Privacy notice
Draft of 24 September 2026 · private beta
Auto-Edit (a working name) is a private beta run by Jack Cole Productions, based in the United Kingdom (“we”, “us”). This notice explains what personal data we handle when you use it, why, who helps us, and your rights under the UK GDPR and the Data Protection Act 2018. We are the controller for this data.
What we collect
- Your account: you sign in with Discord, which tells us your Discord user ID, username, display name and avatar, and whether you are a member of our Discord server and hold its admin role (checked with Discord again regularly while you are signed in). Discord also tells us your email address when it has verified it: we use it once, to reconnect an account you had before sign-in moved to Discord, and do not store it. And the name of your account.
- Your footage: the video you upload — which includes your image and voice, and anyone else who appears or speaks in it.
- What we make from it: a transcript with word timings, extracted audio, still frames, the positions of faces and a rough outline of where the people are in the frame (used only to frame the shot and keep captions and graphics clear of them — not to recognise or identify anyone), edit plans, drafts and exports.
- What you tell us: the optional brief (“What's this video for?”, “Must-haves”), your brand kit (brand names, website addresses, social handles) and any feedback or ratings.
- Technical records: sign-in events, processing logs and error reports, used to keep the service secure and working.
Why we use it, and our lawful basis
- To provide the service you asked for — processing your clip into an edited draft and export (performance of our agreement with you).
- To keep the service secure, prevent abuse, fix faults and measure quality during the beta, including reviewing drafts you rate (our legitimate interests in running a safe, working product; you can object at any time).
- We do not sell your data, use it for advertising, or publish your footage.
Who processes it for us
These providers act on our instructions under data processing terms:
- MongoDB Atlas — our database.
- Discord — sign-in: it confirms who you are and that you are a member of our server. It receives nothing from us but the sign-in request.
- Amazon Web Services — storage of your footage and files, and the machines that process video and render exports. Stockholm region (eu-north-1), in the EU.
- Vercel — hosts this website and its server code. London region.
- Inngest — runs our processing steps in order. It receives project identifiers, not your footage.
- ElevenLabs — turns the audio of your clip into a transcript. Receives the audio track only.
- Groq — a backup transcription service, used only if the first one fails. Receives the audio track only.
- Anthropic (Claude) — plans the edit. Receives the transcript text, your brief and brand kit, and a small number of still frames — never the full video.
- Sentry — error reports from our servers, if we turn it on. It receives what went wrong and where, never your footage, transcripts or sign-in details.
Some of these providers process data outside the UK (for example in the United States). Where they do, we rely on the UK's adequacy regulations or approved safeguards such as the UK International Data Transfer Addendum. Where a provider offers settings to limit how long it keeps data, we use them.
How long we keep it
- Your original upload is deleted automatically 30 days after you upload it.
- Drafts, transcripts and exports are kept while your account is active so you can come back to them, until you ask us to delete a project or your account.
- Your account is kept for the length of the beta. When it is deleted, your projects and files are deleted with it.
- Technical logs are kept for a limited period for security and debugging, then deleted.
Your rights
You can ask for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, and to take it elsewhere. To use any of these rights, contact the person who invited you to the beta. You can also complain to the Information Commissioner's Office at ico.org.uk.
Cookies
We use only the cookies needed to keep you signed in. There are no advertising or analytics cookies in the beta. Fonts are served from our own site, so loading a page does not contact a font provider.
Security
Data is encrypted in transit. Your files are stored privately and reached only through short-lived links. Every read of your projects is limited to your account and the people you share them with.
Changes
If we change how we handle your data we will update this notice and, for significant changes, tell you first.
