Privacy Policy

1. Purposes of processing

The Company processes personal data for the following purposes and obtains consent before any change of purpose.

• Account creation, identification, and account management
• Providing the Service: video analysis, clip generation, editing, download
• Credit settlement, subscription billing, refunds
• Incident response, abuse prevention, and support
• Service analytics and advertising conversion measurement for users who consent
• Compliance with legal obligations

2. Data processed and retention periods

The Company does not collect or store card numbers, bank account numbers, or other payment instrument details. Those are handled by the payment processor.

After account deletion the Company retains certain records as required by law: contract and withdrawal records 5 years, payment and supply records 5 years, consumer complaint and dispute records 3 years, advertising records 6 months.

3. Provision to third parties

The Company processes personal data only within the purposes in Section 1, and provides it to third parties only with your consent or where required by law.

The Company does not sell personal data and does not use your content to train AI models.

4. Processing entrusted to others

The Company entrusts processing as follows.

Contracts with processors set out safeguards in writing and the Company supervises compliance. Changes to processors or entrusted work are disclosed through this Policy.

5. Transfer of personal data overseas

The Company transfers personal data overseas as follows. Refusing a transfer required for a requested feature may limit that feature, but refusing optional Google analytics or advertising measurement does not restrict core Service features.

Transfers occur by network transmission in the course of providing the Service.

6. Destruction of personal data

The Company destroys personal data without delay once the retention period expires or the purpose is achieved.

When you request account deletion a 30-day grace period applies, during which you may cancel the request yourself. After it passes, account identifiers are replaced with irrecoverable values and the sources, clips, files, and related records in your workspace are destroyed.

Payment and transaction records that law requires to be preserved are stored separately from other personal data for the statutory period and then destroyed.

Electronic files are deleted by means that prevent recovery; printed material is shredded or incinerated.

7. Your rights and how to exercise them

You may at any time:

• Request access to your personal data
• Request correction of errors
• Request deletion
• Request suspension of processing

You can view your account, change your display name, and request account deletion directly on the Account screen in the Service. Other requests may be made in writing or by email to the Privacy Officer, and the Company acts without delay.

You may act through a legal representative or an authorised agent, who must submit the power of attorney in the form prescribed by the Enforcement Rule of the Personal Information Protection Act.

8. Security measures

The Company takes the following measures:

• Access to personal data is limited to the minimum necessary personnel and permissions are managed.
• Data in transit is encrypted (HTTPS) and session credentials are stored only as hashes.
• Stored sources and outputs are reachable only through short-lived signed URLs.
• Processing activity is logged and retained.
• No separate password is stored; authentication is delegated to Google.

9. Cookies

The Company always uses essential storage for sign-in, security, language, theme, and your consent choice. Blocking essential storage may prevent sign-in and other core Service features.

Google Tag Manager applies your choices and loads permitted tags. Google Analytics 4 measures visits, feature use, and errors, while Google Ads measures advertising visits and conversions. These optional tools load only after you consent to analytics or advertising.

You may choose analytics and advertising separately. Advertising consent covers advertising storage, advertising user-data, and advertising-personalisation signals. If the browser sends a Global Privacy Control signal, advertising is locked off.

You may reopen “Do not sell or share my information” and withdraw consent at any time. Withdrawal deletes accessible Google measurement cookies and stops later optional measurement. Deletion of already aggregated reports and Google-side retention follow the retention settings selected in the Google account.

Rejecting or withdrawing analytics and advertising consent does not restrict sign-in, video processing, editing, billing, or other core Service features. Measurement data is not a route for using your sources, clips, or transcripts to train AI models.

10. Children under 14

The Company does not collect personal data from children under 14, and persons under 14 may not register for the Service.

On becoming aware that data from a child under 14 has been collected, the Company destroys it and deletes the account without delay.

11. AI processing and training

To select clip candidates, transcribe speech, and analyse scenes, the Company sends source video and audio, and frames and text derived from them, to an AI processor. The recipients and countries are listed in Sections 4 and 5.

Speech transcription and speaker separation, caption correction, scene analysis, clip candidate selection, and caption and dubbing translation requests pass through OpenRouter and are processed only on Microsoft Azure under zero data retention terms.

Stock-voice synthesis for AI dubbing and AI hook voices passes through OpenRouter and is processed by Google Gemini. Google does not use this data to train models and keeps it for up to 55 days for abuse monitoring before deleting it.

AI dubbing translation and stock-voice synthesis may use the AI processors disclosed in Sections 4 and 5. Synthesis with your own voice is processed by OpenVoice V2 in shortput-voice-worker operated by the Company inside Railway. The derived voice embedding remains only in a bounded process-memory cache and is removed when you delete the profile. No new external processor receives your voice sample for this synthesis path. To confirm that the consent recording matches the required statement, the consent recording is transcribed by the speech transcription processors in Sections 4 and 5 (Microsoft Azure through OpenRouter).

These transfers exist to perform the work you requested; apart from the Google abuse-monitoring retention described above, the processor does not retain the data once processing completes.

The Company does not use your sources, clips, or transcripts to train or improve AI models. If the Company later wishes to do so it will seek your separate consent, and declining will not restrict your use of the existing Service.

12. Privacy Officer

The Company has designated a Privacy Officer responsible for personal data processing and for handling complaints and remedies.

13. Remedies for infringement

You may apply to the following bodies for dispute resolution or advice.

14. Changes to this Policy

This Policy applies from its effective date. Where content is added, removed, or amended, notice is given at least 7 days before the change takes effect.

Changes that materially affect your rights are announced 30 days in advance.