⚠️ UNREVIEWED DRAFT — NOT FOR PUBLICATION
Prepared for review and correction by counsel. Not legal advice.
Items in BRACKETS require a decision or verification. Sections marked ⚖️ COUNSEL are where this product differs materially from a generic SaaS privacy policy and where boilerplate would be wrong.
Three factual items must be verified before this is published — see the VERIFICATION BLOCK at the end. Publishing an inaccurate sub-processor list is worse than publishing nothing.
Draft version: 0.0-draft
Kerliv is an automated video production service. To provide it, we necessarily process video and audio recordings of you, including your face and your voice.
This policy explains what we collect, who else receives it, how long we keep it, and what happens when you delete your account. Section 6 (retention) and Section 7 (what survives account deletion) contain information that materially affects you and that you should read before uploading anything.
LEGAL ENTITY NAME is the controller of this information.
Account information. Email address, and where you sign in with Google, the profile information Google provides.
Video and audio you upload. Recordings that contain your face and your voice, and the face and voice of anyone else appearing in them.
Derived media. Files we generate from your upload: a composite video with a replacement background, an alpha "matte" representing the outline of the subject (one still frame, plus a full per-frame video of the same outline used to match the subject's lighting to the background), still frames, and finished exports.
Transcripts. A verbatim, timed transcript of the speech in your video.
Technical information. IP address, browser and device information, and log data.
Usage information. Which features you use, when, and processing minutes consumed.
⚖️ COUNSEL — please review this section carefully. The founder's intent is accurate plain-language disclosure without either understating what is stored or overstating what is analysed. See also the biometric questions in the accompanying brief.
To place a new background behind you, our system separates the subject of the video from the recorded background. This produces an outline — a "matte" — identifying which parts of each frame are the person.
We do not perform facial recognition. We do not extract face geometry, create face templates or embeddings, attempt to identify who you are, or compare your face against any database. The separation process answers only "which pixels are the subject," not "who is this."
We do not create voiceprints. We transcribe the words spoken in your audio. We do not analyse or store voice characteristics for identification.
We do nonetheless store the original video, which contains your face and voice, for the period described in Section 6.
We do not use your videos, audio, or transcripts to train artificial intelligence models, and we do not permit our service providers to do so.
⚠️ VERIFY: this must be confirmed true across every provider in Section 5 before publication. If any provider's terms permit training, this sentence must be changed.
We do not sell your personal information.
We use the following service providers. Each receives only what is necessary.
| Provider | What it receives | Purpose |
|---|---|---|
| Supabase | Video files, transcripts, account data | Storage, database, authentication |
| Modal | Video files during processing | Computation |
| Vercel | IP address, request data | Application hosting |
| Anthropic | Transcript text | Automated analysis to select supporting imagery and on-screen text |
| Whisper provider | Audio — VERIFY | Transcription |
| Email, profile | Sign-in, where you choose it | |
| Resend / Postmark | Email address | Transactional email |
Automated analysis. The transcript of your speech is transmitted to Anthropic, a third-party artificial intelligence provider, which analyses it to identify moments suitable for supporting imagery and on-screen text. VERIFY AND STATE: retention terms applicable to that transmission.
⚠️ VERIFY BEFORE PUBLICATION: whether transcription runs on our own infrastructure or is transmitted to a third-party provider. If the latter, your audio — not merely its transcript — leaves our infrastructure, and this table and section must say so plainly.
We may also disclose information where required by law, or to establish, exercise, or defend legal claims.
⚖️ COUNSEL — this schedule is published deliberately rather than described in general terms, on the understanding that certain biometric statutes require a published retention and destruction schedule. Please confirm this satisfies any applicable requirement, and whether it should be more or less specific.
| What | How long |
|---|---|
| Your original uploaded recording | Deleted 90 days after your last activity on that video, provided a finished version exists |
| Composite video, matte (still frame and per-frame video), still frames | While your account is active |
| Finished exports | While your account is active |
| Transcripts | While your account is active |
| Account information | While your account is active |
| Your uploaded brand logo | While your account is active, or until you replace or remove it |
| Upload audit record | Permanently — see Section 7 |
"Activity" means editing or exporting that video. Simply viewing it does not extend the period.
Why we delete originals. Once a finished version exists, retaining the raw recording of your face serves no purpose for you and increases the harm that a security breach would cause. Deleting it is a deliberate protective measure.
What deletion does not affect. Your finished videos remain, and you can continue to edit supporting imagery, on-screen text, and music, and re-export. Only changing the background requires the original, and that will no longer be possible for that video.
Advance notice. We will email you 14 days before an original recording is scheduled for deletion. That email includes a link that extends the period.
Failed processing. Where a video never finished processing, we do not delete your original, because it is the only copy of your work.
Legal hold. We may suspend deletion of specific material where we are required to retain it in connection with a legal claim or investigation.
When you delete your account we permanently delete your login credentials, your profile, your videos, your transcripts, and all associated files from storage.
We retain one record permanently. This is deliberate and you should understand it before uploading.
For each video you upload we create an upload audit record containing:
This record contains no video, no audio, no images, and no transcript. It is a record about an upload, not a copy of one.
Why. If a dispute later arises over whether someone had the right to upload a particular person's likeness, the recording itself is not what resolves it — what resolves it is a record of who uploaded what, when, and what they confirmed at the time. Retaining that record after the recording is gone is what allows us to respond to such a claim, including one made on behalf of a person appearing in a video who did not consent.
Legal basis. We retain this record for the establishment, exercise, or defence of legal claims. ⚖️ COUNSEL: confirm this characterisation and adjust for the specific regimes that apply.
Depending on where you live, you may have the right to:
To exercise any of these, contact PRIVACY EMAIL. We will respond within TIMEFRAME.
⚖️ COUNSEL: add the specific rights language required for any regime the founder decides to serve — GDPR, CCPA/CPRA, and any state biometric statute. The founder should decide whether to accept EU users at launch, since that determines whether GDPR-specific machinery is needed on day one.
DESCRIBE ACTUAL MEASURES. The following are implemented and can be stated: storage buckets are private and accessed only through short-lived signed URLs; row-level security policies restrict database access to the owning account; authentication is handled by a third-party provider.
No system is perfectly secure, and we cannot guarantee absolute security.
The Service is not directed at anyone under 18 and we do not knowingly collect information from children. If you believe a child has provided us information, contact us and we will delete it.
Our service providers operate in JURISDICTIONS — verify per provider. Where your information is transferred outside your country, TRANSFER MECHANISM.
We may update this policy. We will notify you of material changes by EMAIL / IN-PRODUCT NOTICE before they take effect.
PRIVACY EMAIL LEGAL ENTITY NAME AND ADDRESS