Privacy

aiditor makes short reels from your footage. Your footage, your voice and what you type are personal data, so this page says what happens to them.

What we keep

• Your email address and password, to sign you in. Supabase keeps the password only as a one-way hash, so nobody can read it back.
• The videos, images and audio you upload, a smaller copy of each video made for editing, and the renders you export.
• Your reels: their edits and the transcripts of what was said, with the earlier versions of each.
• What you used (AI calls, renders, uploads) and when, so limits and, later, billing work. A short log of account events such as deleting your account.
• While you are signed in with an editor open, the editor tells our own server every 30 seconds, so the admin dashboard can count the editors open right now (those that pinged in the last 90 seconds). We keep one timestamp per account for this, the time of your latest ping, and nothing about what you are editing. It is not sent to anyone else.
• Which link you came by, when it carries a tag (a link shared on Instagram ends in ?ref=ig): a cookie keeps the tag for 30 days, and your account records it when you sign up. Visits to the front page are only counted, per day and tag, with no address, device or identifier.

Who handles it

• Supabase keeps your account and reels, and sends the emails that confirm your account and reset your password.
• Cloudflare R2 stores your files and renders.
• Vercel serves the app, and Fly.io runs the machines that transcribe and render.
• PostHog EU Cloud receives product activity events from our server, including uploads, prompt edits and plan changes, linked to an internal account identifier. We do not send your email, footage, transcripts or prompts in these events. The app does not load PostHog in your browser.
• Administrators of this deployment, a short private list, see an admin dashboard of totals only: accounts, editors open, jobs, AI usage and counts of product events by day. It lists no individual account, and it reads the event counts from PostHog through our server, never from your browser.
• Support access. To help with a problem you report, an administrator on that list may open a read-only support view of your account. They first pass a two-step check with an authenticator app and write a reason, and the view lasts 15 minutes. The start and end of every view go to an audit log with the administrator’s id, your account’s id and the reason. It shows your plan and storage used, the names of your reels with counts of their parts, your recent jobs with a general failure category, and a 30-day usage summary. It can’t change anything, and it never shows your footage or media files, your prompts, your captions or transcripts, or your payment details.
• OpenRouter and the model providers it routes to (speech to text, and the AI models that cut and caption) receive the audio of the video you caption and the text of your reel and your requests, to do that work.

Your footage is not used to train a model by aiditor. Each provider has its own terms for what it does with what it receives; ask before uploading footage you couldn’t share with them.

How long

• Your reels, their versions and their transcripts stay until you delete them.
• The tag of the link you came by stays with your account until you delete it. The daily visit counts are totals and are kept.
• Product events in PostHog follow the retention settings of our PostHog project.
• The editor-open timestamp is overwritten at each ping and removed when you delete your account.
• The files you upload are kept in a folder for the reel they were uploaded for. A reel’s files are cleared 15 days after you last opened or edited the reel, and the app warns you a day before. Keep gives the reel 15 more days, and Keep forever stops the clock. Files in Shared are never cleared on their own.
• Clearing deletes the files, and the editing copies made from your videos, from storage. The reel keeps its edits, and its clips show as missing until you upload the files again.
• Exports stay until you delete them (on the storage page), delete their reel or delete your account. They are not removed on a timer.
• An upload that fails is given up and its space is returned. Storage also discards the pieces of an upload that was never finished after a day.
• Deleting a reel removes it at once, with its versions, the files in its folder (other reels that used them lose them too) and its exports. There is no waiting period.

Deleting everything

On the account page you can delete your account. That removes every file under your account, your reels and versions, your usage and your sign-in. Events already sent to PostHog are not automatically removed; they follow the project’s retention settings. Backups of the database are kept for 30 days and then expire.