Privacy Policy

What we collect

• Your account — email address, and a password hash if you set one.
• Videos you upload or link, and everything derived from them: transcripts, selected clips, rendered files and captions.
• Connected accounts — the access tokens for platforms you choose to connect, plus the channel or handle name so we can show which account is linked.
• Billing details — held by Paddle, not by us. We receive enough to know which plan you are on.
• Basic technical logs — IP address, browser and timestamps, for security and diagnosing faults.

Why we hold it

To run the service you asked for, to take payment, to keep accounts secure, and to meet legal obligations such as keeping tax records.

Who it is shared with

We do not sell your data and we do not share it for advertising. We use these processors, each doing one job:

• OpenAI — audio is sent for transcription. OpenAI states that API data is not used to train its models.
• Anthropic — transcript text is sent so clips can be selected and captions drafted. Anthropic states that API data is not used to train its models.
• Paddle — payment processing, as Merchant of Record. Paddle handles your card details; we never see them.
• Supabase — database and file storage.
• Vercel — application hosting.
• Platforms you connect — where you publish a clip, that clip and its title, description and tags go to that platform at your instruction.

We may also disclose data where the law requires it, and will tell you unless we are prohibited from doing so.

Your videos specifically

Your source video is stored so it can be processed and re-rendered at other aspect ratios. Nobody at Korel watches your videos except where you have asked us to look into a specific problem.

Delete a video in the app and the source, its transcript and its rendered clips are removed.

How long we keep it

• Videos, transcripts and clips: until you delete them or close your account.
• Account records: for as long as the account is open.
• Billing records: as long as tax law requires, typically six years.
• Technical logs: 30 days.

Where it is held

Data is processed in the United States and the European Union. Transfers out of the UK and EEA rely on the standard contractual clauses our processors have in place.

Your rights

Depending on where you live, you can ask for a copy of your data, ask us to correct or delete it, object to some processing, or ask us to send it elsewhere. Email support@whittly.app and we will respond within 30 days.

If you are unhappy with our answer you can complain to your data protection authority.

Cookies

We set cookies that are strictly necessary: keeping you signed in and holding a short-lived token during a platform connection. No advertising or cross-site tracking cookies.

Children

Whittly is not intended for anyone under 16. We do not knowingly collect their data.

Contact

support@whittly.app
Korel
[Your registered business address]