Privacy

What we collect

Only what the product needs to work:

• Your account. If you sign in with Google we receive your email address, name and profile picture — nothing else, and no access to Gmail, Drive or anything beyond your basic profile. If you sign up with an email and password, we store the email and a scrypt hash of the password. We never store the password itself.
• Your projects. The template you chose or the reel link you pasted, the analysis we derived from it, and the state of the edit.
• Your footage. The clips you upload, and the reel we render from them.
• Payments. The order, amount and status. Card details go straight to Dodo Payments, our payment provider, and never reach our servers.

Reference reels

When you paste a public reel, we download it temporarily, measure where its cuts fall and how long each shot holds, then delete the file. We keep the link and the timings. We do not keep, republish or reuse anyone else's footage, and none of it appears in your reel — only its rhythm does.

How long we keep things

• Source clips you upload: deleted 7 days after upload.
• Finished reels: deleted 30 days after delivery.
• Project records and analysis: kept while your account exists.
• Payment records: kept as long as tax law requires.

You can delete a project, or your whole account, at any time — email [email protected] and we will erase everything within 30 days. Deleting your account deletes your footage with it.

Who else sees it

Your footage is private by default. We do not sell your data, we do not use your footage to train models, and we do not show your reels to anyone else. If we ever want to feature something you made, we will ask you first and you can say no.

Three processors handle data on our behalf:

• Dodo Payments — payments and receipts.
• Resend — the email that tells you your reel is ready.
• Cloudflare — sits in front of the site and tells us which country a visit comes from, so we can show prices in your currency.
• Google — sign-in, if you choose it.
• Our hosting provider — servers in Europe running the app and the media pipeline.

Cookies

One cookie, holding your signed-in session, plus a short-lived one during sign-in to stop request forgery. No advertising or tracking cookies.

Your rights

You can ask for a copy of your data, ask us to correct it, or ask us to delete it. Write to [email protected] and we will respond within 30 days.

Who we are

Plumlet is operated by DHARAK Technologies. It is the data controller for everything described here.

Contact

Questions about any of this: [email protected].