Privacy Notice
This notice describes the information processed by the current CrewCut video upload and review app. CrewCut’s legal operator is not yet identified in the materials supplied, so the operator name and address must be added before publication.
Information we process
- Account: email address, account identifier, sign-in provider, and account or plan information. Google sign-in may provide profile details permitted by your Google settings.
- Videos and reviews: video files, titles, folders, thumbnails, share-link settings, playback and usage data, timestamped comments, and reviewer names or email addresses when provided.
- Billing: plan, payment status, transaction references, invoice details, and billing contact information. Razorpay processes payment credentials.
- Support and storage requests: the details and messages you send us, including a requested storage amount and any optional explanation.
- Closed beta application: name, email, role, editing software, review workflow, stated frustration, and optional portfolio or agency website submitted through Tally.
- Technical and usage data: IP address, browser and device information, logs, security events, and product interaction data.
How we use it
We use information to create and secure accounts; upload, store, process, and play videos; create and administer review links; deliver comments and service emails; manage plans, payments, invoices, and storage requests; answer support requests; protect the service from spam or abuse; understand product use; and meet legal obligations.
Analytics and session replay — review required
The app documentation and current implementation configure PostHog for page events, automatic interaction capture, product analytics, and session replay. When you are signed in, analytics may be linked with your account and traits such as email and plan. Password fields are masked, but the current configuration does not mask all other input fields. Text entered into ordinary fields could therefore appear in a replay. The analytics controls, notice, and masking settings must be reviewed before this notice is treated as final.
Service providers
- Supabase: authentication, database, and application services; the documented project region is Mumbai, India.
- Bunny Stream: video upload, processing, storage, and playback delivery; the documented video library is in Singapore.
- Razorpay: payment processing and subscription transactions.
- Resend: account, review, and billing emails.
- PostHog: product analytics and session replay; the documented project uses the US cloud.
- Google: authentication when you choose Google sign-in.
- Tally: closed-beta application form and application responses.
These providers process information to provide their services to CrewCut. Information may be processed in the locations where CrewCut or its providers operate. The final vendor and transfer disclosures should be checked against active production configuration.
Sharing and public links
We share information with the providers above and when needed to follow your instructions, protect people or the service, or comply with law. A video or folder made available through a review link can be viewed by people who have that link. Reviewers’ comments are visible to people who can access that review. The account holder controls whether to share a link and can disable it using available controls.
Retention and deletion
We keep account and content data while needed to provide the service and until it is deleted through product controls or account closure, subject to technical backup cycles and legal requirements. The app’s account-deletion process is designed to remove the profile, videos, folders, comments, and sign-in identity. Invoice records and PDF invoices are preserved after account deletion for accounting and tax recordkeeping. Specific retention periods for backups, analytics, support messages, and beta applications have not been set and must be confirmed.
Your choices and requests
You can manage videos and review links in your account, delete content using available controls, and request access, correction, deletion, or other applicable rights by emailing [email protected]. We may need to verify your identity before responding. We will handle requests under applicable law, including relevant provisions of India’s Digital Personal Data Protection Act, 2023 and rules as they take effect.
Contact and grievance
Privacy requests: [email protected].
Grievance officer name and contact: not yet supplied.
Legal operator name and registered address: not yet supplied.