Privacy policy
Last updated: 2026-10-18
1. Controller
Abdul Razak MusahRecordlyPro
Hutäcker 17
91347 Aufseß
Germany
support@recordlypro.com
+49 151 68495881
2. Hosting and server location
All data (account, recordings, transcripts, analytics) is processed on servers in Frankfurt am Main, Germany. Hosting provider: Hostinger International Ltd., 61 Lordou Vironos Street, 6023 Larnaca, Cyprus. Connections are TLS-encrypted.
3. What we process
- Account: email address, name (optional), password hash, language, plan, sign-up time. Legal basis: Art. 6 (1) (b) GDPR.
- Recordings and derived data: video files (screen, camera, audio), click positions, transcripts, captions, chapters, generated texts and images. They stay in your account until you delete the video or your account; then they are deleted. Art. 6 (1) (b) GDPR.
- Share pages (shared links): when someone watches a shared page we set a first-party analytics cookie with a random viewer id and store watch time, playback position, device type, referrer and country (derived from the IP address; the IP itself is not stored). There are no tracking pixels and no third-party scripts on these pages. Art. 6 (1) (f) GDPR; the interest is audience measurement for the video owner. Comments and lead forms store what the viewer enters, for the video owner.
- Server logs: technical error logs without IP addresses, 30 days.
- Payments: via Stripe Payments Europe Ltd., Dublin. We store no card data, only the customer and subscription ids.
4. Speech recognition and AI
Speech recognition (Whisper) runs on our own server; audio does not leave it for that purpose. For titles, summaries, chapters and platform captions the transcript text is sent to a language-model provider: OpenAI Ireland Ltd., Dublin, Ireland (only when you use these AI text features). No audio or video is transmitted. You can avoid this by writing those texts yourself.
5. Publishing connections
When you connect an account (YouTube, TikTok, Meta, LinkedIn, X, Bluesky, Pinterest) we store the access token encrypted and use it only for posts you trigger. You can remove the connection at any time under Connections. The platform's own privacy policy applies to processing there. Use of YouTube API Services is additionally subject to the Google Privacy Policy.
6. Cookies
A session cookie for login, a first-party analytics cookie on share pages (random viewer id, see section 3) and, for password-protected videos, an unlock cookie. All cookies are set by our own domain. No third-party tracking, no tracking pixels, no advertising cookies.
7. Email
Transactional email (confirmation, login link, password, invoices) via Hostinger International Ltd. (mail servers in the EU). No newsletter without consent.
8. Retention
Account data, recordings, transcripts, generated texts, analytics, leads and comments are kept until you delete the video or your account. Deleting the account deletes everything attached to it; deleted videos are removed immediately, backups within 30 days. Access tokens of connected platforms are deleted when you disconnect. Invoice data is kept for 10 years (§ 147 AO).
9. Your rights
Access, rectification, erasure, restriction, portability, objection (Art. 15–21 GDPR) and the right to complain to a supervisory authority; competent: Bayerisches Landesamt für Datenschutzaufsicht, Ansbach. You can delete your account yourself under Settings.