Política de privacidad

1. Who we are

“Video Blackout,” “we,” “us,” and “our” mean the operator of the website https://videoredaction.io and the Video Blackout Windows desktop application (together, the “Service”). Contact: [email protected].

This policy explains what personal data we collect through the website and related account systems, why we collect it, how long we keep it, and your choices. It does not describe processing that happens solely on your device inside the desktop application, because that processing does not pass through our servers as part of the product workflow.

2. Desktop software: we do not receive your videos

The desktop application is designed to open local files, run detection and redaction on your PC, and write a new export on your PC. Source video, working files, and exports are not uploaded to us through that workflow. After license activation, redaction does not require an internet connection.

• We are not the controller or processor of your bodycam, CCTV, interview, or other footage unless you separately send a file to support (please do not send evidence unless we ask).
• If you email us a sample clip, you are disclosing that file to us for support only. Do not send material you are not authorised to share.
• Hardware ID (device binding) is sent when you activate a license so we can enforce device limits. That is license data, not video content.

3. What we collect on the website

Account and authentication

• Email address, password hash (if you register with email), display name, and sign-in provider (email or Google).
• If you use Google sign-in: the Google account identifiers and profile fields Google returns to our OAuth callback (typically email, name, and a Google user id).
• Session cookies / tokens so you stay signed in.

Subscription and license

• Plan, subscription status, renewal or cancellation state, and identifiers from payment providers.
• Device / hardware identifiers used to bind a license to a PC, and the number of devices in use.
• Desktop login tokens used briefly to return a license from this website to the app on your machine.

Security and operations

• Cloudflare Turnstile tokens on email sign-in / registration to reduce abuse.
• Standard server logs (IP address, user-agent, timestamps, requested URLs) generated by our hosting provider.
• Support emails you send to [email protected].

We do not require government ID, biometric templates, or copies of your redacted/unredacted video to create an account.

4. How we use website data

• Create and secure your account, and complete desktop license activation.
• Process subscriptions, prevent fraud, and enforce plan device limits.
• Send transactional messages (receipts, password reset, service notices). We do not sell your email to advertisers.
• Debug, prevent abuse, and keep the Service operating.
• Comply with law and respond to lawful requests.

5. Legal bases (EEA / UK visitors of this website)

If GDPR or UK GDPR applies to our processing of your website account data, we typically rely on: (a) performance of a contract (account, license, paid subscription); (b) legitimate interests (security, abuse prevention, basic product improvement of the website — not training models on your videos, which we do not receive); (c) legal obligation; and (d) consent where we ask for it. This section is about account data on videoredaction.io. It is not a statement that we process your operational video as a processor under Article 28 unless we have a signed DPA covering a specific support disclosure.

6. Processors and third parties

We use vendors to operate the website. They process data only as needed to provide their service to us:

• Cloudflare — hosting, DNS, security, and Turnstile.
• Google — optional OAuth sign-in.
• Waffo Pancake — primary payment / checkout.
• Creem — secondary payment / checkout.

Payment card details are entered on the payment provider’s pages, not stored in our database as full PAN. Those providers act under their own terms and privacy notices. We store the subscription and customer identifiers we need to know whether your license is active.

7. Cookies and similar technologies

We use essential cookies or equivalent tokens for login sessions. Cloudflare and Google may set their own cookies when you use Turnstile or Google sign-in. We do not run third-party advertising pixels on the marketing pages as part of the product. Blocking essential cookies may prevent sign-in and license activation.

8. Retention

• Account and license records: for as long as the account exists and for a reasonable period afterward for billing disputes, fraud, and legal holds.
• Payment records: as required by tax and accounting rules and the payment provider.
• Server logs: typically a short operational window unless needed for security investigation.
• Support email: as long as needed to resolve the request, then according to ordinary backup cycles.

9. Sharing; no sale of personal data

We do not sell your personal information. We share website account data with processors listed above, with professional advisers under confidentiality, and if required by law, legal process, or to protect rights, safety, and the integrity of the Service. We may transfer account records in a merger, acquisition, or asset sale, subject to this policy or equivalent protection.

10. International transfers

The website may be hosted and vendors may be located in countries other than yours. Where required, we use appropriate safeguards offered by those vendors (for example standard contractual clauses). Using the Service means your account data may be processed outside your country.

11. Your rights

Depending on where you live, you may have rights to access, correct, delete, or export account data, to object or restrict certain processing, and to withdraw consent. Email [email protected]. We will need enough information to verify you. We may refuse requests that are unlawful, abusive, or that would compromise other users’ security.

We cannot extract or delete video that never left your PC. For footage on your devices, you (or your organisation’s admin) control retention.

12. Children

The Service is for organisations and adult professionals (for example law enforcement, facilities, legal, and compliance teams). It is not directed at children. If you believe we hold an account for a child, contact [email protected].

13. Security

We use reasonable administrative and technical measures for the website and license systems. No method of transmission or storage is 100% secure. You are responsible for the physical and network security of the PCs that hold source video and exports.

14. Changes

We may update this policy. The “Last updated” date will change. Continued use of the website after the update means you accept the revised policy, except where law requires additional notice or consent.

15. Contact

Privacy requests: [email protected].