Privacy Policy

What we collect

Account information. When you sign in, our authentication provider (Clerk) shares your name, email address, and sign-in method with us. We do not see or store your password.

Content you upload. Your ad video files, the landing page URLs you submit, and any settings you choose for a check (platform, objective, disclosures).

Content we derive. To produce your report, we generate working artifacts from your inputs: extracted video frames, audio transcripts, screenshots of the landing pages you submit, and the findings, evidence, and revision briefs in your reports.

Usage data. Check counts against your plan limit, run status and timing, and standard technical logs (IP address, browser type, timestamps) needed to operate and secure the service.

We do not collect payment information during the beta. We do not use advertising trackers or sell data to anyone.

How we use your data

We use your data for exactly one purpose: running the checks you request and showing you the results. Concretely, that means storing your uploads, analyzing them together with your landing page, generating your QA report and revision brief, enforcing plan limits, and keeping the service secure and reliable.

AI processing and model training

Your videos, frames, transcripts, and landing-page captures are analyzed by large language models to produce findings. Your content is not used to train our models or anyone else's. Our AI provider (Google Cloud Vertex AI) processes this content under enterprise terms that prohibit using customer data to train their models.

Who processes your data

We use a small set of infrastructure providers, each processing only what their role requires. We do not share your content with any other third party, and we never share one customer's content with another.

• Amazon Web Services (US West)

  File storage and compute — Uploaded videos, derived artifacts, reports, database

• Google Cloud (Vertex AI)

  AI analysis — Video frames, transcripts, landing-page captures

• Clerk

  Authentication — Name, email, sign-in method

• Vercel

  Web hosting — Standard web request logs

Security

Your content is encrypted in transit and at rest. Access to production systems is restricted to the operator of the service. Uploads go directly to private cloud storage via short-lived signed URLs, and your reports are private to your account unless you explicitly create a share link.

Retention and deletion

Your uploads, artifacts, and reports are retained while your account is active so you can revisit past checks. When you delete a run, it is immediately removed from your account and is no longer accessible through the product. You can request permanent deletion of the underlying files for any run, or deletion of your entire account and all associated data, by emailing hello@preflite.info; we complete deletion within 30 days and confirm when done. Operational logs are retained for 90 days. Self-serve permanent deletion and data export are on our roadmap; until then, email requests are honored at the same standard.

Your rights

You can request a copy of your data, correct your account information, or request deletion at any time via hello@preflite.info. If you are in a jurisdiction with statutory data rights (such as the GDPR or CCPA), we honor access, portability, correction, and erasure requests accordingly.

Cookies

We use only essential cookies: authentication session cookies from our sign-in provider and a theme preference. No advertising or cross-site tracking cookies.

Children

Preflite is a business tool and is not directed at anyone under 16.

Contact

Questions about this policy or your data: hello@preflite.info