Privacy Policy

1Who we are

Playflow is a video hosting platform operated by Anchor Point LLC. When this policy says we or us, it means Anchor Point LLC acting as the operator of Playflow. When it says you, it means the person using the service.

We act in two different roles, and which one applies changes what this policy covers.

Our own data

Your account, your billing, your usage of Playflow. We decide how this is handled, so this policy governs it in full.

Your workspace data

The videos you upload and the viewer data they generate. You decide what goes in and how long it stays. We only process it to run the service for you, under your instructions.

2What we collect

We try to collect as little as we can get away with while still running a video platform.

Information you give us

1. Account details. Your name, work email, company name, and job title. We ask for company and title during onboarding because we use them to understand who Playflow is for, not to resell.
2. Workspace content. Video files, titles, descriptions, thumbnails, folder names, and the branding you choose for your player.
3. Billing details. Handled by our payment processor. We see the last four digits of a card, the expiry, and the country. We never see or store a full card number.
4. Anything you send us. Support messages, contact form submissions, and the website URL you enter in the branding tool on our homepage.

Information we collect automatically

1. Account activity. Sign-ins, uploads, visibility changes, member invitations, and similar actions. These populate your audit log, which is a product feature you can read and export.
2. Viewer analytics. When someone watches a video hosted on Playflow, we record the play, how long they watched, and whether they finished. We store an approximate location at country level and a device type. We do not set advertising cookies on your viewers and we do not build profiles of them.
3. Technical logs. IP address, browser, and timestamps, kept for security and debugging.

3Why we use it

We use data for a short list of reasons, and nothing else.

We do not sell your data. We do not share it with advertisers. We do not use your video content to train machine learning models.

4Who we share it with

Only the companies we need to run the platform, and only what each one needs.

1. Our video infrastructure provider stores and delivers your video files. They see your content because they have to serve it.
2. Our payment processor handles card details. They see your billing information; we do not.
3. Our email provider sends invitations and account notices. They see the recipient address and the message.
4. Our hosting and error-monitoring providers run the application itself.

We publish the current list of these companies on the Subprocessors page. We will tell you before we add a new one that handles workspace content.

We also disclose data if the law requires it. If we receive a valid legal demand for your workspace content, we will tell you unless we are legally prohibited from doing so.

5How long we keep it

1. Your videos stay until you delete them. Deleting a video removes it from playback immediately and from our storage within 30 days.
2. Deleted workspaces are recoverable for 30 days, then permanently removed. We do this because accidental deletion is more common than malicious deletion.
3. Analytics are kept as aggregate counts indefinitely, because a play count with a hole in it is worse than useless.
4. Audit logs are append-only and retained for the life of the workspace. That is what makes them trustworthy.
5. Technical logs are kept for 90 days.

6Your rights

Depending on where you live, you may have the right to get a copy of your data, correct it, delete it, or object to how we use it. We honor these requests regardless of where you live, because maintaining two standards is more work than maintaining one.

Most of this you can do yourself: export your audit log from Settings, download your original files from any video page, and delete anything from your library. For anything else, email privacy@getplayflow.co and we will respond within 30 days.

If you are an end viewer rather than a customer, and you want data about your viewing removed, contact the company whose video you watched. They control that workspace. We will help them act on it.

7Security

Workspaces are isolated at the database level, so one customer cannot read another customer's rows even in the event of an application bug. Passwords are hashed. Invitations are single-use and expire. Playback links are short-lived and issued per request rather than being permanent public URLs.

No system is perfect. If we discover a breach affecting your data, we will tell you what happened, what was affected, and what we are doing about it, without waiting for a legal deadline to force us to.

8International transfers

We are based in the United States and our providers operate in the United States and the European Union. If you are outside those regions, your data will be transferred to them. Where required, we rely on Standard Contractual Clauses with each provider.

9Children

Playflow is a business tool and is not intended for anyone under 16. We do not knowingly collect data from children. If you believe a child has given us information, email us and we will delete it.

10Changes to this policy

When we change something material, we will email account owners at least 30 days before it takes effect, and the change will appear in the table below. Minor clarifications and typo fixes happen without notice.