Privacy Policy

Last updated October 26, 2026

1. 1. Who is responsible

   The data controller (veri sorumlusu) is Hüseyin Sezer Yıldırım (sole proprietorship), Akfırat Mah. 43. Sk., 34959 Tuzla, İstanbul, Türkiye. Contact us about privacy at [email protected].

2. 2. What stays on your device

   Recordings, projects, edits, transcripts, presets and settings made in the desktop apps are stored in folders on your computer. In the web app they are stored in your browser (IndexedDB) and never uploaded unless you share them. AI models are downloaded once and run locally. We cannot see this data.

3. 3. What we process, why, and on what basis

   Data	Why	Legal basis
   Account: email address, password (stored only as a salted hash), email-verification state, plan	To create and secure your account, sign you in and provide your plan	Performance of a contract (KVKK Art. 5(2)(c); GDPR Art. 6(1)(b))
   Session tokens (stored only as hashes)	To keep you signed in on your devices	Contract
   Videos you share, with their title, poster image, preview GIF, length, size and link settings	To host the video and show it to the people you share the link with	Contract
   Comments and reactions viewers leave: the name they type, the text, the time in the video, and a keyed hash of their IP address (for spam limits)	To show them on the video page	Contract with the viewer; our legitimate interest in providing the feature
   Viewing statistics: a random session id, which parts were watched, watch time, country (derived from the IP address by our host; the IP address itself is not stored), whether it was embedded	To show owners how their video was watched (on plans that include insights)	Legitimate interest (KVKK Art. 5(2)(f); GDPR Art. 6(1)(f))
   Reports about a video: the reason, the details the reporter writes, and a keyed hash of their IP address (one report per person)	To review abuse and legal complaints	Legal obligation (Law No. 5651) and legitimate interest
   Keyed hashes of IP addresses and account ids, kept for at most 2 days	Rate limits against spam, password guessing and abuse	Legitimate interest in keeping the Service secure
   Billing details (handled by our payment provider; we receive your plan, country and a customer reference, never card numbers)	To sell and renew subscriptions, issue invoices and meet tax obligations	Contract; legal obligation (Tax Procedure Law No. 213)
   Emails we send you (verification, password reset, important notices) and your messages to us	To run your account and answer you	Contract; legitimate interest
   Technical request logs at our hosting provider (IP address, time, URL, user agent)	Security and troubleshooting	Legitimate interest

   We do not sell personal data, use it for advertising, or use your videos to train AI models.

4. 4. Cookies and local storage

   We use no advertising or analytics cookies. We use strictly necessary storage only: a cookie that remembers that you entered a video’s password (24 hours), the sign-in token of the website and web app in your browser’s local storage, and your preferences (such as playback speed). Because these are necessary to provide what you ask for, no consent banner is required.

5. 5. Who we share data with

   We use these service providers (processors), bound by contracts to process data only on our instructions:

   • Cloudflare, Inc. (USA) — hosting, storage of shared videos and our database, network security;
   • Resend, Inc. (USA) — sending account emails;
   • our payment provider (named at checkout) — payments, as merchant of record and an independent controller for the purchase;
   • GitHub, Inc. (USA) — distributing app downloads and updates (your app requests update information from GitHub).

   Anyone with a share link can see the video, its title, comments and reactions, unless you protect it with a password or delete it. We disclose data to authorities only when required by law.

6. 6. International transfers

   Our providers process data outside Türkiye and the EU/EEA, including in the United States. We transfer data on the basis of standard contractual clauses as provided in Article 9 of KVKK (and notified to the Personal Data Protection Authority where required) and the European Commission’s standard contractual clauses or adequacy decisions under GDPR.

7. 7. How long we keep data

   • Free share links: 7 days, plus up to 7 days in which you can restore them by upgrading; then the files are deleted.
   • Paid share links: until you delete them, or 30 days after your paid plan ends.
   • When you delete a video or your account, the files are deleted at once and the remaining records within 30 days (backups roll over within 30 days).
   • Rate-limit counters: up to 2 days. Reports: as long as needed to handle them and for up to 2 years afterwards, to deal with repeat abuse and legal claims, unless the video’s owner deletes their account first.
   • Invoices and billing records: 10 years, as required by Turkish commercial and tax law.

8. 8. Your rights

   Under Article 11 of KVKK you may ask whether we process your data; for information about it; for its purpose and whether it is used accordingly; who it is transferred to, in Türkiye or abroad; for correction of incomplete or inaccurate data; for its erasure or destruction; for third parties to be notified of corrections or erasure; to object to a result against you arising solely from automated analysis; and for compensation if you suffer damage from unlawful processing.

   Under GDPR you also have the rights of access, rectification, erasure, restriction, data portability, and to object to processing based on legitimate interests, and to withdraw consent at any time where we rely on it.

   You can delete videos and your whole account yourself in the app. For any other request, write to [email protected] from your account’s email address. We answer within 30 days, free of charge. You may also complain to the Personal Data Protection Authority (KVKK Kurumu, kvkk.gov.tr) or to the data protection authority where you live in the EU/UK.

9. 9. Security

   Data is encrypted in transit (HTTPS) and at rest at our providers. Passwords and tokens are stored only as salted hashes. Access to the moderation and administration tools is restricted and logged. No method is perfectly secure; if a breach affects your data we will notify you and the authorities as the law requires.

10. 10. Children

    The Service is not directed at children under 16, and we do not knowingly collect their data. If you believe a child has given us data, contact us and we will delete it.

11. 11. Changes

    We will post changes here and update the date above. For material changes we will notify account holders by email before they take effect.