What we collect
Your account. When you sign in with Google we receive your email address, name and profile picture. We do not receive your Google password and cannot act on your Google account.
What you upload. The videos you upload or import, the transcripts produced from them, and the clips cut from them.
Sign-in records. For each session: the IP address it was created from, the browser and operating system, and an approximate location derived from the IP. This exists so you can recognise a session that is not yours.
Billing records. Which plan you are on, what was charged, and when. Payment details themselves — card, UPI, bank — go directly to Razorpay Software Private Limited and never reach our servers.
What we do not collect
No advertising or analytics trackers. No third-party cookies. We do not sell personal data, and we do not share it for anyone else's marketing.
Why we process it
To provide the service you asked for: transcribing and analysing your video, cutting clips, and serving them back to you. To bill you, if you are on a paid plan. To keep the service secure — rate limiting, detecting abuse, and letting you audit your own sign-ins. To meet legal and tax obligations.
Our lawful basis is the performance of our contract with you, and our legitimate interest in operating the service securely.
Who else processes it
Speech recognition and AI scoring run against Google's Gemini API. What is sent is the audio or transcript of the segment being judged, and a still image from the clip — not your account details.
Payments are processed by Razorpay Software Private Limited under their own privacy policy. When you import from YouTube, a request is made to YouTube for that video and its public metadata.
These are processors acting on our instructions. We do not give any of them your data for their own purposes.
How long we keep it
Clips are deleted 90 days after they are produced. Videos and transcripts stay until you delete them or close your account.
Sign-in records are scrubbed of IP address, user agent and location on a schedule, leaving only the fact that a session existed. Billing records are kept as long as tax law requires, and can be kept after account closure for that reason alone.
Deleting your account deletes your videos, transcripts and clips.
Where it is stored
Videos, transcripts and clips are stored on the server that runs this instance of Glyphcast, on its own disk, rather than distributed to a third-party object store.
Your rights
Under the Digital Personal Data Protection Act, 2023 you may ask for a copy of the personal data we hold about you, ask us to correct it, ask us to delete it, or withdraw consent where consent is the basis we rely on.
Most of this you can do yourself: your videos and clips are deletable from the app, and deleting your account removes them together. For anything else, write to baldaniyaharsh5@gmail.com and we will respond within 30 days.
Security
Sessions are held in HTTP-only cookies that JavaScript cannot read. Payment signatures are verified before any subscription state changes, and are not retained. Sensitive fields are masked before any provider payload is stored.
No system is perfectly secure. If a breach affects your data we will tell you and the relevant authority as the law requires.
Children
The service is not intended for anyone under 18, and we do not knowingly collect their data. If you believe a child has an account, write to us and we will remove it.
Changes and contact
If we change this policy materially we will say so in the product before it takes effect.
Privacy questions, or a request under section 7: baldaniyaharsh5@gmail.com.