Privacy policy
In short
- We edit your footage on our own computers, and keep the clips you upload, encrypted, in our Google Drive. Some job records (client name, job title, file fingerprints) are kept in Notion and GitHub.
- An outside service (such as a cloud AI tool) touches your footage only if you say yes to it for that order.
- This website has no analytics or trackers. It sets one cookie, only if you sign in to My orders.
- On WhatsApp we only answer what you write to us and message you about your own video job, never for marketing. Send STOP and we stop.
- We never sell your data, and never show your video to anyone without your written permission.
- You can ask us to see, correct or delete your data at any time. We delete by hand, within 30 days of your request.
1. Who is responsible
EOS Visuals, a small business based in India, is responsible for your personal data (the "data fiduciary" under India's Digital Personal Data Protection Act, 2023, and the "controller" under the EU and UK GDPR). Contact for anything in this policy, including complaints: vinith@eosvisuals.com.
2. What we collect, and why
- Your contact details
- Name, business name, email, and anything you write to us. Used to answer you and to run your order.
- Your answers about your videos
- On the free trial form: where you post, what you want your videos to do, how many videos a month you might want, when you would start, and optionally an editing style or a link to a reel you like. Used to fit your trial edit to what you need and to suggest a plan that suits you.
- Order and payment details
- What you ordered, the amount, and the payment reference. Payments are handled by our payment provider (named on your invoice); we receive confirmation of payment, never your full card details. We keep records needed for accounts and tax.
- Your footage and what we make from it
- The video you send, its audio, the transcript and captions we make from it, still frames, the list of names you give us, and the finished video. Your footage may show you or other people; you confirm you have their permission. Used only to complete your order.
- Website visits
- This site runs no analytics, advertising or tracking code. It sets no cookies, except one sign-in cookie if you sign in to My orders (see "My orders" below). Our host, Cloudflare, processes basic technical data (such as IP address and browser type) to deliver the pages and protect them from attacks.
- My orders account
- When you send your first video, we open a My orders account for you so you can follow your video, answer questions, approve stills, download finished edits and pay invoices. It holds your name, business, the email or WhatsApp number you gave, the titles and status of your videos, links to the stills, previews and finished files, small thumbnail pictures from your edits, your plan and your invoices. Signing in uses a link we email you or a 6-digit code we send on WhatsApp; no password. While you are signed in, your browser keeps one sign-in cookie (eos_s) for up to 30 days or until you sign out. It is used only to keep you signed in.
Legal basis. We use your data to perform our contract with you (your order), to meet legal obligations (accounts and tax), and, for any outside service that would process your footage, on the basis of your consent for that order. Under India's DPDP Act, we process your data for the purpose you gave it to us, and on your consent where the Act requires it.
3. How your footage is handled
- Edited locally. Our editing, including speech-to-text and AI tools, runs on our own computers by default. Some job records (client name, job title, file fingerprints) are kept in Notion and GitHub.
- Outside services only with consent, per order. Before your job starts, we ask whether any outside service may process your footage, audio, transcript, captions or frames, and we name the service. The only outside AI service we use is Claude by Anthropic: if you agree, the words you speak in your video (its transcript, whole or in short passages) and the directions typed for your edit may be sent to it. Your footage, audio and frames are not sent to it. If you say no, or don't answer, your footage, audio, transcript and frames stay on our computers. Only single generic words (for example a subject like "coffee") may be searched on stock libraries (Pixabay, Pexels, Envato) and on YouTube, and job records go to Notion and GitHub. Upload and delivery work as described below. We keep a record of your answer with your job.
- Upload. You upload your clip on our free trial page, or from the home page after you press "Send my video". The clip, your form details (name, business, contact, Instagram or website) and your consent choices go to our private storage on Cloudflare (R2). We copy the clip, encrypted, to our Google Drive and check the copy; your form details and consent choices go to our own computers, not to Drive. Then we delete them from R2; until we have collected them, they wait there and are not deleted automatically. We keep the Drive copy of your clip until you ask us to delete it. Your answers on the questions page we send you are copied to our own computers and deleted from R2 the same way.
- Review and delivery. If you tick "Review on Frame.io", we put review copies of your edit on Frame.io (Adobe) so you can watch and comment; if you don't, we send you a private download link instead. We deliver the final file through Google Drive, with the link sent by email or WhatsApp. Only people with the link can open it.
- The preview on our home page. If you drop a video on the cutting table, your browser first reads its sound and size on your own device to show the dead air; that reading is not sent anywhere. Nothing is uploaded until you choose how we contact you, tick the two required consent boxes and press "Send my video". Then the clip is uploaded as described under "Upload" in this list. Our sample clip is never uploaded.
- Paying an invoice. In India you pay by UPI in your own UPI app, using the QR code or UPI ID on our payment page; the payment and its reference reach our bank account, and we use them only to match your invoice. Outside India you pay through PayPal: its checkout loads from paypal.com only when you press "Show PayPal", PayPal handles your card or account details, and PayPal's own privacy policy applies. We never see or store card or bank login details. We keep the invoice number, amount and payment reference.
- WhatsApp messages. If you write to us on WhatsApp (+91 93619 44365) or give us your number for your order, we receive your number, your messages, the times they were sent, and whether our messages reached you and were read. We use them only to answer what you wrote and to message you about your own video job: questions about your brief, revisions and delivery. If you write to us before you order, we reply by hand, and we can only reply within 24 hours of your last message. We send no marketing, offers or promotions by WhatsApp. WhatsApp, a service of Meta, carries these messages, and its own terms and privacy policy apply to them. Our WhatsApp messages pass through a relay run on Cloudflare. It deletes each incoming message once our computer has collected it; a first message from a number we don't know yet is deleted once we have seen it; anything not collected is deleted after 7 days. We keep the text of the messages, your answers and the times they were sent on our own computers, with your job (or with your enquiry, if you have not ordered), and delete them on request. Reply STOP at any time (or write "stop messaging me", "don't message me", "unsubscribe" or "opt out") and we will not message you on WhatsApp again. Please don't send ID or payment details by WhatsApp.
