Homemakeroll

Privacy Policy

Last updated: October 2026

This policy explains what personal data MakeRoll collects, why, who we share it with, how long we keep it, and your rights under the GDPR. It covers the website makeroll.app, the MakeRoll app, and the MakeRoll connector for AI assistants.

1. Who we are

MakeRoll is a video editing service that turns long videos into short clips. It is operated by S&T PARTNERS, a simplified joint-stock company (SAS) registered in France, which is the data controller for the data described here. For any question or request about your data, write to privacy@makeroll.app.

2. Data we collect

Depending on how you use MakeRoll:

  • Account. Your email address, your name and, if you sign up with email, a hashed version of your password.
  • Sign in with Google. Your name, email address, profile picture and Google account ID (details in section 5).
  • Sign in with Apple. Your email address (or the private relay address Apple creates for you), your name if you choose to share it, and your Apple ID identifier.
  • Your content. The videos and files you upload or import, and everything we derive from them to run the editor: transcripts, detected scenes and speakers, clip suggestions, projects, templates, brand kit assets and exported videos.
  • Links you import. When you import from a link (YouTube, Google Drive, Dropbox and others), the address you gave us and the video we fetch from it.
  • Connected accounts. If you connect YouTube, TikTok or Instagram to publish, the account details and permissions described in sections 5 and 6, and a record of the posts you publish.
  • Billing. Your plan, subscription status and invoices. Payments are handled by Stripe; we never see or store your card number.
  • Usage and technical data. Which features you use, error reports, and server logs (IP address, browser type, timestamps), used to operate, secure and improve the service.
  • Messages. What you send us when you write to support, and the emails we send you (account, billing, and warnings before deletion).

3. Why we use it (legal bases)

  • To provide the service (performance of our contract with you): your account, importing, transcribing and editing your videos, suggesting clips, exporting, and publishing when you ask us to.
  • To bill you (contract and legal obligation): subscriptions, invoices, and accounting and tax records.
  • To write to you about your account (contract): sign-in and password emails, receipts, and warnings before free-plan videos are deleted.
  • To keep the service secure (legitimate interest): preventing abuse, fraud and bots, and investigating errors.
  • To understand and improve the product (legitimate interest): aggregate statistics on which features are used.
  • To comply with the law (legal obligation): accounting rules and valid requests from authorities.

We do not sell your personal data, we do not use it for advertising, and we do not use your videos or transcripts to train AI models.

4. How AI processes your videos

Transcription, scene detection and video rendering run on GPU servers operated by Modal. To suggest clips, we send the transcript and title of your video to a large language model through OpenRouter, which passes the request to the model provider. The model only returns suggestions: you decide what to keep, edit and publish, and no decision with legal or similarly significant effects on you is made automatically.

5. Google user data (Sign in with Google and YouTube)

Sign in with Google. If you choose it, Google shares your name, email address, profile picture and Google account ID with us. We use them only to create your MakeRoll account, sign you in, and show your name and picture in the app. For sign-in we do not request access to Gmail, Drive, your contacts or any other Google data.

YouTube. MakeRoll uses YouTube API Services. If you connect a YouTube account, we access your channel identity (channel name, ID and avatar, shown in the app so you can tell connected accounts apart) and upload the videos you choose to publish to your channel on your behalf, with the title, description and privacy setting you chose. We do not read your existing videos, comments or analytics. By using the YouTube features you also agree to the YouTube Terms of Service.

Limited Use. MakeRoll's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In practice, for all data we receive from Google:

  • we use it only to provide or improve user-facing features in MakeRoll: signing you in, showing the connected channel, and publishing the videos you choose;
  • we do not transfer it to anyone, except as needed to provide those features, for security, to comply with the law, or as part of a merger or acquisition after telling you;
  • we never use it for advertising, including personalised, retargeted or interest-based advertising;
  • we never sell it, never transfer it to advertising platforms, data brokers or other information resellers, and never use it to assess creditworthiness or for lending;
  • no one at MakeRoll reads it, unless you ask us to, it is necessary for security (such as investigating abuse), the law requires it, or it has been aggregated and anonymised for internal operations;
  • we never use it to develop, improve or train generalised AI or machine-learning models.

Storage, protection and sharing. Google user data is stored in our database on servers hosted by OVHcloud in France, and protected as described in section 11 (encrypted connections, access limited to the people who run MakeRoll, YouTube tokens encrypted at rest with AES-256-GCM). As for every account, three providers from section 8 also receive part of it to run the service: Brevo (your email address, to send you account emails), Stripe (your email address, for billing if you subscribe) and PostHog (your email address and name, to link product analytics to your account). No other Google user data is shared with anyone: your profile picture, Google account ID, YouTube channel details and tokens stay with us, and nothing we receive from Google is ever sent to AI providers. When you publish to YouTube, the video goes to Google itself, on your instruction.

Retention and deletion. Sign-in data is kept while your account exists and deleted with it. YouTube tokens and channel details are deleted as soon as you disconnect the channel in Settings or delete your account, and you can also remove MakeRoll's access from your Google account permissions at any time. To have any Google user data deleted, write to privacy@makeroll.app; we delete it within one month at the latest.

Google's own handling of your data is described in the Google Privacy Policy.

