send you news: only if you check the box, and you can withdraw your consent whenever you want.

For the security of the service, preventing abuse and understanding in aggregate how the website is used (without cookies): our legitimate interest.

To comply with our legal obligations, such as tax obligations related to invoices.

Editing with Claude

To edit your videos, we use Claude, from Anthropic. We send it the transcript and the frames it needs to decide on the edit and review it, never the entire raw video. With “All-inclusive”, this goes through our Anthropic API account, which does not use that data to train its models.

With “Connect your Claude”, your Claude Code runs in a container that is yours alone and uses your own Anthropic account, under its terms. We never ask for, read or store your Claude credentials.

Claude never makes decisions about you: it only edits the video you ask it to.

Who we share it with

Only with the providers we need to provide the service, who process it on our behalf and under contract:

Supabase (accounts and database, in Ireland); Cloudflare R2 (video storage, [LOCATION]); Vercel (the website and its cookie-free analytics); Railway (the server that edits the videos); Inngest (the job queue); Anthropic (editing with Claude); Stripe (payments); Resend (emails); Sentry (error alerts, without your data); Google (only if you sign in with Google); and Fly.io (the “Connect your Claude” containers, if you use it).

We don’t sell your data or share it with anyone for their advertising.

If it leaves the European Economic Area

Some of these providers are based in the United States or may process data outside the European Economic Area. In that case, they do so with the safeguards required by the GDPR: the EU-U.S. Data Privacy Framework or the European Commission’s standard contractual clauses. [Check each provider’s mechanism].

How long we keep it

The raw video and its working copies are deleted [30 days] after you upload it, and we notify you [5 days] before. The project stays archived: you can still view and download it.

Your versions, comments and account data, for as long as you keep your account. If you delete it, they are deleted too, except what the law requires us to keep (invoices, [6 years]).

Waitlist and plan emails, until you open your account or ask us to delete them. News, until you unsubscribe.

Your rights

You can ask us to access your data, rectify it, erase it, object to its processing, restrict it or take it with you (portability) by writing to [CONTACT EMAIL]. We reply within one month at most.

If you believe we are not handling it properly, you can file a complaint with the Spanish Data Protection Agency (AEPD, aepd.es).

How we protect it

Each workspace is visible only to its members: the database enforces this row by row. Videos are uploaded directly from your browser to storage, with signed links that expire. For your clients’ links and their passwords, we only store a fingerprint (hash), never the original.

Changes

If we change anything important in this policy, we’ll tell you by email or in the app before it takes effect.