- Local copy. We keep a copy of your job on our own computers.
- No other use. We don't use your footage to train AI models, don't publish it, and don't use it as a sample without your written permission.
4. Who else processes your data
- Google (Gmail, Google Drive): email, storing the clips you upload (encrypted), file sharing and delivery.
- Anthropic (Claude): AI processing of your video's transcript and the directions for your edit, only where you have agreed to it. Never your footage, audio or frames.
- WeTransfer: if you share your footage with us by a WeTransfer link.
- Notion and GitHub: job records (client name, job title, file fingerprints).
- Pixabay, Pexels, Envato and YouTube: stock and reference searches using single generic words, never your footage.
- WhatsApp (Meta): carries our WhatsApp messages about your video job.
- Cloudflare (WhatsApp relay): passes WhatsApp messages to us and deletes each incoming one once we have collected it (a first message from a number we don't know yet, once we have seen it); 7 days at most.
- PayPal: international payments. Its own privacy policy applies to what you enter on its pages. In India, payments go by UPI from your own app straight to our bank account.
- Cloudflare: hosting this website, and holding uploaded clips, form details and answers until we collect them, and your My orders account (see "How long we keep it").
- Resend: sends the sign-in emails for My orders. It receives your email address and the email it sends.
- WhatsApp (Meta) also carries the 6-digit sign-in codes for My orders if you sign in with your WhatsApp number.
- Frame.io (Adobe): review copies of your edit, only if you tick "Review on Frame.io".
We don't sell or rent your data, and we don't share it for advertising.
5. Where your data is processed
We work from India, so your data is processed in India. Our service providers may process it in other countries, including the United States. If you are in the EU or UK: India does not have an EU or UK "adequacy" decision. We transfer your data to India because that's necessary to carry out the order you place with us, and we protect it as this policy describes.
6. How long we keep it
- Clips, form details and answers on our upload storage (Cloudflare R2): kept until we have collected them, then deleted there.
- The clips you upload, in our Google Drive (encrypted): kept until you ask us to delete them, then deleted by hand within 30 days of your request.
- Your form details (name, business, contact, Instagram or website) and consent choices, on our own computers: kept with your job until you ask us to delete them, then deleted by hand within 30 days of your request.
- Your My orders account, including the thumbnail pictures from your edits (Cloudflare R2): kept while you work with us and deleted automatically 12 months after your last video, or sooner if you ask. If we never start working on your video, the account is deleted after 90 days. Sign-in links expire after 15 minutes (24 hours for the first one), codes after 10 minutes, and the sign-in cookie after 30 days.
- Your requests in My orders (approving stills, asking for changes or a revision, notification settings) wait for us for at most 14 days, then are deleted; we keep what we need with your order.
- If an email to you bounces or you mark it as spam, we keep a coded fingerprint of the address (not the address itself) so we never email it again. It is deleted after 24 months, or sooner if you ask.
- Your footage, working files and finished video on our computers: deleted on request, by hand, within 30 days of your request.
- WhatsApp messages about your job (text, your answers, times): deleted on request, by hand, within 30 days. The Cloudflare relay deletes incoming messages once we have collected them (a first message from a number we don't know yet, once we have seen it), and after 7 days at the latest. If you send STOP, we stop messaging you on WhatsApp.
- Emails and order records: kept for the period Indian tax law requires.
7. Your rights
You can ask us to:
- tell you what personal data we hold about you and how we use it, and give you a copy;
- correct or complete it;
- delete it (we'll keep only what the law requires us to keep, such as payment records);
- stop using an outside service for your footage: withdrawing consent is as easy as giving it, and applies from then on (copies already delivered stay in your folder);
- (India) nominate someone to exercise these rights if you die or can't act yourself;
- (EU and UK) restrict or object to our use of your data, and receive your data in a portable format.
Email vinith@eosvisuals.com. We reply within 30 days. If you're not satisfied, you can complain to the Data Protection Board of India, or, in the EU or UK, to your local data protection authority.
8. Grievance contact (India)
For grievances under the DPDP Act: EOS Visuals (the owner), vinith@eosvisuals.com.
9. Testing our tools and our portfolio
We sometimes test our editing software on videos that people have posted publicly. Test files are kept on our own computers and may be processed by the AI tools we use. We never use them in a sales message addressed to the person who made them.
Our portfolio shows demos, not client work. A demo is made from footage that is licensed or cleared for our portfolio: either public videos that their creators have licensed under a Creative Commons Attribution (CC BY) licence, or footage whose owner has cleared it for portfolio use, or stock footage under licence. Each demo is labelled as a demo and credits its footage, music and fonts. A demo never implies that anyone in it endorses or uses EOS Visuals. We do not show any client's video without the client's written permission. If you appear in a demo or made its footage and want it removed, email us and we'll take it down.
10. Children
Our service is for businesses and adults. We don't knowingly collect data from anyone under 18 except where it appears in footage a client sends us with permission.
11. Security
We keep client files on our own computers and in our Google Drive (the clips you upload are encrypted there), use private links for delivery, and limit access to the people doing your order. If a breach affects your data, we'll tell you and the authorities as the law requires.
12. Changes
We'll update this page if anything changes, and change the date at the top. For changes that affect an order in progress, we'll email you.