Privacy policy

What this covers

How osbytes ("we") handles personal data on the hosted Reelsaw service at app.reelsaw.com and on reelsaw.com. The open-source software you run yourself sends us nothing (its optional update check asks GitHub for the latest release and nothing more).

What we collect

Only what the Service needs:

• Account: name, email address, a hashed password, when you signed in and from which address and browser.
• Content: the videos you upload or link, their transcripts, the clips and files the Service makes, your settings and project history.
• Billing: your Stripe customer id, plan and subscription status. Card numbers never reach us; Stripe holds them.
• Usage: minutes processed, storage used, model calls and their cost, which the app shows you and we use for the plan limits.
• Technical logs: request ids, errors and timings for 7 days, to keep the Service working.
• Website: reelsaw.com uses PostHog analytics with cookieless, aggregated page views; no advertising trackers.

Who processes it for us

Transcription and the selection of moments run on model providers we choose for the Service (currently Deepgram and Anthropic, through Vercel's AI Gateway). They receive the audio and the transcript of a video while it is processed and, under their API terms, do not train on it. Stripe handles payment. Files are stored on an S3-compatible object store in [region]. Email is sent through Resend. Each of them acts under a data processing agreement.

How long we keep it

Stored source videos are deleted 30 days after upload and rendered clips 90 days after rendering; the project and its transcript stay so a clip can be rendered again from a fresh upload. Deleted projects are restorable for 7 days, then purged. An account you delete is purged with everything it owns within 30 days; billing records are kept as long as tax law requires.

Your rights

You can see and export your content in the app (every project has an export). You can correct your name and email in Settings, delete projects and clips, and delete the account. For anything else, or to object to processing, write to legal@reelsaw.com. If you are in the EU/EEA or the UK you also have the right to complain to your data protection authority.

Security

Data travels over TLS. Passwords are hashed; API keys are shown once and stored hashed; provider keys are encrypted at rest. Access to production is limited to the operator and logged.

Changes

We may update this policy; the date at the top says when, and a material change is announced by email. Questions: legal@reelsaw.com.