Privacy policy

Who processes your data, which data, why, for how long and with whom. On one page, no surprises.

1. Controller

TODO nombre o razón social (TODO NIF), TODO domicilio, España. Privacy contact: TODO@example.com.

2. What data we process

Account: your email, your name if you give it to us (or your Google account name if you choose to sign in with Google), your language, your open sessions (type, computer name for the app and last activity date) and the version of the terms you accepted.

Payments: handled by Stripe as merchant of record. We receive the amount, the pack bought and an order identifier; never your card details.

Content you send for processing: the audio of your sources as FLAC, the script, technical metadata of the material and a very light copy of the video (480p, muted) used to review the cut if something fails. The original video does not leave your machine.

Usage: job identifiers, minutes processed, credits quoted and charged, app version and error codes. Chat messages and script requests go through our relay to the AI provider (see section 5).

3. Why, and on what basis

Providing the service (performance of the contract): giving you access to your account, processing your sends, returning the cut, charging your credits and giving support.

Improving the engine (consent, optional and revocable from the app): keeping the light copy of a job for up to 90 days as an engine test case. Withdrawing it deletes what was kept.

Security and accounting (legitimate interest and legal obligation): technical logs to detect abuse (for example, limiting sign-in links by email), and purchase amounts kept without identity as required by accounting rules.

4. For how long

Audio, script and review copies of each send: 7 days. The resulting cut: 30 days. Cases with improvement consent: 90 days. Job and credit records (numbers, not content): 24 months.

You can download your data and delete your account from “My account” on this website or from the app: jobs are cancelled, sessions closed, your content is purged and the credit ledger is anonymised.

5. Who else sees them (processors)

Anthropic (United States): the AI model that writes scripts and answers the chat, and the one that cuts when you choose the AI levels. Standard contractual clauses; does not train on your data; keeps requests for up to 30 days.

Google: only if you choose “Continue with Google”, to verify your identity (we receive your email and name). Cloudflare R2: storage of what you send and of the result, with the retention periods above. Brevo (EU): sign-in and notification emails. Stripe: payments and invoices.

Our analysis team: the engine runs on our own servers in España, encrypted in transit; each job's folder is deleted when it finishes.

6. Your rights

Access and portability (download your data from “My account”), rectification, erasure (the “Delete my account” button), objection and restriction. Write to TODO@example.com; we answer within a month. If you disagree, you can complain to the Spanish data protection authority (aepd.es).

7. Minors

The service is for people aged 18 or over.

8. Security

TLS encryption on every connection, passwordless sign-in with single-use links that expire, sessions you can close from your account, encrypted backups and an incident plan: if an incident affected your data we would tell you and, where required, the authority within 72 hours.

9. Changes

Every version of this policy is dated; the consents you give are recorded with the version you accepted. Relevant changes are announced by email.

Last updated: 2026.