Your media stays private.

Accounts and service records

We process account and sign-in information, draft choices, uploaded media, conversion status, credit transactions and support requests to provide the service. Payment details are handled by Stripe; do not send card details, passwords or private media links to support.

Service providers

Vercel hosts the website and frontend. Convex and Convex Auth handle application data and authentication. Current customer sign-in uses email and password; Google sign-in is disabled. Cloudflare Workers and R2 handle private media transfers and storage, and Turnstile helps protect admission. Trigger.dev runs media and cleanup tasks. HeyGen processes the media you authorize for accent conversion. Stripe handles payment and subscriptions. Our transactional email provider processes recipients, messages and delivery information.

Providers may retain operational, security, billing or message records under their own policies. Account deletion does not establish that every provider record or previously delivered message has been erased.

Media retention

Source files expire 24 hours after upload. Ready previews expire seven days after becoming ready; full results expire 30 days after becoming ready. Keep your original and download results before expiry. Playback does not extend retention.

Expiry or deletion blocks new access, then cleanup removes objects when safe. Active processing, unresolved outcomes or failed cleanup can delay physical removal. Existing access links can work until their expiry or removal of the object. Provider media cleanup is tracked separately; a deletion request is not confirmation of erasure.

Trial eligibility and retained history

We use account and network information to limit free previews and protect service resources. Application network quota records use keyed hashes rather than raw addresses. Network quota records are scheduled for removal within 48 hours after their window closes unless unresolved obligations still depend on them.

A pseudonymous used-trial marker remains after account deletion to enforce the lifetime preview limit. Limited credit, payment, security, audit and recovery history can remain to reconcile obligations. We do not promise immediate erasure of all backups, provider records or historical messages.

Account deletion and email

Account deletion revokes sessions, removes sign-in and profile information, restricts access and coordinates media cleanup and permanent subscription cancellation. Its durable status can remain in recovery until billing, processing and cleanup are resolved.

Completion emails follow your saved preference and delivery availability. Product-email consent is separate. Changing a preference does not recall previously delivered messages.

Optional analytics and browser diagnostics

Optional analytics and browser error diagnostics are off until you agree in Privacy choices. PostHog receives selected completed product steps, public sample playback and preview-button clicks, allowlisted public landing pages and referral categories such as Google search, ChatGPT, direct or other. A pseudonymous analytics identifier can connect these steps while you are signed in. Browser error reports include a sanitized error category, code location and application release. We exclude names, emails, media details, payment details, raw page URLs, query values, referrers and access tokens. Session replay is off, and visits before consent are not reconstructed.

Your choice, local counts and browser analytics identifiers are scoped to this tab. Turning diagnostics off clears local data and stops new optional collection; closing the tab clears its local data too. Neither action automatically erases information already sent to PostHog. Contact support for privacy requests. Do Not Track and Global Privacy Control keep optional diagnostics off. Consent is not required to use the service.

Essential reliability diagnostics

Separate from optional browser analytics, the service sends anonymous backend reliability events to PostHog to detect operational failures. These contain fixed error codes, processing stages and environment categories, without customer identifiers, media details or message contents. Essential hosting, security and reliability processing is not controlled by the optional analytics choice.

Contact

Use workspace support or email thetruelibertarians@gmail.com for support or privacy questions. See terms and billing details.