Privacy Policy

Off Camera (“we”, “us”) runs offcamera.co and the Off Camera app. For the personal data in this policy we decide why and how it is used, which makes us its “controller” under laws like the EU and UK GDPR. You can reach us at team@offcamera.co.

If you use Off Camera for a company or a client, you’re responsible for having the right to give us any personal data in what you upload, such as photos of people or chats with them.

We don’t ask for sensitive data such as health details, religion or government IDs, so please keep it out of your uploads and prompts. We don’t use face or voice recognition to identify anyone.

• To run Off Camera: create your account, read your website, write and make your posts, export and store them, and show them to you.
• To post for you: send the posts you schedule to Post for Me, and show you whether they went out and how they did.
• To bill you: through Stripe, and to apply your plan’s limits and AI credits.
• To email you: sign-in and password emails, notices about your account or billing, and a few product emails you can switch off (see section 16).
• To keep Off Camera safe: rate limits, bot checks, blocking abuse and keeping security records.
• To improve Off Camera: counts and product events in our own database, so we can see where people get stuck. Only we look at them. They are never sent to an analytics company.
• To save repeat work: when we read a website, we keep the read (its public pages, store listing and reviews, plus any text you pasted with it) and the profile we built from it. If anyone enters the same site with exactly the same content later, we reuse it instead of reading again. This copy isn’t tied to your account, and your later edits to your brand profile are never in it.
• To follow the law and our terms: keep tax and accounting records, answer lawful requests, and handle disputes.

We don’t sell your personal data, we don’t share it for advertising, and we don’t train AI models on it. We don’t make decisions about you based only on automated processing that have legal or similarly significant effects on you.

If the EU or UK GDPR applies to you, these are our legal reasons for using your data:

• Contract: to give you what you signed up for: your account, your posts, posting to accounts you link, and billing.
• Legitimate interests: keeping Off Camera secure, preventing abuse, counting visits and product events, product emails you can switch off, reusing website reads, improving Off Camera and defending legal claims. We weigh these against your rights, and you can object (see section 14).
• Consent: where we ask for it. You can withdraw it at any time, and that doesn’t affect what we did before.
• Legal obligation: keeping tax and accounting records and answering lawful requests.

We use a small number of companies to run Off Camera. Each gets only what it needs for its job. Stripe and Google also act under their own privacy policies for their part, such as fraud checks and your Google account.

We also share data in these cases:

• The platforms: posts you publish, or that we post for you, go to TikTok, Instagram or YouTube and become public under their rules.
• Affiliates: if you signed up with someone’s referral link, that person sees a hidden version of your email (like sa•••@gmail.com), your plan, whether you’re paying, and what they earned from it. Never your whole email, your name or anything you make.
• The law: if the law requires it, or to protect people, our users or Off Camera, we may share data with courts, police or regulators.
• A sale: if Off Camera is sold or merged, your data may move to the new owner, who must keep the promises in this policy. We will tell you before that happens.
• When you ask: anyone else, only if you tell us to.

Off Camera uses AI providers to do the work you ask for. We don’t train AI models on your data ourselves. Here is what each provider gets, and what its terms with us say:

• Anthropic (Claude) reads your website and writes your posts. Under Anthropic’s commercial terms, it may not train its models on what we send it.
• fal.ai runs the models that make AI video, images and voices. It only gets something when you choose to make one and confirm its credit cost. Under fal’s terms, it may use what we send only to provide its service, apart from anonymized or combined usage data. Some of these models are made by other companies, such as ByteDance (Seedance video), OpenAI (GPT Image), ElevenLabs (voices) and Topaz (sharper video), and fal may pass your request to the model’s maker to run it.
• ElevenLabs turns script text into speech. Its standard terms let it use what it receives to improve its services and models unless the customer opts out.

Transcribing what is said in a video happens on our own server, not at an outside company. We never send your password, payment details or account email to an AI provider.

You can link TikTok, Instagram and YouTube accounts so your planned posts go out by themselves. Linking goes through Post for Me, a posting service. You sign in on TikTok’s, Instagram’s or Google’s own page and give Post for Me’s app permission to post for you and to read your posts’ numbers. Post for Me keeps that sign-in. We never see your password and we don’t store the platform’s access tokens ourselves.

• What we send: the posts you schedule (video or photos, caption and title), when to post them, and whether a post was made with AI, so the platform’s AI label can be switched on.
• What we get back: the account’s handle, whether it is still connected, whether each post went out, and the views, likes, comments and shares of posts that went out through Off Camera. We ask for these numbers for about two months after each post.
• What we don’t do: we don’t read your messages, followers or other posts, and we don’t post anything you didn’t schedule.

YouTube

Linking a YouTube account uses YouTube API Services, through Post for Me. By linking one, you agree to be bound by the YouTube Terms of Service (opens in a new tab). The Google Privacy Policy (opens in a new tab) explains how Google handles your data.

How to remove access

• Unlink an account on the Accounts page in Off Camera. We tell Post for Me to disconnect it, and nothing more is posted.
• For YouTube, you can also remove access on Google’s security settings page (opens in a new tab).
• For TikTok and Instagram, you can also remove access in the app’s own settings, in its list of connected apps.

When you unlink, we stop posting and stop collecting new numbers. The account’s name and the numbers we already have stay next to your posts until you delete those posts or your account. To have them deleted sooner, email us and we will delete them within 7 days. Posts already published stay on the platform until you delete them there.

If you choose “Continue with Google”, we ask Google only for the openid, email and profile permissions. We use your email address to find or create your account and your name to greet you, and we check that Google has verified your email. Google may also share your profile picture and Google account ID with us; we don’t keep them. We never get your Google password, and no access to your Gmail, Drive, contacts or anything else.

