SSD Technologies LLC
boqo Privacy Policy
This policy explains what personal data SSD Technologies LLC, a Delaware limited liability company with its principal office at 447 Broadway, 2nd Floor #3285, New York, NY 10013, United States ("boqo", "we", "us") collects when you use app.boqo.ai and boqo.ai (the "Service"), why, who receives it, how long we keep it, and your rights. We are the controller of this data (the "business" under California law, the "responsable" under Mexican law, and the accountable organization under Canadian law). Contact: [email protected]. Person in charge of the protection of personal information (Quebec): the Managing Member, [email protected].
1. What we collect
| Category | Data | Source |
|---|---|---|
| Account | Email address, sign-in method and authentication ID; if you sign in with Google, the name and profile picture Google shares. Our authentication provider also records sign-in times, IP address and browser details for security. | You; Google; our authentication provider |
| Content you submit | Video links and the public metadata of the linked video (title, channel, duration, thumbnail, most-replayed data); video files you upload (up to 5 GB); brand assets such as logos and font choices; project settings (genre, clip length, caption style, watermark, number of versions). | You |
| Content we produce | Extracted audio; transcripts with word timings, language and speaker numbers; automated moment selections with titles, hooks and scores; rendered clips, versions, thumbnails and posters. | Generated by the Service |
| Technical | Server logs (IP address, requested pages, timestamps, errors); processing records for each job (stage, status, attempts, error text); temporary queue data. | Your browser; the Service |
| Communications | Emails you send us and our replies. | You |
| Payments (only once paid plans exist) | Handled by Stripe: plan, billing status and the last four digits of a card. We never receive full card numbers. | You; Stripe |
Two things worth knowing. To frame clips, our software detects where faces appear in video frames and follows the speaker; it records only position and size within the frame, identifies no one, and stores no facial templates. Transcripts label speakers by number only. We do not collect precise location data, and we do not use your content to train machine-learning models.
Connecting social-media accounts is not offered at present. If we enable it, we will store the account handle, profile details, encrypted proxy credentials and the browser session data needed to act for you, encrypted at rest, and we will update this policy first.
2. Why we use it
| Purpose | Data | Legal basis (where one is required) |
|---|---|---|
| Provide the Service: process your videos, store your projects, show you results | Account, content, technical | Performance of our contract with you |
| Keep the Service secure, prevent abuse, diagnose failures and check output quality; our staff may open a project to do this | Account, content, technical | Our legitimate interest in running a reliable and safe service |
| Send sign-in codes and important notices about your account or this policy | Account | Contract; legitimate interest |
| Handle copyright complaints, legal requests, tax and accounting duties | Account, content, communications | Legal obligation; legitimate interest |
| Marketing emails (none today; you may object without affecting the Service) | Account | Your consent, withdrawable at any time |
We make no decisions about you by automated means that have legal or similarly significant effects.
3. Who receives it
We share personal data only with the providers below, who process it for us under contracts that restrict its use; with professional advisers; with authorities where the law requires; and with a successor if our business is transferred, in which case you will be notified. We do not sell personal data, do not share it for cross-context behavioral advertising, and use no advertising technology.
| Provider | Role | Location |
|---|---|---|
| Clerk, Inc. | Sign-in and account security | United States |
| Railway Corp. | Application hosting, database and job queues | United States (Virginia) |
| Cloudflare, Inc. | Storage of videos, audio, transcripts, clips and brand assets | United States and global network |
| Deepgram, Inc. | Speech-to-text; receives the extracted audio | United States |
| Anthropic, PBC | Automated selection of moments; receives transcript text and video metadata only, never audio or video | United States |
| Network providers | Retrieve videos from links you submit; they see the video link and nothing about you | United States; European Union |
| Stripe, Inc. (once paid plans exist) | Payments | United States |
When you submit a link, we retrieve the video using our own infrastructure; your identity is not sent to the platform hosting it. When you sign in with Google, Google's privacy policy governs what Google collects.
