Private beta · 2026-10-06-draft
Privacy notice
These draft notices describe the current beta. They are not a lawyer-reviewed final policy. Contact the operator through your beta invitation for questions or requests.
This notice describes data used for sign-in, video editing, payments and safe operation of the beta.
01Information we process
We process your email and account profile, uploaded footage and logos, briefs, brand kits, revision requests, generated videos and related artifacts. We also process credit-ledger entries, payment identifiers and amounts, job events and masked diagnostic logs, invitations, email-delivery records and legal acceptance version and time.
02Editing and service providers
Videos are edited with Claude-based tools in isolated, restricted Docker workers. Content required for an edit can be available to Anthropic's Claude service. Razorpay handles payment details and returns identifiers needed for verification and accounting; koup does not collect card numbers through its own forms. Sign-in codes and transactional emails (receipts, invitations, video updates, deletion confirmations) are sent over SMTP from no-reply@getkoup.com.
03Trial protection
At sign-in we capture the client IP, a network range (/24 for IPv4 or /64 for IPv6), a browser fingerprint and a first-party device identifier. A shared network range on its own never denies a free trial; it only counts together with a matching browser or device. The API stores salted SHA-256 hashes to detect repeated trial claims, alongside decisions and linked account IDs; trial administration does not show raw IPs. The web authentication session retains sign-in signals server-side while needed for authentication. Hashing is pseudonymisation, not a promise of anonymous data.
04Retention
Default windows are source footage: 30 days after project completion; outputs: 90 days; logs: 30 days; failed or abandoned uploads: 24 hours. These are configurable. An administrator can extend project retention and the daily sweep does not delete objects referenced by an active job. Expired objects are marked unavailable. Trial matching uses device and fingerprint history, normalised email, and a 90-day IP/network-range window; media retention does not automatically erase these abuse-prevention or accounting records.
05Your choices
Account offers data export (JSON and available download links), non-essential email preferences, and account deletion confirmed through a link sent to your email. Deletion removes footage, outputs and brand kits, revokes sessions and anonymises the user record; ledger and payment records needed for accounting remain with identifying user links replaced. Essential authentication, payment and account notices may still be sent. Contact the beta operator through your invitation for questions about access, correction or provider processing.
06Security and policy status
Presigned object links expire; access is user-scoped, worker containers are ephemeral and logs mask credentials. These controls reduce risk, not eliminate it. Do not upload highly sensitive material to the beta. The operator's legal identity, applicable jurisdiction, provider agreements and statutory accounting retention periods require legal review before a final privacy notice is adopted.