Privacy Policy
What personal data uscale collects, why, who helps us process it, and your rights.
1. Who is responsible
Scaleform OÜ (registry code 17409408, Tornimäe tn 5, Kesklinna linnaosa, 10145 Tallinn, Harju maakond, Estonia) is the controller of the personal data described here. Contact us about privacy at privacy@uscale.ai.
When you use uscale to film your own product, the data inside that product (for example names or emails visible on screen) is processed on your behalf. For that data you are the controller and we act as your processor.
2. What we collect
| Data | Examples | Why |
|---|---|---|
| Account | Email address, workspace name, sign-in times | To create your account and sign you in with a one-time link |
| Product access | Product URLs and repositories, logins you give us, saved browser sessions after you sign in through our streamed browser | To open and film the product you chose. Logins and sessions are stored encrypted (AES-256-GCM) |
| Your content | Screen recordings and screenshots of your product, uploaded logos and files, reference videos, chat messages with the director, facts you tell us | To plan, write, design and render your videos |
| Generated output | Scripts, narration audio, captions, videos, post copy | To deliver your videos and keep previous versions |
| Technical and usage | IP address, browser type, server and job logs, records of AI requests and their cost | To run, secure, debug and improve the Service and to account for usage |
We do not use advertising or analytics cookies. The app keeps your sign-in session in your browser's local storage. Fonts are loaded from Google Fonts and some scripts from the jsDelivr network, which receive your IP address when your browser fetches them.
3. Legal bases
- Contract (GDPR Art. 6(1)(b)): providing the Service you signed up for.
- Legitimate interests (Art. 6(1)(f)): keeping the Service secure, preventing abuse, fixing faults and improving quality.
- Legal obligation (Art. 6(1)(c)): keeping accounting records when you buy something.
4. AI and your content
Your content is sent to AI model providers to write, design and check your videos. We do not use your content to train AI models, and the providers we use do not train their models on data sent through their business APIs under their terms.
5. Who we share data with
We use these service providers (processors). They may only use the data to provide their service to us.
| Provider | Purpose | Location |
|---|---|---|
| Hetzner Online GmbH | Servers that run uscale, film products and render videos | Germany |
| Supabase, Inc. | Database, sign-in and file storage | United States (AWS) |
| Anthropic, PBC | AI models for planning, writing, design and quality checks | United States |
| OpenAI, L.L.C. | AI models used to draft animation code | United States |
| ElevenLabs, Inc. | Voiceover and sound generation | United States |
| AtlasCloud and Higgsfield AI | AI video clips used as cutaways, only when your video uses them | United States / other |
| Apify Technologies s.r.o. | Downloading a reference video from a social link you give us | Czech Republic |
| Google (Workspace, Fonts) | Email for support and privacy requests; web fonts | United States / EU |
We also look up public information such as GitHub repositories and product logos by name when your video needs them. We do not sell personal data. We may disclose data if the law requires it or to protect the rights and safety of our users or others.
6. Transfers outside the EU
Some providers are in the United States. Where a transfer is not covered by an adequacy decision, including the EU–US Data Privacy Framework for certified providers, we rely on the European Commission's standard contractual clauses.
7. How long we keep data
- Account data, your content and videos: for as long as your account exists. When you delete a project or your account, we delete its data within 30 days, and backups are overwritten on a rolling basis afterwards.
- Logins and saved sessions: until you remove them or delete the project.
- Logs and usage records: usually up to 12 months.
- Accounting records: as long as Estonian law requires, currently 7 years.
8. Security
Data is sent over encrypted connections. Stored logins and browser sessions are encrypted, access to production systems is restricted, and each workspace can only see its own projects.
9. Your rights
You can ask to access, correct, delete, restrict or export your personal data, and object to processing based on legitimate interests. Write to privacy@uscale.ai. We answer within one month. You can also complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee) or the authority in your country.
10. Changes
We will update this policy when our processing changes and show the new effective date above. If a change is material, we will tell you by email or in the app.