6. Connected social accounts (YouTube, TikTok, Instagram)

MakeRoll lets you connect social accounts to publish clips. We only request the permissions the publishing features need, and we access, collect, store, and use the data below solely to provide those features, never for advertising, and we never sell it.

TikTok. If you connect a TikTok account, we access your basic profile (display name and avatar), read your creator posting settings (such as who can view your videos and whether comments are allowed, so the publish form reflects them), and post the videos you choose to publish on your behalf.

Instagram. If you connect an Instagram professional account (Business or Creator), we access its identity (account ID, username and profile picture, shown in the app so you can tell connected accounts apart) and publish the videos you choose as Reels on your behalf, with the caption and hashtags you wrote. Reels published this way are always public. We do not read your existing posts, messages, comments or insights.

Tokens and retention. The access tokens that authorize these connections are stored encrypted at rest and are deleted when you disconnect the account in Settings or delete your MakeRoll account. We keep a record of posts you published through MakeRoll (platform, post ID, status) as your publishing history. If you remove MakeRoll from your Instagram account, Instagram tells us and we delete the tokens right away; if you ask Instagram to have your data deleted from MakeRoll, we delete the connection, its tokens and its publishing history, and give you a confirmation code with a page where you can check that it was done.

Revoking access. Beyond disconnecting in the app, you can revoke MakeRoll's access at any time from the platform side: for Google/YouTube via the Google security settings page (also reachable at myaccount.google.com/permissions), for TikTok via your TikTok privacy settings, and for Instagram via Apps and websites in your Instagram settings. Questions or complaints about how we handle connected-account data: privacy@makeroll.app.

7. AI assistants

MakeRoll can be connected to AI assistants such as Claude or ChatGPT. You approve each connection on a MakeRoll consent screen; the assistant can then act on your MakeRoll account on your instructions (for example import a video, find clips or edit one). What the assistant's provider does with your conversation and the data it reads is governed by that provider's privacy policy. You can disconnect it at any time from the assistant, or ask us to revoke its access.

8. Service providers

We share personal data only with the providers below, each bound by a data processing agreement and only for the purpose listed:

  • OVHcloud (France): hosting of the application and its database.
  • Cloudflare: storage and delivery of your videos and exports (R2), DNS, and bot protection on sign-in forms (Turnstile).
  • Modal (United States): GPU processing for transcription, scene detection and rendering.
  • OpenRouter (United States) and the AI model provider it routes to: transcripts and video titles, to suggest clips.
  • Stripe: payments, subscriptions and invoices.
  • Brevo (France): account and billing emails.
  • PostHog (hosted in the EU): product analytics, linked to your account (ID, email address and name).
  • Sentry: error monitoring.

Google, Apple, YouTube, TikTok and Instagram (Meta) receive data only when you choose to sign in with them or connect an account, as described above. We may also disclose data when the law requires it, or to the buyer of the business, who would remain bound by this policy; you would be told beforehand.

9. International transfers

Our servers and storage are located in the European Union where possible. Some providers above process data in the United States, notably Modal, OpenRouter and model providers, Stripe, Sentry and Cloudflare. These transfers rely on the EU-US Data Privacy Framework where the provider is certified, or on the European Commission's standard contractual clauses.

10. How long we keep your data

  • Free plan. Imported videos, with their clips, transcripts and exports, are deleted automatically 7 days after import. We email you 48 hours before.
  • Paid plans. Your content is kept as long as your account is active, until you delete it.
  • Account deletion. When you ask us to delete your account, we delete it together with all its content (videos, clips, projects, transcripts, exports and connected accounts) and cancel any subscription, within a few days and at the latest within one month.
  • Backups. Database backups are kept for 14 days, so deleted data disappears from them within 14 days.
  • Billing records. Invoices and accounting records are kept for 10 years, as French law requires.
  • Logs and error reports. Kept for a limited period, for security and debugging only.

11. Security

All traffic is encrypted with HTTPS. Passwords are stored hashed, never in clear text, and the tokens that link your social accounts are encrypted at rest (AES-256-GCM) and only used on our servers. Access to production systems is limited to the people who run MakeRoll. Your media files are served from links that contain a long random key: anyone who obtains such a link can view that file. If a data breach puts your rights at risk, we notify the CNIL within 72 hours and inform you without undue delay.

12. Your rights

Under the GDPR and French law you can access your data, correct it, delete it, receive a copy in a portable format, restrict or object to its processing, withdraw any consent you gave, and set instructions for what happens to your data after your death.

To exercise any of these rights, email privacy@makeroll.app from the address on your account. We answer within one month. You can also lodge a complaint with the CNIL, the French data protection authority.

13. Children

MakeRoll is not intended for children under 15. We do not knowingly collect their data; if you believe a child has created an account, contact us and we will delete it.

14. Cookies and browser storage

We use a strictly necessary session cookie to keep you signed in, and Cloudflare Turnstile checks our sign-in forms for bots. Your browser also stores preferences such as your language and editor settings. For product analytics, PostHog keeps a random identifier in your browser's local storage to count visits and feature use; it does not record your screen, your keystrokes or your clicks automatically. We use no advertising cookies or ad trackers.

15. Changes to this policy

When we change this policy, we update the date at the top. If a change materially affects how we use your data, including Google user data, we will email you before it takes effect.

Contact

privacy@makeroll.app