Privacy policy

Essential launch data flows

Account and project data

Clerk handles account sign-in. Convex stores account details, listing facts, narration, photo references and retained files, generation status, share links, contact profiles and visitor inquiries. The owner must confirm the production settings and hosting locations before publishing this policy.

Voice and music

Narration text, language and voice settings go directly to ElevenLabs to produce speech and timing data. Audio is retained in Convex storage and processed by the render worker. The launch Review uses supplied music tracks or retained media. Selecting a supplied track does not request new music generation.

Rendering and media storage

Our render worker receives the selected property images, clips, narration and branding. Production uses HeyGen HyperFrames to render prepared visual compositions with their required images, clips and branding, including contact text when selected. The worker assembles final audio and video and stores media in Cloudflare R2. Media links use the app's authorization and signing routes.

Optional AI tools

When you request AI narration suggestions, photo changes or generated motion, AtlasCloud receives the selected text, listing facts or images needed for that action. Moving an original photo in the renderer does not itself request AI motion generation.

Public links, inquiries and email

Anyone with a valid share link can view its published video and contact details. A visitor inquiry saves the submitted name, email, message and contact or visit preference in the owner's inbox. When delivery is enabled and configured, Resend receives the recipient and notification content. Optional visitor statistics require the page's statistics choice; they are separate from inquiries.

Retention still needs owner review

After verified output is saved, the cloud-render code requests deletion of its dedicated HeyGen render and uploaded source asset. Cleanup can remain pending and require retry. API deletion does not prove physical erasure; backup retention and output-link lifetime are not specified here. Revoking a share link closes that link but retains its inquiries. The owner must confirm retention periods, provider terms, hosting locations and a privacy contact before publication.