Privacy policy
Updated 2026-09-24
Who is responsible
The operator named under "Operator and contact" below is the controller for personal data processed by video2greenscreen. Use the contact address there for any privacy request.
What we process and why
- Videos and results. Your upload, the green-screen result and the filename, to perform the conversion you request (contract).
- Content screening. Before processing, sampled frames of every upload are checked automatically for sexual content and graphic violence. A failed check stops the conversion. We do this to prevent abuse and illegal content (legitimate interest). Contact us if you believe a video was rejected by mistake.
- Rights confirmation. The Terms version you accepted and your confirmation that you may process the video, to document permission and defend legal claims (legitimate interest).
- Abuse prevention. IP address, a random visitor cookie, bot-detection signals and usage counts, to enforce free limits and keep the service available (legitimate interest).
- Accounts. Name, email, password hash and sessions (contract). If you sign in with Google, we receive your name, email address and profile picture from Google.
- Payments. Credit purchases, payment references and transaction records (contract and tax obligations).
- Emails. Product emails only after a separate signup and confirmation (consent, which you can withdraw at any time).
Analytics
We count page views with Umami, which we host ourselves. It uses no cookies, does not store IP addresses and records pages without their query strings.
We also send product measurements to PostHog: selected video lengths, file sizes, formats, processing outcomes and screening times, including files that exceed limits. Video duration is read on your device before upload. These events contain no video content, filenames, download links, email addresses, account IDs or IP addresses; each uses a random ID that is not linked to you. We do this to size limits and pricing (legitimate interest).
Service providers and transfers
These providers process data for us under data-processing terms:
- Vercel: hosting, logs and bot detection.
- Cloudflare (R2): file storage.
- Neon: database.
- Replicate: background removal of approved videos.
- OpenAI: content screening of sampled frames. Under its API data policy, OpenAI may keep inputs for up to 30 days to detect abuse and does not use them for training.
- PostHog: product measurements.
- Polar: payments and tax, as merchant of record under its own privacy policy. Polar receives card details directly; we never see them.
- Resend: email delivery.
Several providers process data in the United States. Transfers rely on the EU-US Data Privacy Framework where the provider is certified, or on the European Commission's Standard Contractual Clauses.
How long we keep data
- Uploads and intermediate files: deleted after processing, at the latest after 24 hours.
- Guest results: deleted 24 hours after conversion.
- Account videos: until you delete them or your account.
- Conversion records, screening decisions and rights confirmations: as long as needed to prevent abuse and to establish or defend legal claims.
- Payment and transaction records: as long as tax and accounting law requires.
Providers may keep their own copies for the periods in their published terms.
Cookies
We only use cookies the service needs: session cookies while you are signed in, and a random visitor cookie (30 days) that enforces free limits. We use no analytics or advertising cookies, so we do not ask for cookie consent.
Your rights
You can request access to, correction, deletion or a copy of your personal data, restrict or object to processing based on legitimate interest, and withdraw consent at any time. You can delete account videos yourself. You may complain to the Office of the Commissioner for Personal Data Protection in Cyprus or to the authority where you live.
The service is for people aged 18 and over.
Operator and contact
JLN LABS LTD
Chrysoupoleos 23, 6041 Larnaca, Cyprus