4. International transfers
The Service is hosted in the United States, so your data is transferred there. If you are in the European Economic Area, the United Kingdom or Switzerland, we transfer data under the EU–US Data Privacy Framework (and its UK and Swiss extensions) where the recipient is certified, and otherwise under the European Commission's Standard Contractual Clauses with the UK Addendum or Swiss adjustments as applicable. Where the law requires, for example under Quebec law, we assess such transfers before making them. If you are in Mexico, by using the Service you acknowledge that your data is processed by the providers above in these locations.
5. How long we keep it
| Data | Retention |
|---|---|
| Projects: source video, audio, transcript, clips, versions, brand snapshot, processing records | Until you delete the project. A deleted project can be restored for 7 days, after which its files and records are permanently removed. |
| Brand templates and logos | Hidden from your workspace when you delete them; permanently removed when your account is deleted. |
| Account data | While your account exists. When you delete your account from Account → Security in the app, your projects, clips, brand templates and logos are removed on the next cleanup pass (within a day), any remaining credits are forfeited, your social accounts are disconnected and any subscription is cancelled; we keep the accounting records the law requires, without your email address. If you ask us by email instead, up to 30 days. |
| Server logs | Up to 30 days. |
| Communications, copyright notices and legal records | 3 years, or longer where the law requires. |
| Payment and tax records (once paid plans exist) | As long as tax and accounting law requires. |
Copies of deleted data may persist in backups for up to 30 days before being overwritten.
6. Security
Data is encrypted in transit and at rest by our hosting and storage providers, credentials for any connected account are encrypted with a key held only by us, and access to production systems is limited to the people who operate the Service. No system is perfectly secure; if a breach affects your data, we will notify you and the relevant authority as the law requires.
7. Your rights
Everyone can ask us to access, correct, delete or export their personal data, to restrict or object to its processing, and to withdraw consent, by emailing [email protected] from the address on your account (we may ask for further verification). You can also delete your account yourself at any time from Account → Security in the app. We answer within one month (Europe), 45 days (United States), 30 days (Canada) or 20 business days (Mexico), free of charge unless a request is manifestly excessive. You will not be treated differently for exercising a right.
Europe (EU/EEA, UK, Switzerland and other European countries with similar laws). You also have the right to lodge a complaint with your supervisory authority; in the UK this is the Information Commissioner's Office. Where we rely on legitimate interests, you may object and we will stop unless we have compelling grounds to continue.
United States (California and other states with privacy laws). You may know what personal information we collect, use and disclose, delete it, correct it, and receive it in a portable form. We do not sell or share personal information for targeted advertising, and we use sensitive personal information (such as sign-in credentials) only to provide the Service, so there is nothing to opt out of; we honor Global Privacy Control signals for completeness. You may use an authorized agent, and you may appeal a decision on your request by replying to it. In the last 12 months we have not sold or shared personal information.
Canada. You may access and correct your personal information and withdraw consent, subject to legal or contractual restrictions, and complain to the Office of the Privacy Commissioner of Canada. Quebec residents may also request their data in a structured format, ask us to stop disseminating it, and complain to the Commission d'accès à l'information.
Mexico. You may exercise your rights of access, rectification, cancellation and opposition (ARCO), revoke consent, and limit the use or disclosure of your data by emailing [email protected] with your name, proof of identity and a clear description of the request. We reply within 20 business days and act within 15 business days after a favorable reply. You may complain to the competent authority, currently the Secretaría Anticorrupción y Buen Gobierno. Changes to this notice are published at boqo.ai/privacy.
8. Cookies
The Service sets only the cookies our authentication provider needs to keep you signed in and to protect your session. We use no analytics, advertising or third-party tracking cookies, the app serves its own fonts, and your browser makes no requests to analytics services while you use it. If this changes, we will update this policy and, where required, ask for your consent.
9. Children
The Service is for adults. We do not knowingly collect data from anyone under 18; if we learn that we have, we delete it.
10. Changes and contact
We will notify you of material changes by email or in the Service before they take effect; the effective date at the top shows the current version. Questions and requests: [email protected].