Privacy policy

01Information we collect

Account data: your name, email address, and organization details when you sign up.

Billing data: plan, invoices, and payment status. Payments are handled by our third-party payment processor; card details never touch our servers.

Usage data: API requests, job parameters (source URL, requested format and quality), job outcomes, timestamps, and the IP addresses that made the requests. We use this to operate the service, enforce quotas, and debug failures.

Processed media: transient working copies of the files your jobs process, held only for the duration of the job. Outputs are written directly to the storage destination you specify — we do not host your media.

Storage credentials: the delivery credentials you configure for your bucket, stored encrypted and used only to write your output files.

Website and support data: aggregate site analytics and the messages you send us when you contact support.

02How we use information

We use your data to provide and secure the service, run your processing jobs, process payments, enforce plan limits, prevent fraud and abuse, respond to support requests, comply with law, enforce our terms, and send service notices such as incident reports or changes to terms. We send marketing email only if you opt in, and every marketing message includes an unsubscribe link.

03Our role and legal bases

For the media you submit through the API, we act as a processor on your instructions: you decide what to process, and you are responsible for having the rights to it and for any privacy notices your own users need. For account, billing, and usage data, we act as a controller.

Where data protection law applies, we rely on performance of our contract with you, our legitimate interests in operating and securing the service, and compliance with legal obligations.

04How we share information

We do not sell personal information. We share data with a small set of vendors needed to run the service — cloud hosting, payment processing, email delivery, and analytics — under contractual safeguards. Output files go only to the storage destination you configure. We disclose data to authorities only when legally required, and we will notify you of such requests unless prohibited from doing so.

05Retention and security

Transient working copies are deleted automatically once a job's output is delivered to your storage, or when a job fails. Request logs are retained for up to 12 months for security and billing disputes. When you close your account, we delete your account data and stored storage credentials within 30 days, except records we must keep for tax or legal reasons. Files already delivered to your own storage are yours and are unaffected.

All traffic to the API and to your storage destination is encrypted in transit with TLS. API keys are stored hashed, storage credentials are stored encrypted, and access to production systems is restricted and logged. No system is completely secure, but we apply administrative and technical safeguards appropriate to the data we hold.

06International transfers

Where data is transferred across borders, we rely on adequacy decisions or approved contractual clauses to protect it.

07Your privacy rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, to object to or restrict certain processing, and to withdraw consent where processing is based on it. Contact us at [email protected] to exercise these rights and we will respond within 30 days. You can also lodge a complaint with your local data protection authority.

08Cookies and children

The website uses essential cookies to keep you signed in, and privacy-respecting analytics to understand aggregate site usage; these do not follow you across other sites.

The service is not directed at children, and we do not knowingly collect personal data from them.

09Changes and contact

If we make material changes to this policy we will notify account holders by email before the changes take effect, and the 'last updated' date at the top always reflects the current version. Privacy questions and requests: [email protected].