Privacy policy
Last updated: [DATE]
Draft. This page is under review, and the details in brackets are being confirmed.
Photic Labs Private Limited, a company incorporated in India (CIN [CIN]), registered office [REGISTERED ADDRESS] (“we”, “us”), runs Photic Labs. This policy explains what we collect when you use Photic Labs, why, who processes it for us, and how long we keep it. Questions or requests: [CONTACT EMAIL].
What we collect
- Your account: your email address and, if you sign in with Google or GitHub, the name and account ID they share with us.
- What you add to your workspace: app store links and the listing details we fetch from them (name, description, screenshots, icon); website text you ask us to read; context files your coding agent writes; screen recordings and screenshots; hook clips you record, which can show your face and carry your voice; the brief and claims you approve.
- What we make for you: scripts, narration, captions, previews and exported videos.
- Billing records: Paddle runs our checkout (see the processors below). From Paddle we receive your customer and subscription IDs, what you bought, the payment status, and your billing email and country. We never see or store your card details.
- Technical data: server logs that carry record IDs rather than your content, and error reports. Error reports have email addresses, URL query strings, request bodies and cookies removed. We have told our error tracker not to store IP addresses.
- Cookies: only the ones needed to sign you in and keep you signed in. We use no advertising or cross-site tracking cookies.
We record how the product is used (for example, batches generated, videos exported, purchases) in our own database, to run billing and to measure and improve Photic Labs. We don't sell personal data, and we don't use your content for advertising.
What leaves your device
Only what you upload or paste: footage, screenshots, hook clips, links and files. Photic Labs doesn't record your screen or reach into your device. Previews play in your browser from files we store.
Who processes it for us
We use these service providers to run Photic Labs. Each processes data only to provide its service to us.
| Provider | What it does for Photic Labs | What it receives |
|---|---|---|
| Supabase | Database and sign-in | Account and workspace records |
| Cloudflare (R2) | File storage | Uploaded footage and screenshots, generated media, exported videos |
| Vercel | Hosts the web app | Requests to the app |
| Trigger.dev | Runs background work: processing footage, rendering videos | The files and records each job needs, while it runs |
| Anthropic | AI models that read your listing, check claims, label scenes and write scripts | Listing and website text, the brief and claims, still frames from your footage, generated scripts |
| ElevenLabs | Voices for narration | The text of narration lines |
| AssemblyAI | Transcribes your own hook clips, for captions | Up to 8 seconds of the clip's audio. We delete it there as soon as we have the words; if that deletion fails, the account deletes it within a day |
| Sentry | Error reports | Error reports with personal data removed, as above |
| Paddle | Checkout, payments, tax and invoices, as merchant of record | What you enter at checkout. Paddle handles it as an independent controller under its own privacy notice |
- Provider
- Supabase
- What it does for Photic Labs
- Database and sign-in
- What it receives
- Account and workspace records
- Provider
- Cloudflare (R2)
- What it does for Photic Labs
- File storage
- What it receives
- Uploaded footage and screenshots, generated media, exported videos
- Provider
- Vercel
- What it does for Photic Labs
- Hosts the web app
- What it receives
- Requests to the app
- Provider
- Trigger.dev
- What it does for Photic Labs
- Runs background work: processing footage, rendering videos
- What it receives
- The files and records each job needs, while it runs
- Provider
- Anthropic
- What it does for Photic Labs
- AI models that read your listing, check claims, label scenes and write scripts
- What it receives
- Listing and website text, the brief and claims, still frames from your footage, generated scripts
- Provider
- ElevenLabs
- What it does for Photic Labs
- Voices for narration
- What it receives
- The text of narration lines
- Provider
- AssemblyAI
- What it does for Photic Labs
- Transcribes your own hook clips, for captions
- What it receives
- Up to 8 seconds of the clip's audio. We delete it there as soon as we have the words; if that deletion fails, the account deletes it within a day
- Provider
- Sentry
- What it does for Photic Labs
- Error reports
- What it receives
- Error reports with personal data removed, as above
- Provider
- Paddle
- What it does for Photic Labs
- Checkout, payments, tax and invoices, as merchant of record
- What it receives
- What you enter at checkout. Paddle handles it as an independent controller under its own privacy notice
Several of these providers process data outside India, including in the United States. We rely on their contractual commitments to protect it.
How long we keep it
| Data | Kept |
|---|---|
| Original uploads | 7 days. We keep working copies (normalized video, previews, stills) instead |
| Working copies of footage | While your videos use them, then deleted 90 days after last use |
| Generated media that no version uses | Deleted after 24 hours |
| Exported videos | 30 days; after that, a download renders the video again from its saved version |
| Hook clip audio at AssemblyAI | Deleted once transcribed (at most 1 day) |
| Your account and workspace | While your workspace exists. When you delete it, everything is purged 30 days later; you can undo within those 30 days |
| Billing records | As long as tax and accounting law requires |
- Data
- Original uploads
- Kept
- 7 days. We keep working copies (normalized video, previews, stills) instead
- Data
- Working copies of footage
- Kept
- While your videos use them, then deleted 90 days after last use
- Data
- Generated media that no version uses
- Kept
- Deleted after 24 hours
- Data
- Exported videos
- Kept
- 30 days; after that, a download renders the video again from its saved version
- Data
- Hook clip audio at AssemblyAI
- Kept
- Deleted once transcribed (at most 1 day)
- Data
- Your account and workspace
- Kept
- While your workspace exists. When you delete it, everything is purged 30 days later; you can undo within those 30 days
- Data
- Billing records
- Kept
- As long as tax and accounting law requires
Your rights
You can ask to access, correct, export or delete your personal data, or withdraw consent where we rely on it. Write to [CONTACT EMAIL] and we'll answer within 30 days. You can also delete your workspace yourself in Settings. Depending on where you live, data protection law (such as India's Digital Personal Data Protection Act, 2023, or the GDPR) may give you further rights, including a complaint to your regulator.
Children
Photic Labs is for businesses and people aged 18 or over. We don't knowingly collect children's data.
Changes
If we change this policy, we'll update the date above. If a change is significant, we'll tell you in the app or by email before it takes effect.