ReadyForm

Privacy policy

Who we are

ReadyForm (operated by The AI Agency) is the data controller for your account data and the processor for the video content you upload. Contact: info@theaiagency.ae.

What we process and why

  • Account data (email, hashed password, account metadata) — to provide the service (contract).
  • Uploaded video and derived data (transcripts, EDLs, renders) — to edit your video (contract).
  • Security & audit logs (actions, IP for max 30 days) — security and abuse prevention (legitimate interest).
  • Product analytics (via PostHog, EU) — only with your opt-in consent.
  • Feedback you send us (your message and optional rating) — to improve the product (legitimate interest). Stored in the EU and deleted with your account, and not shared with anyone outside it.
  • Session recordings (via PostHog, EU; how the app is used on screen) — a separate opt-in, off unless you choose it. Typed values are masked and your uploaded video is blocked from the recording.

We never train AI on your uploaded content. We do not use your material, results, name or logo for ReadyForm's own marketing unless you separately and explicitly agree — it is never a condition of using the service. See clause 3 of the Terms of Service and clause 20 of the DPA.

Data residency

Account data and video files are stored in the EU (Supabase Frankfurt, Hetzner DE/FI). Transcription runs locally (no US audio API). Only transcript text and thumbnails — never raw video — are sent to AI providers. We do not use an external email marketing service. Account emails (confirming your address, resetting your password) are sent through Supabase. Emails about your trial and subscription are sent through Resend, in the EU (Ireland). Both are on the list below. The full list of sub-processors is public.

How long we keep it

  • Source uploads: 90 days (180 for Agency), and deleted within 30 days after you close your account.
  • Renders: 30/60/90 days by plan.
  • Previews: 7 days. Audit logs: 1 year. IP addresses: anonymized after 30 days.
  • Feedback you send us: 24 months, or sooner if you delete it or close your account.
  • EDLs: kept while your account is active. Billing records: 7 years (legal requirement).

Your rights

You can access, export, correct, and delete your data. Export via Account → “Download my data”; deletion via Account → “Delete account” (7-day grace, then a permanent cascade delete across database and storage). If you cannot reach that screen — for example because your account has no active plan — email info@theaiagency.ae and we will do it for you.

Cookies

We use strictly necessary cookies (auth/session). Everything else is optional and off until you opt in via the consent banner, where analytics and session recordings are two separate choices, both provided by PostHog (EU). Those optional cookies are set only after you opt in, and only for those purposes. You can change or withdraw either at any time via Cookie preferences on the Account page.

Contact & complaints

Questions: info@theaiagency.ae. You may also lodge a complaint with your local data protection authority (in NL: Autoriteit Persoonsgegevens).

Last updated: 2026-08-23.