Privacy Policy

1. Who is responsible for your data

BAKCHICH, société par actions simplifiée (SAS), Marseille Innovation — Pôle Média, 37 rue Guibal, 13003 Marseille, France, registered in France under SIREN 942 552 274, operating as I HATE EDITING, is the controller of the personal data described here. Being established in the European Union, we are subject to the General Data Protection Regulation directly.

For any privacy question, or to exercise a right under section 8, use our contact page.

2. What we collect

Account data

Your email address, and any name or profile image you provide, handled through our authentication provider. We store an internal account identifier linked to it. We never receive or store your password.

Content you provide

The scripts, voiceovers, uploaded media and project settings you supply, plus the drafts and rendered videos produced from them. This is “Your Content” under the Terms of Service.

Billing data

A record of credit purchases, credit balance and consumption, and any subscription. We do not collect or store your card details— payment is handled by Polar as merchant of record, and card data goes to them, not to us.

Waitlist and invitations

If you join the waitlist or accept an invitation, we store your email address, where you signed up from, your position, and the invite code used.

Technical data

Request metadata, IP address, browser and device information, and error diagnostics, collected to operate and secure the Service.

Preferences

Your language and light/dark theme choice, stored in a cookie on your device.

3. Why we use it, and on what legal basis

• To provide the Service— creating your account, processing your projects, rendering video, delivering output. Basis: performance of our contract with you.
• To take payment— credits, invoices, subscriptions. Basis: performance of our contract, and legal obligation for tax records.
• To communicate— service notifications, waitlist and invitation emails, replies to your support requests. Basis: contract, and our legitimate interest in supporting you.
• To keep the Service working and secure— error monitoring, abuse prevention, enforcing the Acceptable Use Policy. Basis: our legitimate interest in a reliable, non-abused service.
• To comply with the law— responding to substantiated legal complaints and lawful requests. Basis: legal obligation.

We do not sell your personal data, we do not share it with advertisers, and we do not use Your Content to train machine learning models.

4. Who processes data on our behalf

We use the service providers below. Each processes data only as needed to perform its function, under contract with us.

We update this list when we change providers. Search terms you type into the stock, reference or music pickers are sent to the corresponding search provider in order to return results.

5. International transfers

Our providers operate in a number of countries, including the United States. In addition, ShortCut Lab, which owns and maintains the software, is established in Tunisia, and its technical staff may access personal data in the course of operating and supporting the Service.

Where personal data leaves the European Economic Area or the United Kingdom, the transfer is made under an appropriate safeguard, normally the European Commission’s Standard Contractual Clauses or an adequacy decision. Neither the United States nor Tunisia benefits from a general adequacy decision, so those transfers rest on Standard Contractual Clauses.

6. How long we keep it

• Account data— for as long as your account is open, and for a short period afterwards so the deletion can be reversed if it was a mistake.
• Projects and media— until you delete them, or until a reasonable period after your account closes.
• Billing records— for as long as tax and accounting law requires, typically several years, even after your account closes.
• Diagnostics and logs— for a limited period appropriate to troubleshooting and security.
• Waitlist entries— until you ask us to remove you, or until the waitlist is retired.

7. Security

Access to production data is restricted to those who need it. Media and project files are held in access-controlled storage and are not publicly listable. Data is encrypted in transit. No system is perfectly secure, but if a breach affects your personal data and the law requires it, we will notify you and the relevant authority.

8. Your rights

Depending on where you live, you may have the right to access a copy of your personal data, to correct it, to delete it, to restrict or object to how we use it, to receive it in a portable format, and to withdraw consent where we relied on it.

Exercise any of these through our contact page. We respond within the period the law allows, normally one month. You will never be charged or treated differently for making a request.

If you are in the EEA or UK and think we have handled your data badly, you may complain to your local data protection authority. We would rather you told us first.

9. Cookies

We use cookies that are necessary for the Service to work: a session cookie that keeps you signed in, and cookies that remember your language and theme. We do not use advertising or cross-site tracking cookies.

10. Children

The Service is not intended for anyone under 18. We do not knowingly collect data from children. If you believe a child has given us personal data, contact us and we will delete it.

11. Changes to this policy

We may update this policy. Where a change materially affects you we will give reasonable notice by email or in the application before it takes effect.

Contact

Questions about this document? Contact us.