Privacy Policy

1. Scope

This Privacy Policy explains how Ecom Reserve (“Company,” “we,” “us”) collects, uses, shares, and protects personal information in connection with Hidden Blade, including the website at hiddenblade.io, the desktop plugin, account and billing flows, and related support channels (together, the “Services”). By using the Services, you acknowledge this Policy. Capitalized terms not defined here have the meaning in our Terms of Service.

2. Information we collect

We collect information in the following categories:

• Account and identity. Email address, authentication codes or tokens, account identifiers, and sign-in metadata needed to create and secure your account.
• Billing and transactions. Subscription tier, renewal status, payment status, invoices or receipts metadata, and limited billing identifiers returned by our payment processor. We do not store full payment card numbers on our systems; card data is handled by the payment processor.
• Usage and entitlements. Plan limits, videos or minutes used, feature flags, device or session identifiers tied to license checks, and similar operational metrics for enforcement and product operation.
• Content you submit. Media files, audio, transcripts, captions, headlines, project metadata, and related inputs you choose to process through the plugin or Services.
• Support communications. Ticket contents, attachments you upload, and email replies associated with support requests.
• Technical and diagnostic data. IP address, browser or app version, OS version, approximate location derived from IP, timestamps, error logs, and crash or diagnostic reports if generated by the client or servers, to operate, secure, and improve the Services.
• Website analytics. If enabled on the marketing site, aggregated or pseudonymous analytics about page views and referrals. We do not sell personal information.

3. How we use information

We use personal information to:

• provide, authenticate, and maintain accounts and license access;
• process subscriptions, renewals, upgrades, and cancellations;
• run product features (including transcription, timeline generation, captions, and related processing);
• enforce plan limits, prevent abuse, and protect security;
• respond to support requests and service announcements;
• improve reliability, quality, and performance of the Services;
• comply with law, enforce agreements, and defend legal claims; and
• communicate transactional notices (billing, security, material product changes). Marketing emails, if any, will include an unsubscribe where required.

4. Accounts and authentication

Sign-in uses email-based authentication (such as one-time codes or magic links) facilitated by our authentication provider. Device pairing for the plugin may use short-lived codes and tokens. Keep your email account and codes confidential. We may invalidate sessions if we detect compromise or abuse.

5. Billing data

Payments are processed by a third-party payment processor. The processor receives payment details you submit at checkout and provides us with confirmation, customer and subscription identifiers, and status needed to fulfill your plan. Billing portal links may open on the processor’s hosted pages. Our Refund & Cancellation Policy describes non-refundability of purchases.

6. Content processing

Media and transcripts you submit are processed to deliver the product features you request. We do not sell your content. We may use subprocessors (for example, cloud hosting, storage, and AI or media processing providers) under contractual restrictions to perform that processing. Do not submit content you lack rights to process.

7. Analytics and diagnostics

We may collect usage counts, feature telemetry, and crash or error diagnostics necessary to operate entitlements, debug failures, and improve the Services. Where practicable, we prefer aggregated or pseudonymous forms. You can limit some website analytics via browser controls; core operational logs required for security and billing may still be retained.

8. How we share information

We share personal information only as needed to operate the Services:

• Service providers / processors. Hosting, database and authentication providers, payment processing, email delivery, analytics, customer-support tooling, and media or AI processing vendors, each under instructions to process data for us.
• Legal and safety. When required by law, subpoena, or government request, or to protect rights, safety, and integrity of the Services, users, or the public.
• Business transfers. In connection with a merger, acquisition, financing, or sale of assets, subject to appropriate confidentiality and notice where required.
• With your direction. When you instruct us to share information (for example, collaborating features if offered).

We do not sell personal information as that term is commonly understood, and we do not share it for cross-context behavioral advertising for compensation.

9. Retention

We retain account and billing records for as long as your account is active and thereafter as needed for legal, tax, accounting, dispute, and security purposes. Content submitted for processing is retained as needed to complete the job, provide the feature, troubleshoot, and meet retention requirements; we may delete or anonymize operational content sooner when no longer needed. Support tickets are retained for service history and quality. Retention periods vary by data type and legal need.

10. Security

We implement administrative, technical, and organizational measures appropriate to the nature of the data (including encryption in transit where standard, access controls, and least-privilege practices). No method of transmission or storage is fully secure; you use the Services at your own risk regarding residual security risk.

11. International transfers

We and our processors may process and store information in the United States and other countries. Those countries may have different data- protection laws than your home jurisdiction. Where required, we use appropriate transfer mechanisms (such as contractual clauses) with processors.

12. Children’s privacy

The Services are not directed to children under 16 (or the higher age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us information, contact Support so we can delete it.

13. Your rights

Depending on your location, you may have rights to access, correct, delete, or export certain personal information; to object to or restrict certain processing; or to withdraw consent where processing is consent-based. To exercise rights, open Support in the plugin or submit a ticket at hiddenblade.io/account from the email associated with your account. We may verify your identity before acting. You may also have the right to lodge a complaint with a supervisory authority. We will not discriminate against you for exercising rights available under applicable law.

14. Third-party sites and hosts

The Services may link to third-party sites or rely on host applications (such as DaVinci Resolve). Their privacy practices are governed by their own policies. We are not responsible for third-party practices.

15. Changes to this Policy

We may update this Privacy Policy by posting a revised version with a new “Last updated” date. Material changes may also be communicated in-product or by email when appropriate. Continued use after the effective date constitutes acceptance of the updated Policy where permitted by law.

16. Contact

Privacy questions and requests: use Support inside the Hidden Blade plugin, or sign in at hiddenblade.io/account and open a support ticket.