Privacy

Schnitt (schnitt.app, including Nabu and the VAYU viewer) is operated by O.C.D Post Ltd. (Israel). This page explains what we keep, why, who processes it for us, and how long we keep it.

What we keep

• Your account: name, email address, role, the projects you can open, when you last signed in and how (password or Google). For password accounts, a one-way hash of the password — never the password itself. For Google accounts, Google's account identifier; we never see your Google password.
• What your production uploads: video and audio files, edit files (AAF) and project settings, including the cast list and any reference photo or voice sample a production adds for a cast member.
• What the service produces from it: transcripts with timecodes, speaker labels and names, descriptions of what is on screen, voice and face signatures used only to recognise cast members inside the production's own project, search indexes, preview video, and export files (Word, edit locators, subtitles, AAF).
• What you do in Schnitt: marks, tags, timelines, edits to transcripts, and your conversations with the AI assistant (your question and its answer), kept per user and per clip.
• An activity log of who did what and when — sign-ins, uploads, downloads, searches, exports, edits and deletions — for security and support.
• Usage records (processing minutes and AI usage) for billing.

Why

To run your account and the projects your production gives you access to; to transcribe, describe, search and export your material; to keep the service secure; and to bill your organisation. We do not sell personal data, we do not show advertising, and we do not use your content to train AI models.

Cookies and browser storage

Sign-in cookies (HttpOnly; the session lasts up to 24 hours and a refresh cookie up to 7 days) and a sign-in token kept in your browser's local storage, plus a few layout preferences (such as font size and panel widths). No advertising or tracking cookies. If you use Sign in with Google, Google sets its own cookies for that step under Google's privacy policy.

Who processes your data

Service providers process data on our behalf, only on our instructions:

• Cloud hosting and storage
• AI analysis
• Speech transcription
• Video delivery
• Database hosting
• Google Sign-In (only if you choose it): your name and verified email address

Some processing may take place outside Israel. A full list of providers is available to customers on request at support@schnitt.app.

Sign in with Google

If you choose it, Google shares your name and verified email address with us. We use them only to sign you in, and we never sell them.

How long

• Project material and everything produced from it: for as long as the production keeps it in Schnitt. When a clip is deleted, its files and its search entries are removed. Deleted files are removed from backups within a limited period.
• Activity log: 90 days.
• Your account: while it is active, then deleted on request, except what the law requires us to keep (for example invoices).

Your rights

You can ask to see, correct or delete your personal data. Project material belongs to the production that uploaded it, so requests about that material go through the production's admin. To make a request, write to support@schnitt.app from your account's email address. You may also complain to Israel's Privacy Protection Authority.

Security

Data travels encrypted (HTTPS) and is stored encrypted at rest. Each user sees only the projects they were given. Passwords are hashed; sign-in attempts are rate-limited; service keys are kept in a secret store, not in code; access to the servers is limited and logged. Google accounts get Google's own two-step verification.

Changes

We may update this page; the date above changes when we do, and we tell signed-in users about important changes.

Contact

O.C.D Post Ltd. · support@schnitt.app