Privacy policy
Draft. This page hasn't been reviewed by a lawyer yet. Highlighted parts are placeholders.
What we collect when you use toasttrail, why, who helps us process it, and how long we keep it.
Who we are
toasttrail is run by company legal name, registered address (“we”). Contact us about privacy at privacy@yourdomain.
What we collect
| Data | Why |
|---|---|
| Your email address, and your name and profile picture if you sign in with Google or GitHub | To create your account and send sign-in links |
| Videos, photos and audio you upload, and files we make from them (previews, thumbnails, waveforms, exports) | To edit and export your projects |
| Your projects: the timeline, captions, the project brief, notes on clips and the text of what you said in “Talk me through it” | To save your work and its version history |
| Analysis of your footage: transcripts, shot scores, scene descriptions and the date, time, device and place stored in the files | So you and the agent can edit by what's said and shown |
| Your conversations with the agent | To show your chat history and give the agent context |
| Voice recordings from “Talk me through it” | To transcribe them. We delete each recording as soon as it's transcribed |
| Usage (exports, agent requests, storage) and your plan | To apply plan limits and bill you |
| Technical logs (request ids, errors, IP address for rate limiting) | To keep the service secure and working |
We don't use advertising or tracking cookies, and we don't sell your data. We don't use your footage to train AI models.
Where your data is processed
Your videos and voice are analysed on our own servers with open-source models; they aren't sent to an outside AI service. These companies process some data for us:
- The agent's language model (currently DeepSeek): receives a text description of your project for each message you send the agent, including clip names, timings, transcripts, scene descriptions, your brief and notes. It never receives the video or audio. This provider may process data outside your country, including in China. Confirm the provider and its data-processing terms.
- Hosting and storage: server provider and region, storage provider and region.
- Payments: Dodo Payments acts as the merchant of record and handles your payment details; we never see your card number.
- Email: email provider sends sign-in links.
- Sign-in with Google or GitHub, if you choose it.
- Stock footage search (Pexels): receives your search words when you search stock footage.
- Transcription runs on our servers by default. If we switch to Deepgram for a deployment, it receives the audio of the clips you transcribe. Remove if not used.
How long we keep it
- Projects and uploaded media: until you delete them. Deleted media is erased from storage after 7 days.
- Exported videos: 7 days after export.
- Version history: we keep recent versions and thin out older ones automatically.
- “Talk me through it” recordings: deleted once transcribed; the text stays in your project until you clear it (Project tab) or delete the project.
- Your account: until you ask us to delete it. Email privacy@yourdomain and we'll delete your account and its content within 30 days.
- Billing records: as long as tax law requires.
Your browser
We use one sign-in cookie. The editor also saves a few things in your browser's local storage: a backup of unsaved edits, upload progress so uploads can resume, and small preferences like “don't show this again”.
Your rights
You can ask for a copy of your data, ask us to correct or delete it, or object to how we use it, by emailing privacy@yourdomain. Depending on where you live (for example the EU, UK or India) you may also complain to your data protection authority. Add jurisdiction-specific sections as advised.
Children
toasttrail isn't for children under 16.
Changes
We'll update the date above when this policy changes, and email you about significant changes. See also our terms.