Privacy Policy
Last Updated: September 2026 • Plain English & Zero Jargon Guarantee
1. Our Core Privacy Philosophy & Zero AI Training
Proofcut is designed from the ground up for video editors, filmmakers, creators, and their commercial clients. We operate under strict privacy principles:
- Zero AI Model Training: We never scrape, inspect, or train machine learning or artificial intelligence models on your creative video footage, dailies, audio, or annotations.
- No Client Accounts or Passwords: We never force your clients or directors to register, install tracking extensions, or surrender their personal data.
- Zero Data Monetization: We do not sell, rent, or monetize your creative media, client feedback, or contact lists to any third party.
- Full Creator Ownership: You maintain 100% unencumbered copyright and intellectual property rights over all uploaded files.
2. Information We Collect & Passwordless Authentication
We only collect the minimal operational information required to deliver frame-accurate review rooms:
- Editor Email Authentication: Proofcut uses a passwordless authentication model via single-use 6-digit email verification codes (OTP). We never ask for, collect, or store account passwords.
- Client Review Notes & Markups: When clients submit notes or draw vectors on videos, we store the display name they provide, timecode stamps, text comments, and coordinate markup arrays.
- Video Media Files: Video and audio files uploaded to your studio are stored in encrypted cloud storage (Cloudflare R2) solely to stream drafts to authorized review room visitors.
3. Payment Information & PCI-DSS Compliance
All subscription transactions for Pro Creator and Agency Studio are processed directly through our secure payment gateway partner, Midtrans (PT Midtrans), which is certified under PCI-DSS Level 1. Proofcut never receives, processes, or stores your credit card numbers, CVVs, or bank login credentials.
4. Local Browser Storage & Zero Advertising Trackers
Proofcut uses modern browser localStorage strictly for functional purposes:
- Preserving your active session and workspace state.
- Remembering your Clean Light or Cinema Dark studio theme preference.
- Offline caching for cuts created prior to sign-in.
We deploy zero third-party advertising tracking cookies, zero cross-site behavioral tracking scripts, and zero invasive telemetry beacons.
5. Private Review Rooms & Access Control
Each review cut is protected by an unguessable cryptographic share token. Only individuals who receive the specific link can view the cut and leave notes. You retain full authority to permanently delete any video cut or invalidate its review link at any time from your studio dashboard.
6. Data Deletion & Permanent Purge Rights
When you delete a video project from Proofcut, our infrastructure immediately executes a permanent purge:
- Raw video files in high-speed storage are permanently deleted.
- All media versions, vector drawings, and client comments are purged from the database.
- Storage quota allocations are immediately recalculated and released.
7. GDPR & European Privacy Rights (EU/EEA & UK)
If you reside in the European Union (EU), European Economic Area (EEA), or United Kingdom (UK), your personal data is protected under the General Data Protection Regulation (GDPR) and UK Data Protection Act. Proofcut adheres strictly to all statutory privacy principles:
Roles under GDPR
Data Controller: Proofcut acts as a Data Controller for your account credentials (such as your creator email for passwordless OTP authentication).
Data Processor: For client comments, vector markups, and creative video footage uploaded to private review rooms, the creator acts as the Data Controller, and Proofcut acts as the Data Processor solely providing hosting, rendering, and streaming infrastructure.
Your 8 Statutory Data Subject Rights
- Right to Access (Article 15): You have the right to request confirmation of whether we process your personal data and obtain a copy of that data.
- Right to Rectification (Article 16): You may update or correct your personal information at any time.
- Right to Erasure / Right to be Forgotten (Article 17): You have the right to request the immediate permanent deletion of your account, email address, and uploaded video cuts.
- Right to Restriction of Processing (Article 18): You can request that we restrict the processing of your data under specific statutory conditions.
- Right to Data Portability (Article 20): You can export your review comments and timecode markers in open industry formats (CSV, EDL, XML) at any time.
- Right to Object (Article 21): You have the right to object to data processing based on legitimate interests.
- Right to Avoid Automated Profiling (Article 22): Proofcut does not use automated profiling, AI decision algorithms, or behavioral scoring.
- Right to Lodge a Complaint: You have the right to submit a complaint to your national Data Protection Authority (DPA) in the EU member state where you reside.
International Transfers & Subprocessors
Proofcut utilizes enterprise edge infrastructure (Cloudflare Inc.) with Standard Contractual Clauses (SCCs) approved by the European Commission to ensure adequate data protection safeguards across international boundaries.
8. Contact Us & Data Protection Requests
To exercise any of your GDPR rights, request account erasure, or submit privacy questions, contact our data protection team directly at: [email protected]. We respond to all formal data subject requests within 30 days without charge.