Privacy Policy

This Privacy Policy explains how TapeOnce ("TapeOnce", "we", "us") processes personal data when you visit tapeonce.com, create an account, upload screen recordings, or use our automation-generation service (the "Service"). We take a privacy-first approach: recordings are analysed to generate automations for you and are not used to train third-party AI models.

1. Controller

The controller responsible for the processing of your personal data is:

Colin Dorenbusch (operator of TapeOnce)
Email: colin@tapeonce.com

The full legal and postal contact information is available on our Terms page under "Imprint / Provider identification".

2. What data we process

2.1 Account data

• Email address (required for magic-link sign-in)
• Optional profile information (display name, workspace name)
• Authentication metadata (sign-in timestamps, session tokens, IP address of the sign-in request)

2.2 Recordings and generated content

• Screen-recording video files you upload (up to 500 MB / 30 minutes each)
• Parameters you enter (number of people, run frequency, hourly-rate range)
• Automatically extracted metadata from the video (detected apps, process steps, timestamps, confidence scores)
• Generated automation flows (n8n JSON), setup checklists, and chat messages with the setup concierge

2.3 Billing data

• Stripe customer ID, subscription status, plan, invoice history, card fingerprint (used only for anti-abuse on $1 trials)
• Card details are handled directly by Stripe; we never see or store full card numbers

2.4 Usage and operational data

• Job status, error messages, AI token usage (per job, for cost tracking and abuse detection)
• Basic technical logs (IP, user-agent, request path) generated by our hosting and database providers

3. Purposes and legal bases (GDPR Art. 6)

• Providing the Service — analysing your recordings, generating automations, displaying reports, running the setup chat. Legal basis: performance of the contract (Art. 6(1)(b)).
• Account & authentication — creating and securing your account. Legal basis: performance of the contract (Art. 6(1)(b)).
• Billing — processing payments, preventing trial abuse, issuing invoices. Legal basis: performance of the contract and legal obligation (Art. 6(1)(b) and (c)).
• Security and abuse prevention — rate-limits, credit-fingerprint checks, error logs. Legal basis: legitimate interests (Art. 6(1)(f)).
• Communication — transactional email (magic links, team invites, receipts). Legal basis: performance of the contract (Art. 6(1)(b)).

4. AI processing of recordings

To generate an automation, your uploaded video is sent to Google's Gemini API (model: gemini-3.6-flash) via the Google Files API. We configure the request so that:

• Videos are uploaded to a short-lived Google Files handle and referenced by URI, not embedded in prompts.
• We use the paid Gemini API tier, under which Google states that inputs and outputs are not used to improve Google's models.
• Files are deleted from Google's Files API automatically after processing (typically within 48 hours).

Google Ireland Limited (with Google LLC as sub-processor in the US) acts as our processor for this step. Transfers to the US are covered by the EU-US Data Privacy Framework and Standard Contractual Clauses.

5. Sub-processors

We rely on the following sub-processors to run the Service:

• Supabase (database, authentication, storage) — EU region.
• Cloudflare (application hosting, edge runtime, DDoS protection).
• Google (Gemini API) — AI analysis of uploaded recordings.
• Stripe — payment processing and subscription management.
• Resend — transactional email delivery (magic links, invites, receipts).
• Lovable — deployment and build infrastructure.

Each sub-processor is bound by a data processing agreement (DPA) and processes personal data only on our instructions.

6. Retention

• Recordings (raw video files): deleted from our storage within 30 days after successful analysis, or immediately upon your request.
• Generated reports and flow JSON: retained as long as your account exists so you can access them; deleted on account deletion.
• Billing records: retained for up to 10 years to comply with German tax and accounting law (§ 147 AO, § 257 HGB).
• Server and error logs: rotated within 30 days.

7. International transfers

Some sub-processors (Google, Stripe, Cloudflare, Resend) are established in the United States. Transfers are safeguarded by the EU-US Data Privacy Framework and/or the European Commission's Standard Contractual Clauses (2021/914).

8. Your rights

Under GDPR you have the right to:

• access your data (Art. 15)
• rectification (Art. 16)
• erasure / "right to be forgotten" (Art. 17)
• restriction of processing (Art. 18)
• data portability (Art. 20)
• object to processing based on legitimate interests (Art. 21)
• withdraw consent at any time, without affecting the lawfulness of prior processing (Art. 7(3))
• lodge a complaint with a supervisory authority (Art. 77)

To exercise any right, email colin@tapeonce.com. You can also delete your account at any time from Settings, which triggers deletion of all associated recordings, reports and profile data.

9. Cookies and analytics

We use only strictly necessary cookies (authentication session, CSRF, consent). We do not run third-party advertising or cross-site tracking. If we introduce product analytics in the future, we will update this policy and, where required, request your consent.

10. Security

Data is encrypted in transit (TLS 1.2+) and at rest. Access to production data is limited to authorised personnel and protected by SSO with strong authentication. We enforce row-level security at the database layer so that users can only read and write their own data.

11. Children

The Service is not directed to individuals under 16. We do not knowingly collect personal data from children.

12. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be announced in-app or by email at least 14 days before they take effect.

13. Contact

Questions or requests: colin@tapeonce.com.