Off Camera’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy (opens in a new tab), including the Limited Use requirements. We never use information from Google for advertising, never sell it, and never use it to train AI models.

You can remove Off Camera’s access on Google’s security settings page (opens in a new tab). Your Off Camera account stays; use “Forgot password” to sign in with a password instead.

We set only the cookies Off Camera needs to work, so we don’t ask for consent for them:

Your browser also keeps a few settings on your device, such as which brand you had open, the email you last signed in with, light or dark mode, whether you paused motion, the plan you picked before signing up and unsaved drafts in some editors. They stay on your device.

No trackers

We don’t use advertising cookies, tracking pixels or third-party analytics. Our site’s security settings only let our own scripts run. Because we don’t sell or share data for ads, there is nothing for Global Privacy Control or Do Not Track signals to switch off.

How we count visits

Each page sends us its address and, on your first page, the site that sent you, a link’s tag and whether you’re on a touch screen. To count each person once a day, we mix your IP address and browser name with a random code that changes every day and keep only the scrambled result. When the day ends, the code and the scrambled results are deleted. Only totals stay, such as how many people opened a page.

Videos from other sites

If you open a trending video to watch it in full inside Off Camera, it plays in TikTok’s, YouTube’s or Instagram’s own player. That company may set cookies and collect data under its own privacy policy. YouTube videos play in YouTube’s privacy-enhanced mode. Stripe’s checkout and Google’s sign-in page are on their own sites, under their own cookie rules.

Off Camera is hosted in the United States, and most of the companies above are based there too. If you live elsewhere, your data is sent to and processed in the US. Where the EU or UK GDPR applies, we rely on the safeguards in our providers’ data terms, such as the EU Standard Contractual Clauses or the EU-US Data Privacy Framework, where they offer them.

You can delete your account yourself in Settings, under Account. It takes effect at once: your login goes, and so does every brand only you belong to, with its posts, exports, uploads and accounts. We tell Post for Me to disconnect your linked accounts. Brands you share with someone else stay for them.

A few copies can stay for a while after that:

• Database backups, which are deleted after 30 days.
• Some working files from AI Studio clips, prank reels, remixes and talking hooks, which our clean-up doesn’t reach yet. Deleting an AI Studio clip in the app also only hides it. Email us and we will delete these files within 30 days.
• Records we must keep by law, such as billing records.

Deleting your account also cancels a paid plan at once (see our Terms). You can also delete single posts and brands in the app, and you can ask us to delete anything else by emailing team@offcamera.co from the address on your account.

We protect your data with:

• encrypted connections (HTTPS) on every page, with browsers told to always use them;
• passwords stored only as scrambled hashes (scrypt), and sign-in tokens stored only as hashes;
• limits on sign-in attempts, bot checks on sign-up, and blocks on requests from other websites;
• a password-locked admin dashboard, and access limited to the people who run Off Camera.

No system is perfectly secure. If a breach affects your personal data, we will tell you and the authorities as the law requires. Please use a strong password you don’t use anywhere else.

Depending on where you live, you have some or all of these rights:

• Access: get a copy of your personal data.
• Correction: fix data that is wrong.
• Deletion: have your data deleted.
• Portability: get your data in a format you can take elsewhere.
• Objection and restriction: object to our use of your data based on legitimate interests, or ask us to pause using it.
• Withdrawing consent: where we rely on consent, at any time.
• Opting out: of the sale or sharing of your data for ads, and of profiling. We don’t do either, so there’s nothing to opt out of, but you can still ask.

You can do a lot yourself: edit your name and brand profile, switch emails off, and delete posts, brands or your whole account in the app. For anything else, email team@offcamera.co from the address on your account. We may ask you to confirm it’s you. Someone you authorize can ask for you, with your signed permission. We answer within one month (45 days for US state law requests) and tell you if we need more time.

If we turn down a request, you can ask us to look again by replying to our answer. If you’re still unhappy, you can complain to your data protection authority (in the EU or UK) or your state attorney general (in the US). We will never treat you worse for using your rights.

This part is for people in California and other US states with privacy laws. In the last 12 months we collected these kinds of personal information, for the purposes in section 3, from the sources in section 2:

• Identifiers: email address, name, account IDs, and IP addresses (used to count visits and stop abuse, and stored only in shortened or scrambled form).
• Commercial information: your plan and purchases.
• Internet activity: how you use Off Camera, product events and page visits.
• Audio and visual information: the photos, recordings, screenshots, clips and sounds you upload, and the voices and videos made for you.
• Business information: your website, brand and posts.
• Sensitive personal information: your account login (email and password). We use it only to sign you in and keep your account safe.

We disclose these only to the service providers in section 5, for the purposes there. We have not sold or shared personal information for cross-context behavioral advertising in the last 12 months, and we don’t knowingly sell or share the data of anyone under 16. We keep each kind for the times in section 11. You can use the rights in section 14, including to know, delete and correct.

• Account emails: password resets and important notices about your account, billing or our terms. You get these as long as you have an account.
• Product emails: a note when a draft is waiting to be exported (once), new ideas after your first export (once), and a Monday recap (only when there’s something to say). We send at most one a day, four in your first two weeks, and one a week after that. Switch each off in Settings, under Email, or with the one-click link at the bottom of every one.
• Guests never get email. We don’t send newsletters for other companies, and we never give your email to anyone for their marketing.

Off Camera is for people 18 and over, and it isn’t meant for children. We don’t knowingly collect personal data from anyone under 18. If you think a child has given us personal data, email us and we will delete it.

When what we collect or who we share it with changes, we update this page and the date at the top. If we start using your data in a new way, or a new kind of company starts receiving your content, we email you before it applies.

Questions, requests or complaints about privacy: email team@offcamera.co. We read every email. For the rules on using Off Camera, see our Terms of Service.