What we store
- Your email address, to sign you in and to tell you when a video is ready.
- Sign-in codes: only a hashed copy, valid for 10 minutes, and a sign-in cookie that keeps you signed in for up to 30 days.
- Your uploaded videos and logos. Logos are kept in your logo library so you can use them again, until you delete them.
- Your results: the finished video, a before-and-after copy and a still picture, plus what you told us about the placement (the object, “Where on it?”, and the spot you tapped).
- Basic records of your jobs (status, times, the free videos you used) and when you confirmed that you have the rights to your video and logo.
- Our own usage statistics: the steps people take in the app (signed in, uploaded a video, pressed Brand it, downloaded the result). They are kept in our own database with a coded form of your email, never the address itself, and deleted after 180 days.
Your IP address is used for a short time to stop abuse of the sign-in form.
Where it is stored and processed
- Cloudflare runs the website. Account data is kept in Cloudflare D1, and videos, logos and results in Cloudflare R2.
- Our own GPU server downloads your video and logo while it makes the result, and keeps working copies there during processing.
Services that help us
- OpenAI API. To understand where the logo should go, we send it one frame of your video and the words you typed. Our quality check also sends a few sampled frames of the result to check that the logo looks right. OpenAI processes them for us through its API.
- Resend sends our emails (sign-in codes and “your video is ready”), so it receives your email address and the message.
- Google Fonts serves the font of our pages, so your browser asks Google for it like for any web font.
Piligrim Live, the Mac and Windows app
Your camera picture stays on your computer. The app works on it there and never sends us pictures, video or sound.
When you sign in, we keep your computer's name, so you can tell your computers apart, and the app version. The app checks in with piligrim.dev about every 15 minutes, so we also keep when it last did.
Crash reports. When the app or its engine stops working, the app sends us a short text report: what happened, the app's last log lines, and the app and system versions. The report never includes pictures or video, and the name of your home folder is removed. We keep crash reports for 90 days.
How long we keep it
We aim to delete your source videos 7 days after the result is ready, and results 30 days after they are made. Until automatic deletion is in place, we delete them on request (see below). Your email and account records stay while you have an account.
What we never do
- We do not sell your data, or share it with anyone except the services above, which help us run Piligrim.
- We do not use third-party analytics, advertising or tracking tools.
- We do not publish your videos. A result becomes public only if you turn on its share link, and you can turn it off again.
During the beta we may look at a video or result by hand to check its quality, or when we review content under our Terms.
Your choices
You can ask for a copy of your data, a correction, or deletion of your account and all your videos, logos and results. Write to hello@piligrim.dev from the email you sign in with.
Contact
Questions about privacy: hello@piligrim.dev.