Privacy Policy

1Who we are

In this policy, 'Playflow', 'we' and 'us' mean the company that operates the Playflow service together with its parent company, subsidiaries, affiliates, successors and assigns. Playflow is the controller of the personal data described here.

We act in two different roles, and which one applies changes what this policy covers.

Our own data

Your account, your billing, your usage of Playflow. We decide how this is handled, so this policy governs it in full.

Your workspace data

The videos you upload and the viewer data they generate. You decide what goes in and how long it stays. We only process it to run the service for you, under your instructions.

2What we collect

We try to collect as little as we can get away with while still running a video platform.

Information you give us

1. Account details. Your name, work email, company name, and job title. We ask for company and title during onboarding because we use them to understand who Playflow is for, not to resell.
2. Workspace content. Video files, titles, descriptions, thumbnails, folder names, and the branding you choose for your player.
3. Billing details. Handled by our payment processor. We see the last four digits of a card, the expiry, and the country. We never see or store a full card number.
4. Anything you send us. Support messages, contact form submissions, and the website URL you enter in the branding tool on our homepage.

Information we collect automatically

For first-party funnel measurement, we set the pf_visitor cookie for one year and the pf_session cookie for 30 minutes of inactivity, collect the request IP address to derive approximate location together with the browser user agent, retain IP addresses and user agents for 90 days, and may keep derived event and location data after that period.

1. Account activity. Sign-ins, uploads, visibility changes, member invitations, and similar actions. These populate your audit log, which is a product feature you can read and export.
2. Viewer analytics. When someone watches a video hosted on Playflow, we record the play, credited watch time, completion, and device type. A local geolocation database derives approximate country, region, and city from the request IP; analytics sessions store only these location names, not IP addresses or coordinates. No third-party IP lookup service receives the address. Do Not Track disables this location collection and renewing a session with Do Not Track clears its stored location. We do not set advertising cookies on your viewers or build advertising profiles.
3. Technical logs. IP address, browser, and timestamps, kept for security and debugging.
4. Location data attribution. This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com, licensed under Creative Commons Attribution-ShareAlike 4.0.

3Why we use it

We use data for a short list of reasons, and nothing else.

We do not sell your data. We do not share it with advertisers. We do not use your video content to train machine learning models.

4Who we share it with

Only the companies we need to run the platform, and only what each one needs.

1. Our video infrastructure provider stores and delivers your video files. They see your content because they have to serve it.
2. Our payment processor handles card details. They see your billing information; we do not.
3. Our email provider sends invitations and account notices. They see the recipient address and the message.
4. Our hosting and error-monitoring providers run the application itself.

We also disclose data if the law requires it. If we receive a valid legal demand for your workspace content, we will tell you unless we are legally prohibited from doing so.

5How long we keep it

1. Your videos stay until you delete them. Deleting a video removes it from playback immediately and from our storage within one month.
2. Deleted workspaces are recoverable for one month, then permanently removed. We do this because accidental deletion is more common than malicious deletion.
3. Analytics are kept as aggregate counts indefinitely, because a play count with a hole in it is worse than useless.
4. Audit logs are append-only and retained for the life of the workspace. That is what makes them trustworthy.
5. Technical logs are kept for 90 days.

6Your rights

Depending on where you live, you may have the right to get a copy of your data, correct it, delete it, or object to how we use it. We honor these requests regardless of where you live, because maintaining two standards is more work than maintaining one.

You can export your videos and data on request. Fleet workspaces keep their original files in long-term storage, and those files can be restored to the workspace. You can delete anything from your library yourself. For anything else, email privacy@getplayflow.co and we will respond within one month.

If you are an end viewer rather than a customer, and you want data about your viewing removed, contact the company whose video you watched. They control that workspace. We will help them act on it.

7Security

Workspaces are isolated at the database level, so one customer cannot read another customer's rows even in the event of an application bug. Passwords are hashed. Invitations are single-use and expire. Playback links are short-lived and issued per request rather than being permanent public URLs.

No system is perfect. If we discover a breach affecting your data, we will tell you what happened, what was affected, and what we are doing about it, without waiting for a legal deadline to force us to.

8International transfers

We are based in the United States and our providers operate in the United States and the European Union. If you are outside those regions, your data will be transferred to them. Where required, we rely on Standard Contractual Clauses with each provider.

9Children

Playflow is a business tool and is not intended for anyone under 18. We do not knowingly collect data from children. If you believe a child has given us information, email us and we will delete it.