Privacy Policy

We may collect the following categories of information:

• Personal data you provide: email address, account credentials, and payment information processed via Stripe.
• Uploaded content: video files you upload locally in your browser for processing. Videos are processed entirely client-side and are not uploaded to our servers.
• Usage data: IP address, browser type, device information, pages visited, time spent, and video generation actions.
• Render metadata: duration, frame count, and status of renders — stored to enforce plan limits and maintain your render history.

• Provide, maintain, and improve the Service.
• Process payments and manage your subscription.
• Send transactional communications (magic link codes, receipts, support replies).
• Send product updates or marketing emails — you can opt out at any time.
• Prevent fraud and abuse, comply with legal obligations, and enforce our Terms of Service.
• Produce aggregated, anonymised analytics for product improvement.

We do not sell your personal data. We may share it with:

• Service providers: Stripe (payment processing), Supabase (database & authentication), and Vercel (hosting).
• Business transfers: in the event of a merger, acquisition, or asset sale, your data may be transferred to the acquiring entity.
• Legal requirements: when required by law, court order, or government authority.

Data is stored primarily in US/EU cloud regions via Supabase and Vercel. If you are located outside these regions, your data may be transferred internationally. Such transfers are conducted with appropriate safeguards, including Standard Contractual Clauses where required under GDPR.

Depending on your location, you may have rights under GDPR, CCPA, or similar laws, including the right to access, correct, delete, or export your personal data, and to opt out of certain processing.

To exercise any of these rights, contact us at support@stackscroll.com. We will respond within the timeframe required by applicable law (typically 30 days).

We retain your account data for as long as your account is active or as needed to provide the Service. Render metadata is retained for the lifetime of your account. Upon account deletion, personal data is removed within 30 days except where retention is required by law.

We use reasonable technical and organisational measures to protect your data, including encryption in transit (TLS) and at rest, and restricted access controls. However, no system is completely secure and we cannot guarantee absolute security.

The Service is not directed to children under 13 (or 16 in certain jurisdictions). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. Continued use of the Service after changes constitutes acceptance of the revised policy.

If you have any questions about this Privacy Policy, please contact us: