Privacy policy
Last updated:
Notice
This document was written by VodRush's publisher and has not yet been reviewed by a legal professional. It is not legal advice.
It faithfully describes the processing the service carries out as of the date shown at the top of this page and will be updated whenever the service changes, or after legal review.
Data controller
The data controller is Jérôme DUPRAZ-DANGE, a sole trader (French micro-entreprise), registered under SIRET number 931 756 399 00016, domiciled at 173 rue de Courcelles, 75017 Paris, France. He is also the site's publishing director.
Any request about your data can be sent to contact@vodrush.com and will be handled as described below.
Data collected
VodRush applies data minimisation: only the data needed to run the service is processed. No special-category data within the meaning of the GDPR is collected.
Detection works on a VOD's audio track alone: the video is never downloaded in full. The video segments matching the selected clips are fetched only in order to produce those clips.
This processing relies on artificial-intelligence models: the audio track is sent to an automatic-transcription provider. The resulting transcript is then sent to a language-model analysis provider to select the passages and set their boundaries.
- Account: email address, authentication data, the date of your last sign-in and, if you link a Twitch or Google account, that account's identifier and the associated access token;
- Subscription: your current plan and the billing identifiers provided by Stripe, excluding any card data;
- Processing: the submitted VOD link, the extracted audio track, the resulting transcript, the generated clips and the job's technical data;
- Learning signal: whether you keep or reject a proposed clip;
- Technical logs: connection and usage data needed for security and diagnostics.
Lawful bases
Each processing operation rests on an identified lawful basis:
- Performance of the contract: account, VOD submission, clip generation and download, subscription management;
- Legal obligation: keeping records relating to payments;
- Legitimate interest: service security, abuse prevention and processing-cost control;
- Consent: the learning signal used to improve detection.
Learning signal
When you keep or reject a proposed clip, VodRush records that decision. It is used solely to improve how well detection works.
This processing rests on the consent you gave at sign-up. You can withdraw it at any time by writing to contact@vodrush.com; withdrawal applies going forward only and does not affect the rest of the service. Closing your account also erases this signal.
No automated decision producing legal effects concerning you is made from this signal.
How long data is kept
The audio track extracted from a VOD is deleted as soon as processing finishes.
Generated clips and the intermediate files belonging to a job are kept for 7 days, then deleted automatically. Download your clips before that period ends.
Account and subscription data is kept for as long as your account exists, then deleted when it is closed, except for records the law requires us to keep. A daily backup copy of the database is kept for 7 days: deleted data disappears from backups at most 7 days after its deletion.
Technical logs are kept for the limited period needed for security and diagnostics.
Sub-processors
VodRush relies on providers that process certain data on its behalf, strictly for the purposes of the service:
- Payment and subscription-management provider: data needed for payment and billing; card data does not pass through our servers;
- Automatic-transcription provider: the audio track extracted from the VOD;
- Language-model analysis provider: the transcript, in order to select passages and set their boundaries;
- Bot-verification provider: technical data needed during sign-up, sign-in and contact-form submission;
- Transactional-email provider: recipient address and content of the emails sent (account confirmation, password reset, messages addressed to support through the contact form);
- Error-monitoring provider hosted in the European Union: the page involved, the error message and your account identifier, excluding your VODs, your clips and your billing data;
- Database-backup storage provider in the European Union: a daily copy of the database (account, subscription and processing data, excluding your VODs and your clips), encrypted at rest and kept for 7 days;
- Authentication providers and video platform: only if you choose to link an account, for authentication and VOD access.
Hosting and transfers
Your account data, your jobs and your clips are stored and processed in the European Union.
Some of the sub-processors listed above may process data outside the European Union. Those transfers are covered by the safeguards the GDPR provides for, in particular standard contractual clauses.
Your rights
Under the GDPR, you have the right to access, rectify, erase, restrict, object to and port your data.
- Access and portability: you can export your data as JSON from your settings;
- Erasure: you can delete your account from your settings; deletion erases your data, including the learning signal;
- Other rights, or withdrawing consent to the learning signal: write to contact@vodrush.com.
Security
Access is partitioned per account: one user can reach neither another user's VODs nor their clips.
VodRush's team access to your processing is restricted and logged. It happens only on a case-by-case basis — to answer a support request, handle a report, or keep the service secure — and covers the technical data of the processing (status, timestamps, kept or rejected clips), with no systematic viewing of your VODs or clips.
Traffic is encrypted in transit. Provider secrets and linked-account tokens are held server-side only.
No system is infallible. In the event of a data breach posing a risk to your rights and freedoms, you will be informed in accordance with the GDPR.
Changes to this policy
This policy may change along with the service. The last-updated date is shown at the top of this page, and a substantial change is notified to you by email or in the app.
Contact and complaints
For any question about this policy, or to exercise your rights: contact@vodrush.com. Requests are handled within the one-month period the GDPR provides for.
If you write to us through the contact form, your message is transmitted by email to our support inbox via our email-sending provider (see Sub-processors). It is stored in no database: it then exists only in that mailbox.
You may also lodge a complaint with the French data protection authority, the Commission nationale de l'informatique et des libertés (CNIL), www.cnil.fr.