Privacy

What we collect

• Your account: your name, email address and, if you add one, a profile picture. If you sign in with Google, we receive your name and email from Google.
• What your team puts in post-prod.io: the video files you upload and the versions we make from them (a preview copy, a scrub strip, audio levels), notes, replies, drawings, attached images, approvals, folders and project names.
• Voice notes: when you dictate a note, we record the audio for that note, turn it into text and tidy the wording. We keep the text and the length of the recording.
• Reviewers on share links: the name and email address a reviewer types when they open a link, and the notes they leave.
• Running the service: your IP address and browser details, used to keep you signed in, limit abuse (for example, too many sign-in emails) and fix problems.

Why we use it

• To run post-prod.io: store and play your videos, show notes to the right people, line versions up and check them for mistakes.
• To email you what you asked for: sign-in links, invites, replies, mentions, approvals and the daily summary. You can turn each kind off in your profile, except sign-in links and invites.
• To keep accounts and files safe, and to work out what went wrong when something breaks.

Who sees your work

The people in your workspace see the projects they're allowed to see: all of them, or only the ones they're added to if a project is set to invited people only. Reviewers you send a share link to see only what that link covers. Video and image links are signed and expire, so a copied link stops working after a few hours.

Services that help us run post-prod.io

We use these companies to provide post-prod.io. Each gets only what its part needs.

• Supabase: sign-in and our database (accounts, projects, notes).
• Fly.io: the servers that run post-prod.io and process uploads (London).
• Cloudflare R2: storage for your video files, preview copies and images.
• Resend: sending emails.
• Lovable: hosting the post-prod.io website.
• Google: "Continue with Google" sign-in, and Gemini, which checks frames and on-screen text for mistakes when AI checks run on a version.
• OpenAI: Whisper, which turns dictated voice notes into text.
• Anthropic: Claude, which tidies dictated notes and looks for notes that contradict each other when you ask it to.
• Retti: only if your workspace connects a Retti key and you start a Retti review; the version you choose is sent to Retti.
• Stripe: payments, once paid plans open. We never see your full card number.

AI features send only the frames, text or audio that feature needs, through each provider's API.

How long we keep things

• Projects and files you delete go to Recently deleted for 30 days, then they're removed with their stored files.
• Your account and your workspace's content stay until you delete them or ask us to.
• Sign-in links expire after an hour. Signing out (or "Sign out everywhere" in your profile) ends your sessions.

What you can ask us

You can ask for a copy of your data, to correct it, or to delete your account and everything your workspace holds. You can delete your account yourself in Profile → Delete account, and a workspace in Workspace settings. For anything else, email contact@retti.ai from the address on your account and we'll answer within 30 days. If you're in the UK or the EU you can also complain to your data protection authority.

Changes

If we change this page in a way that matters, we'll say so in post-prod.io or by email before it takes effect.