Privacy policy

Who processes your data

The data controller is Mehdi Seddik (EI), 22 rue Jules Ferry, 69800 Saint-Priest, France. For any question about your data: [email protected].

What we collect

Account: e-mail address, plus the name and picture Google passes on if you sign in that way. A password is stored hashed, never in clear text.

Content: the videos you import or the links you provide, their transcript, the clips produced, and the settings attached to them — caption style, framing, hooks.

Usage: the minutes of source imported per period, in order to apply your plan's limit. No audience measurement tool is installed on this site.

Payment: billing data is held by Stripe. We keep the customer identifier and the subscription status, never a card number.

Why, and on what basis

Providing the service — creating the account, transcribing, selecting, cutting, rendering clips: performance of the contract.

Billing and bookkeeping: performance of the contract and legal obligation.

Sending service e-mails, including the "your clips are ready" notice you can switch off: performance of the contract.

Protecting the service against automated sign-ups: legitimate interest.

For how long

Your projects and clips are kept for as long as your account exists.

The intermediate audio track extracted for transcription is deleted as soon as the clips are written — it has no further use, whereas the transcript is kept.

An import that was started and then abandoned, whose generation was never launched, is deleted automatically after twenty-four hours, media included.

Invoices are kept for ten years, as accounting law requires.

Who they are passed to

Scaleway (France) — hosting of the services and storage of videos and clips.

Stripe Payments Europe (Ireland) — payment and billing.

Google Ireland (Ireland) — Google account sign-in, if you use it.

Deepgram (United States) — transcription of the audio track.

OpenRouter (United States) — selecting passages and writing titles and hooks, from the transcript.

Resend (United States) — sending service e-mails.

Cloudflare (United States) — anti-bot protection of the sign-up form.

These providers act on instruction and solely to deliver the service. No data is sold or passed on for advertising purposes.

Transfers outside the European Union

Four of the providers above are established in the United States. The corresponding transfers rely on the European Commission's standard contractual clauses and, where applicable, on the EU—US Data Privacy Framework.

In practice, what leaves the Union is the audio and text needed for transcription and passage selection — not your video file, which stays stored in Europe.

Your rights

You have rights of access, rectification, erasure, restriction, objection and portability over your data.

These rights are exercised by e-mail to [email protected], which is answered within one month. Deleting an account and its content is currently requested through that same channel.

You may lodge a complaint with the CNIL, 3 place de Fontenoy, 75007 Paris — cnil.fr.

Security

Traffic is encrypted in transit. Links giving access to video files are signed and expire. Passwords are hashed. Access to the service's administration console is protected by a secret separate from customer accounts.