Privacy Policy

1. Who is responsible

Brollss operates Brollss. We are the "controller" of the data used to manage your account and for our own purposes. For your content, we process the data on your instructions, and you determine the legal basis for processing data about the people who appear in it. For any privacy question or request, write to support@brollss.com.

When you share a project with other people, or when an organization gives you access to its projects, the person or organization who owns the project decides what it contains.

2. The data we collect

Account data: your name, email address, password (stored in hashed form) or sign-in method, language, plan, settings and preferences, such as your brand kit and editing instructions.

Your content: the videos, audio and voice recordings you upload or import, images and logos, scripts, transcripts, your projects and their edits, the messages you write to the in-app co-editor, and the exports produced.

Connected agents: the name of each AI application you authorize, the connection tokens that let it act, and a record of the actions it takes in your account.

Technical and usage data: server logs (which may include your IP address, browser and device), error reports, and pages visited and features used, measured as described in section 7.

Payment data: Lemon Squeezy processes payments as the seller. We receive a customer identifier, the plan, the status of the subscription, the amounts and the credits purchased. We never see your full card number.

Messages: what you send us by email and the bug reports you submit in the app.

3. Why we use it

To provide the service you asked for: transcribe and edit your videos, generate scenes, images and subtitles, render and export, and let your connected agents work. Legal basis: the performance of our contract with you.

To manage your account, plan, credits and payments, and to send you emails about the service, such as sign-in codes, receipts and important changes. Legal basis: the contract.

To keep the service secure, prevent fraud and abuse, fix errors and understand how features are used so we can improve them. Legal basis: our legitimate interest in running a reliable and safe service.

To send you news about Brollss, only if you agreed to it. You can withdraw that consent at any time in your settings. Legal basis: your consent.

To meet our legal obligations, such as keeping accounting records and answering lawful requests from authorities. Legal basis: legal obligation.

4. AI processing

Your voice is transcribed by transcription software we run on rented GPU servers. Other tasks, such as cutting suggestions, scene writing, image generation and reviewing the result, send the text, images or frames they need to third-party AI model providers. These providers process the data to return a result, under their own terms.

Brollss does not train its own AI models on your content. We do not sell your content or give it to third parties to train their models. No training does not mean no retention: a provider may keep data under its own terms. To learn which safeguards apply, write to support@brollss.com.

Authorized staff may look at an account or a project, in read-only mode, when you ask for help, to investigate an error, or to deal with abuse or a legal request.

5. Connected agents

When you authorize a connected agent, it can read and change, through our MCP server, the projects your account can access: transcripts, images of your video, project settings and the results of its actions. It may also receive your email address, your plan and your credit balance. The data it reads goes to the agent's provider (for example Anthropic for Claude or OpenAI for ChatGPT), which handles it under its own privacy policy and your agreement with it.

We keep a record of what each agent does, to show it to you, to bill paid tasks and to investigate problems. You can disconnect an agent at any time in your settings, under Security, Connected agents. Disconnecting ends its authorization. It does not erase data already sent to the agent's provider, and it does not cancel temporary links already issued, such as an export download link: they stay valid until they expire.

6. Who receives your data

We share data only with service providers that need it to run Brollss, and only what they need: hosting and email (Hostinger), file storage and the anti-robot check on the sign-up page (Cloudflare), rendering and transcription servers (Beam), third-party AI model providers, payment (Lemon Squeezy), and audience measurement (Google Analytics, only if you accept analytics cookies). When you search the stock media libraries, they receive your search terms, not your files. We may change providers, and this list shows the categories we use.

We also share data with the people you choose to share a project with, with authorities when the law requires it, and with a company that would take over the service, which would then be bound by this policy.

We do not sell your personal data, and we do not use it for third-party advertising.

7. Cookies and audience measurement

We use cookies that are needed to sign you in, keep your session secure, and remember your language, your theme and your cookie choice. Cloudflare's anti-robot check on the sign-up page may also set a cookie needed for that check.

To measure visits, the website and the app can use Google Analytics, only if you accept analytics cookies in the cookie banner. Until you choose, and if you choose "Essential only", nothing from Google is loaded and no Google cookie is set. Once accepted, Google Analytics sets cookies and sends Google the pages visited, with the address reduced to remove personal tokens, and technical data about your browser. You can withdraw your consent at any time with the "Cookie settings" link at the bottom of every page and in the app settings: the Google cookies are then deleted. We also use a measurement tool hosted on our own servers, which sets no cookies.

We do not use advertising cookies. You can block or delete cookies in your browser settings. Blocking the sign-in cookie will prevent you from signing in.

8. How long we keep data

We keep your account data while your account exists. We keep your projects and media until you delete them or delete your account.

Temporary files created while processing a video, such as upload copies and render files, are kept only for a limited period, then deleted automatically. Error reports, technical logs and bug reports are also kept for a limited period.

When you delete a project or your account, the related records are deleted from our database. Erasing the files can fail or be delayed by a technical incident: the deletion alone does not confirm that every file is erased. Copies may remain in backups for a limited time, until they are replaced in the normal backup cycle.

Some records are kept longer when the law requires it or to settle a dispute. In particular, the record of credit movements and payments is kept after your account is deleted, linked only to a customer identifier.

9. Your rights

Depending on where you live, including under the GDPR, you have the right to access your data, correct it, delete it, receive it in a portable format, object to some uses or ask us to limit them, and withdraw your consent at any time.

You can change most of your data and delete projects or your account yourself in the app. For any other request, write to support@brollss.com. If we have a reasonable doubt about your identity, we may ask you to prove that the account is yours. For requests under the GDPR, we tell you what we did within one month of receiving them. Complex or numerous requests may need two more months: we tell you why within the first month.

If you think we are not respecting your rights, you can complain to the data protection authority of the country where you live.

10. International transfers

Our providers may process data in countries other than yours, including the United States. Where the law requires it, these transfers rely on the safeguards it provides, such as the standard contractual clauses of the European Commission.

11. Security

We protect your data with measures suited to the risk: encrypted connections, access limited to the people who need it, passwords stored in hashed form, and a password or emailed code before an account is deleted. No system is perfectly secure, and we cannot guarantee that your data will never be exposed. If a breach affects your data, we will tell you when the law requires it.

12. Children

Accounts are for people aged 16 or over. Your content may show minors: you need the rights and permissions required to process it. We do not knowingly let children open an account. If you think someone under 16 opened an account, write to support@brollss.com and we will delete it.

13. Changes to this policy

We may update this policy when the service or the law changes. We change the date at the top of this page and, for important changes, tell you by email or in the app.

14. Contact

For any question about your data or this policy, write to support@brollss.com.