Privacy policy

Reframe Lab ("we", "us") is a content studio based in India that turns long videos into short clips. We decide how your personal data is used, so we are responsible for it: its "controller" under the GDPR, and its "data fiduciary" under India's Digital Personal Data Protection Act, 2023 (DPDP Act).

For anything about your data, email hello@reframelab.in.

When you ask for a free sample, we collect:

• Your video link and the video itself, including the faces and voices of anyone in it.
• Your name and email address.
• Anything optional you add: the plan you're leaning towards, where you post, your channel or profile link, and your notes.
• Campaign tags in the page address (such as utm_source), if you came from one of our links.
• A scrambled (salted and hashed) version of your IP address, used only to stop the form being flooded. We don't store the address itself.

When we send your clips, we send a private link to a page with them. We record when that page is opened (how often, and when) and the reaction and note you leave there.

When you start a plan on our Start a plan page (a work order), we collect the plan and add-ons you pick and the prices we quoted; your name and email address; your channel link and where your clips get posted; your billing name, country and preferred start date; and anything optional you add: a phone or WhatsApp number, a tax ID, links to your brand kit and video folder, the reference of your free sample, and notes.

If you become a client, we also keep the emails we exchange, the clips and files we make for you, and billing records. Payments go through a third-party payment provider, so we never see or store your full card details.

We count visits to this website with Umami, a privacy-friendly analytics service: which pages are viewed, which buttons are pressed, and where visitors came from (the referring website, campaign tags, and the country, device type and browser). It sets no cookies, doesn't store your IP address and never receives what you type into our forms or the address of your clips page. Beyond that, there are no tracking pixels and no advertising cookies.

We use your data to:

• Make your clips and send them to you. This is what you asked us for, and for clients it's our contract.
• Reply to you and keep you updated on your request, by email.
• Know whether you've seen your clips and how they landed (when your clips page is opened, and your reaction), so we can follow up at the right time. This is our legitimate interest in serving you well.
• Prepare your invoice and set up your plan from your work order, and link it to your free sample when the email addresses match. You asked us to take these steps before a contract.
• Bill you and keep accounting records, if you become a client. The law requires some of these records.
• Stop spam and abuse of the form, using the scrambled IP address and request limits. This is our legitimate interest in keeping the service working.
• See which of our links bring people in, using campaign tags. This is our legitimate interest in understanding how people find us.
• Count visits and button presses on this website, without cookies and without identifying anyone, to see which pages work. This is our legitimate interest in improving the website.

Under India's DPDP Act, you give us your details for one purpose, getting your clips (and, when you start a plan, setting it up and billing you), and we use them only for that.

We don't send newsletters or marketing emails. If we ever want to, we'll ask you first, and you can say no at any time.

We use AI services to transcribe your video, help find its strongest moments and draft hooks, titles and captions. They receive only the audio, transcript or frames that job needs, never your contact details.

Your videos, clips and transcripts are never used to train AI models, ours or anyone else's. We only use AI services whose terms don't let them train on what we send.

We never sell or rent your personal data, and we never share it for advertising.

These people and services see it, each only as much as their job needs:

• Our team, to handle your request.
• Freelance editors who cut your clips. They see your video and notes and, for a plan, your brief (plan, channel, brand kit and folder links), never your email address, phone or billing details.
• Supabase, which stores requests and work orders in a database in Mumbai, India.
• Resend, which sends our emails, in the United States.
• Netlify, which hosts this website and keeps short-lived technical logs, such as IP addresses, in the United States.
• Umami, which counts visits to this website without cookies. It never receives your name, email address or IP address.
• AI transcription and language services, as described above.
• Cloud storage and editing tools that we and our editors use to move and edit files.
• YouTube (Google), Google Drive or Dropbox, where your finished clips are hosted. Their player loads on your clips page only when you press play.
• A payment provider, once you become a client.

We may also share data when the law requires it, to protect our rights or with a buyer if the business is ever sold. This policy would still apply to your data.

We're based in India and store requests there, but some of the services we use are in other countries, mostly the United States. When personal data leaves the UK or the European Economic Area, we rely on the safeguards the law provides, such as the standard contractual clauses approved by the European Commission. We don't send data to any country the Government of India has restricted.

• Free-sample requests that don't lead to a plan are erased automatically 12 months after the last activity on them.
• Work orders that never become a plan (the first invoice was never paid) are erased automatically 12 months after the last activity on them.
• Our working copies of your video, project files and transcripts are deleted 90 days after we deliver your clips.
• If you're a client, we keep your details while you're a client. After that we keep only the records tax and accounting law requires, for as long as it requires.
• The link to your clips page works for 30 days, unless we extend it for you. What the page records (when it was opened, and your reaction) is erased with your request.
• Request-limit counters are deleted after 2 days.

When you ask us to erase your data, we delete it from our systems straight away. Copies in our email provider's delivery logs and in database backups expire on their own, within about 30 days.

The public website, including your private clips page, sets no cookies and stores nothing in your browser. Our visit counter (Umami) works without cookies too. The only cookies we use are sign-in cookies for our own staff, on our private admin pages.

On your clips page, nothing loads from YouTube, Google or Dropbox until you press play on a clip. Once you do, that service's player may set its own cookies, under its own privacy policy.

If that ever changes, we'll update this policy first and ask for your consent where the law requires it.

You can ask us to:

• Tell you what personal data we hold about you and give you a copy.
• Correct anything that's wrong or incomplete.
• Erase your data.
• Stop or limit how we use it, or object to a use.
• Give you your data in a format you can take to another service.
• Withdraw any consent you gave. This doesn't undo what we did before.

Email hello@reframelab.in from the address you used with us. It's free, and we'll reply within 30 days. We may ask you to confirm it's you first.

Under the DPDP Act, you can also nominate someone to use these rights for you if you die or become unable to act.

If you're unhappy with our answer, you can complain to a data-protection regulator: the Data Protection Board of India, the UK Information Commissioner's Office or the authority in your EU country. We'd welcome the chance to put it right first.

Our service is for creators aged 16 and over. If you're 16 or 17, a parent or guardian must agree to this policy and our Terms, and email us from their own address to confirm it. We won't start on your video until they do.

We don't knowingly collect data from anyone under 16. If we find we have, we delete it.

Everything travels over encrypted connections, and the database is encrypted at rest. Only our signed-in staff can reach requests, every staff account needs two-step sign-in, and editors only see what their work needs.

No system is perfectly secure. If a breach ever puts your data at risk, we'll tell you and the authorities as the law requires.

When we change this policy, we update the date at the top of the page. If a change matters, such as a new use of your data, we'll email clients and anyone with an open request before it takes effect.

Questions about this policy? Email hello@reframelab.in.