Legal
Privacy Policy
Effective July 20, 2026
Local-first media
Your recorded video, audio, camera tracks, screenshots, and exported files stay on your device. We never receive or store them.
Project details are different, and we want to be exact about it: when you edit in the OrbitPlus video editor, the project’s structure is saved to your account automatically so you can reopen it. That saved copy includes the project title, the file name of the recording you imported, your caption text, and your editing settings such as segments, zooms, camera placement, and background. It does not include any picture or sound from the recording itself.
If you would rather keep a project entirely on your device, do not open it in the cloud-backed editor.
Information we collect
- Account information such as name, email address, password hash, email-verification state, and session records.
- Purchase and entitlement records supplied by our payment provider, including plan, status, and transaction references. We do not store full card numbers.
- Extension activation information such as a pseudonymous device ID, browser, platform, extension version, activation time, and last-use time.
- Usage totals required to enforce metered AI credits and diagnose service reliability.
- Video editor project data as described above: title, imported file name, caption text, and editing settings. No recorded picture or sound.
Extension security
Extension connection tokens are stored in Chrome local extension storage rather than synchronized storage. Tokens are hashed on the server, shown only when created, and can be revoked. Device activations are enforced server-side. Never share a connection token.
How we use information
We use collected information to authenticate users, provide purchases and device activations, enforce limits, prevent abuse, provide support, maintain security, and improve reliability. We do not sell personal information.
Data retention and control
Account and purchase records are retained while needed to provide your license, comply with law, resolve disputes, and prevent fraud. You may request access, correction, export, or account closure. Where deletion is legally available, we use a scoped and verified process designed to avoid affecting unrelated or shared systems.
Security
We use secure cookies, hashed passwords, hashed extension connection tokens, restricted origins, encrypted transport in production, access controls, and security monitoring. Short-lived password-reset and email-verification links are single-use and expire quickly, but are not yet stored hashed; hardening this is on our roadmap. No system can guarantee absolute security; contact us promptly if you suspect unauthorized access.
Contact
Privacy requests can be sent through HyperBrainLabs at hyperbrainlabs.com.