Privacy & your footage
What we hold, where it lives, and how long we keep it.
The short version
- Your footage is never used to train anything. Not by us, not by anyone else.
- It is processed and stored inside the EU.
- It is deleted automatically after 30 days.
- Card details never touch our servers. Stripe handles payment on its own pages.
What we hold
| Data | Why | Kept for |
|---|---|---|
| Username, hashed password, email address | To give you an account and let you recover it | Until the account is closed |
| Frames you upload and mattes we produce | To do the work you asked for | 30 days from submission |
| Job records: frame counts, settings, timings, cost | Billing and support history | 7 years (tax law) |
| Payment records from Stripe | Accounting | 7 years (tax law) |
| Server logs | Security and fault-finding | Short-term |
Uploaded footage often contains images of identifiable people. Where it does, you are the controller of that personal data and we act as your processor, handling it only on your instructions and for the job you submitted.
Who else touches it
- Hetzner (Germany) — hosts the application and stores your frames and mattes.
- Resend (EU region) — delivers account emails: verification, password recovery, and render notices if you turn those on.
- RunPod — GPU compute. Frames are sent to a GPU in an EU data centre for processing and cleared from it afterwards. RunPod is a US-incorporated company operating the EU facility we use.
- Stripe — payments. They receive your card details directly; we receive only the confirmation and the amount.
- Cloudflare — sits in front of the site for security and delivery.
No one else receives your material. We do not sell data, and the site carries no advertising or analytics trackers.
Your rights
You can ask for a copy of what we hold about you, ask us to correct it, or ask us to delete it. Email [email protected] and we will respond within 30 days. If you are unhappy with how we handle your data you can complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Security
Traffic is encrypted in transit. Passwords are stored hashed and never in readable form. Server access is limited to the operator. Accounts are invite-only, which deliberately keeps the number of people who can reach the service small.
Contact
Holdout Studio, Netherlands · [email protected]