Legal
Privacy Policy
This policy explains what personal data Softer collects when you use softer.video and app.softer.video, what we do with it, who helps us process it, and the choices you have.
Last updated
Who is responsible for your data
The controller of your personal data is Amine Kammah, a sole trader in the United Kingdom trading as Softer. For anything about your data, email founders@softer.video.
What we collect
| Data | Examples |
|---|---|
| Account information | Your name and email address, and your Google profile basics if you sign in with Google. |
| Your product and brand kit | Your product's website address, and what Softer reads from your public site: logo, colours, fonts and screenshots. |
| What you give us to make videos | Briefs, chat messages, and uploaded PDFs, decks and images. |
| What Softer makes for you | Scripts, voiceovers, music and videos. |
| Usage and cost records | Which features you use, how many videos and generations, and what each one cost us to produce. |
| Support requests | Emails and messages you send us, and our replies. |
| Payment metadata | Your plan, subscription status and Paddle customer and subscription IDs. Paddle handles your card; Softer never sees or stores card numbers. |
| Analytics (with consent) | Pages viewed, clicks on key buttons, device and browser type and, if you accept cookies, session replays with every typed input masked. |
Account information
- Examples
- Your name and email address, and your Google profile basics if you sign in with Google.
Your product and brand kit
- Examples
- Your product's website address, and what Softer reads from your public site: logo, colours, fonts and screenshots.
What you give us to make videos
- Examples
- Briefs, chat messages, and uploaded PDFs, decks and images.
What Softer makes for you
- Examples
- Scripts, voiceovers, music and videos.
Usage and cost records
- Examples
- Which features you use, how many videos and generations, and what each one cost us to produce.
Support requests
- Examples
- Emails and messages you send us, and our replies.
Payment metadata
- Examples
- Your plan, subscription status and Paddle customer and subscription IDs. Paddle handles your card; Softer never sees or stores card numbers.
Analytics (with consent)
- Examples
- Pages viewed, clicks on key buttons, device and browser type and, if you accept cookies, session replays with every typed input masked.
Why we use it, and our legal basis
Under UK GDPR we rely on these legal bases:
- Contract: to create your account, make and store your videos, run your plan and billing, and answer support requests.
- Legitimate interests: to keep Softer secure, prevent abuse, understand costs, fix problems and improve the product, in ways you would reasonably expect.
- Consent: for analytics cookies and session replay. You can withdraw consent at any time from Cookie settings in the site footer.
- Legal obligation: to keep records the law requires, such as for tax.
Who processes your data for us
We use these providers (sub-processors) to run Softer. Each only gets the data it needs for its job.
| Provider | What it does | Data involved |
|---|---|---|
| Clerk | Sign-in and account management | Name, email, sign-in details |
| Paddle | Payments, as Merchant of Record (seller of record, tax, invoices, refunds) | Billing details and payment information you give Paddle |
| Anthropic (Claude) | Reads briefs, messages and uploaded files and writes scripts to generate your videos | Briefs, messages, uploads, brand kit, scripts |
| ElevenLabs | Generates voiceovers and music from your scripts | Scripts and music prompts |
| Google Cloud | Hosting, database and file storage, in the EU (europe-west1, Belgium) | Everything stored in your account |
| logo.dev | Finds your company's logo from its domain | Your product's domain name |
| PostHog | Product analytics, EU cloud, only with your cookie consent for cookies and replay | Usage events, device information, masked session replays |
| Resend | Sends account, product and support emails | Name, email address, message content |
Clerk
- What it does
- Sign-in and account management
- Data involved
- Name, email, sign-in details
Paddle
- What it does
- Payments, as Merchant of Record (seller of record, tax, invoices, refunds)
- Data involved
- Billing details and payment information you give Paddle
Anthropic (Claude)
- What it does
- Reads briefs, messages and uploaded files and writes scripts to generate your videos
- Data involved
- Briefs, messages, uploads, brand kit, scripts
ElevenLabs
- What it does
- Generates voiceovers and music from your scripts
- Data involved
- Scripts and music prompts
Google Cloud
- What it does
- Hosting, database and file storage, in the EU (europe-west1, Belgium)
- Data involved
- Everything stored in your account
logo.dev
- What it does
- Finds your company's logo from its domain
- Data involved
- Your product's domain name
PostHog
- What it does
- Product analytics, EU cloud, only with your cookie consent for cookies and replay
- Data involved
- Usage events, device information, masked session replays
Resend
- What it does
- Sends account, product and support emails
- Data involved
- Name, email address, message content
We don't sell your personal data, and we don't share it with anyone else except where the law requires it or to protect our rights.
International transfers
Your data is stored in the EU. Some providers are based in the United States (Anthropic, ElevenLabs, Clerk, Paddle and Resend), so data may be processed there. Where that happens, we rely on appropriate safeguards such as the UK International Data Transfer Agreement or the EU Standard Contractual Clauses with the UK Addendum. These safeguards are part of each provider's data processing terms.
How long we keep it
- Account data, uploads and videos: kept while your account exists, and deleted within 30 days of a request to delete your account.
- Billing records: kept for 6 years, as UK tax law requires.
- Support requests: kept for 2 years after the conversation ends.
- Analytics data: kept for 12 months.
Cookies and analytics
- Essential cookies keep you signed in to the app and remember your cookie choice. They're needed for Softer to work, so we don't ask for consent.
- Analytics cookies (PostHog) are set only if you click Accept on our cookie banner. They let us see how Softer is used and turn on session replay, with every input masked.
- If you decline, we still count page visits without cookies or anything stored on your device. If your browser sends Do Not Track or Global Privacy Control, analytics are off entirely.
- You can change your choice at any time with Cookie settings in the site footer.
Your rights
Under UK data protection law you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased;
- receive your data in a portable format;
- object to processing based on our legitimate interests;
- withdraw your consent at any time, without affecting processing that already happened.
To use any of these rights, email founders@softer.video. We'll reply within one month. If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk, though we'd appreciate the chance to put it right first.
Security
Softer is served over HTTPS, and we use established providers for sign-in (Clerk) and payments (Paddle), so we never store your password or card numbers ourselves. Data is encrypted in transit and at rest, hosted in the EU, and access to production systems is limited to the people who run Softer, with credentials kept in a managed secret store.
Changes to this policy
If we change this policy in a way that matters, we'll update the date at the top and tell you by email or in the app.