Privacy

What we store

Your email, sign-in state, profile (name, handle, avatar), and subscription status are stored via Supabase. Uploaded audio, avatar images, and rendered videos are stored in Cloudflare R2.

On the Free plan, a video stays playable for 24 hours after rendering and then locks. The files are not deleted. Access is simply withdrawn, so moving to a paid plan restores everything you have already made rather than handing you an empty tray. On paid plans, renders and their audio stay in your profile until you delete them or close your account.

Deleting a render removes the video and its source audio from storage straight away. The database row is kept for a short period afterwards, purely so that deleting a render cannot refund the monthly allowance slot it used, and is then removed too.

Transcription & content checks

Every voice note is sent to OpenAI's Whisper API for transcription, regardless of plan. The transcript is used for two things: burning word-synced captions into your video (only if you've turned captions on for that render), and an automated check for content that violates our terms of service — that check happens for every render, whether or not captions are shown, since it's a safety requirement, not a display feature.

This goes through OpenAI's API, not the consumer ChatGPT product — under OpenAI's API data usage policy, data submitted via the API is not used to train their models by default. Your voice notes aren't used to train OpenAI's models unless that default policy changes.

Payments

Payments are processed by Stripe and sold through Onelink, our Merchant of Record. We never see or store your card details — they hold your payment method and billing history on our behalf. Onelink also lets you view your orders, update your payment method and cancel a subscription directly.

Who else processes your data

• Supabase — accounts, authentication, and application data.
• Cloudflare R2 — uploaded audio, avatars, and rendered videos.
• OpenAI — voice note transcription and the content check described above.
• Stripe / Onelink — payment processing, tax, invoicing, and billing support. Onelink is the merchant of record for your purchase.
• Trigger.dev — runs the background job that turns your voice note into a video.
• Plausible — privacy-friendly website analytics. No cookies, no cross-site tracking, and nothing that identifies you personally: it counts page views and referrers only.

Your data, your control

You can delete individual renders from your job tray, or delete your entire account (and everything in it — profile, renders, uploaded files) from the account page at any time. Account deletion is immediate and permanent; it doesn't automatically cancel an active subscription, which you'll need to cancel separately first.

Contact

Questions about this policy or your data: Get in touch.