Privacy Policy

SwiftEdit ("we", "us", "our") is committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy outlines how we collect, use, process, store, share, and protect your information when you access our platform and utilize our video editing and drop-servicing infrastructure. This policy is designed to comply with international data protection frameworks, including but not limited to the US Federal Trade Commission (FTC) Act, applicable US state privacy laws (such as the California Consumer Privacy Act/CPRA), the Australian Privacy Act 1988, the UK/EU General Data Protection Regulation (GDPR), and Brazil's Lei Geral de Proteção de Dados (LGPD).

1. Information We Collect

We collect information that you voluntarily provide to us, data generated during your usage of the platform, and information automatically collected through cloud infrastructure.

• Account and Profile Data - Full name, business or legal name, email address, encrypted password credentials (hashes), user role (Client or Editor), and localized dashboard configuration preferences.
• Project and Production Data - Raw video footage URLs, cloud storage links, written creative briefs, project milestones, video timeline timestamps, review comments, and final unwatermarked media deliverables.
• Financial and Billing Data - All direct monetary transactions are securely processed by our third-party payment processor (Stripe). We do not store or have access to raw credit card numbers or banking credentials. We exclusively retain transaction reference tokens, invoice IDs, subscription status logs, and tax-related transaction histories.
• Technical and Usage Logs - Internet Protocol (IP) addresses, browser type, operating system characteristics, device type, anonymized session tracking, acquisition channels, and in-app interaction metrics.

2. Legal Basis and Purposes of Processing

We process your data under legitimate, lawful, and globally recognized frameworks, primarily for the following operational requirements:

• Performance of a Contract - To manage your account, facilitate the video production pipeline, coordinate assignments between clients and editors, and securely fulfill purchased tiers or retainer packages.
• Legitimate Interests - To maintain platform integrity, optimize user experience, prevent fraud, secure cloud storage buckets against computational memory leaks, and enforce our internal anti-poaching security infrastructure.
• Legal and Regulatory Compliance - To meet standard cross-border auditing, taxation, and corporate record-keeping requirements across multiple operating jurisdictions.
• Explicit Consent - To communicate promotional content, newsletters, and marketing materials when you deliberately choose to opt-in.

3. Data Protection and International Cross-Border Transfers

SwiftEdit operates an international cloud ecosystem. Our centralized server infrastructure is managed via industry-standard cloud architecture (including Supabase, Cloudflare R2, and Stripe).

As a decentralized production network, raw footage and administrative communications may be accessed and processed by vetted contracted professionals (Editors) located in alternative jurisdictions, including South America (Brazil). To legally safeguard these transfers, we enforce strict Data Processing Agreements (DPAs) and mandatory internal client-isolation protocols, ensuring that your corporate assets are handled securely and never leaked or distributed outside the active commission scope.

4. Information Sharing and Disclosure

We do not sell, rent, or trade your personal data or corporate visual assets to third parties. Disclosure is strictly restricted to the following scenarios:

• Core Infrastructure Partners - Essential enterprise services required to host and run our platform (Supabase for data management, Cloudflare R2 and Worker Proxies for video streaming, and Stripe for financial settlement).
• Vetted Subcontractors - Assigned senior video editors receive strictly isolated access to your provided references, briefs, and raw video files solely for the duration of the operational project.
• Legal Mandates - If required by law enforcement, judicial decrees, or binding regulatory oversight bodies within our active operational territories.

5. Data Retention and Deletion

We keep your personal account details, project briefs, and interaction metrics active for the duration of your registration on the platform. Following the closure or inactivation of an account, certain transaction and project logs are archived for a standard buffer period of up to five (5) years exclusively to comply with tax audit regulations, legal claims defense, and financial transparency laws. Once this period expires, all data is either completely purged from our cloud buckets or fully anonymized.

6. Security Architecture

We apply comprehensive technical and administrative guardrails to secure your production files and identity:

• All data transmitted through the web interface is guarded via Transport Layer Security (TLS 1.2 or higher) protocols.
• User passwords are completely inaccessible to our team, protected by industry-standard cryptographically secure hashing functions.
• All video review previews are restricted by watermarks on the interactive player and served via secure Cloudflare Worker proxies to prevent unauthorized source extraction.
• High-resolution original final renders are completely blocked from external fetch requests until explicit client verification and automated escrow releases are triggered.

7. Global Data Rights (US, AU, EU, BR)

Depending on your region of residence, you are granted robust, autonomous rights over your information, which we honor globally:

• Access and Portability - The right to request a digital breakdown of the data we hold about you.
• Rectification - The right to modify incorrect profile details or business names.
• Erasure ("Right to be Forgotten") - The right to request the total permanent deletion of your account and visual portfolio from our servers, subject to regulatory tax overrides.
• Restriction and Objection - The right to halt specific processing operations, such as automated marketing tracking.

To exercise any of these permissions, you can instantly initiate a technical support request via our integrated support ticket channel.

8. Cookies and Automated Tracking

We limit data tracking technologies to essential operational functions:

• Strictly Necessary - Temporary local tokens required for active dashboard authentication sessions, load balancing, and cross-site scripting (CSRF) defenses. These cannot be disabled as they keep the site secure.
• Functional - Local client browser storage used to recall user theme styles (dark mode settings) and language settings.
• Analytical (Optional) - Anonymized page-flow indicators to help us evaluate acquisition performance. These are only deployed if you manually accept the consent indicator upon entering the domain.

9. Amendments to this Policy

We reserve the right to modify this Privacy Policy at any time to reflect cloud compliance upgrades or shifting multi-jurisdictional legal demands. We will notify active users of substantial changes by updating the timestamp at the top of this documentation or via dashboard announcements.