Privacy notice
What we collect, why we collect it, and how long we keep it. Plain language. Short.
§01
Data we collect
- GitHub identity — login, email, avatar, and a scoped OAuth token used only to list and clone the repositories you select.
- Selfie + voice sample — used to clone your avatar and voice. Stored encrypted in Vercel Blob. Never sold, never used to train third-party models beyond the per-render cloning call.
- Render artifacts — silent demos, narration audio, lipsync videos, final MP4s. Retained for 90 days unless you delete them sooner.
- Billing identifiers — Stripe customer + subscription IDs. No card data ever touches our servers.
§02
Third-party processors
We share the minimum data necessary with the services that power the pipeline. Each is bound by a Data Processing Agreement.
- Vercel — hosting, serverless compute, Blob storage.
- Neon — managed Postgres for project + job state.
- OpenAI / Anthropic — code analysis and storyboard authoring.
- Gradium — instant voice cloning + text-to-speech.
- fal.ai — Omnihuman lipsync rendering.
- Stripe — payment processing and subscription management.
§03
Your rights (GDPR)
You can request access, rectification, deletion, or export of your personal data at any time. Email contact@keynoter.ai and we'll act within 30 days. Deleting your account also wipes your stored selfie, voice sample, and all render artifacts.
§04
AI disclosure
Every video Keynoter renders is embedded with a C2PA provenance manifest and a visible watermark on free-tier renders, signalling that the content was AI-generated. We will never strip this marker from a third party's content.