ASHLAR
Log InSign Up

Privacy Policy

Last updated: December 12, 2025

1. Introduction

Ashlar ("Company," "we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and otherwise process personal information when you use our website and services (collectively, the "Service").

Please read this Privacy Policy carefully. By accessing and using Ashlar, you acknowledge that you have read, understood, and agree to be bound by all the provisions of this Privacy Policy. If you do not agree, please do not use the Service.

2. Information We Collect

2.1 Information You Provide

Account Registration: When you create an account, we collect information such as:

  • Email address
  • Name
  • Password (encrypted)
  • Profile information (optional)

Video Content: When you import videos into Ashlar, we collect:

  • Video URLs and metadata
  • Video titles, descriptions, and duration
  • Thumbnail images
  • Creator information (sourced from the video platform)
  • Video transcripts (if available)
  • Any tags, notes, or collections you associate with videos

Payment Information: When you purchase a paid subscription or use premium features, we collect payment information processed through Stripe, including credit card details (which Stripe handles - we don't store full card numbers).

Communications: If you contact us via email, contact form, or support channels, we collect and retain your message content and any personal information you choose to share.

2.2 Automatically Collected Information

When you use Ashlar, we automatically collect:

  • Usage Data: Pages visited, features used, time spent, clicks, and interactions
  • Device Information: Browser type, operating system, device type, and device identifiers
  • IP Address: Your Internet Protocol address for security and fraud prevention
  • Cookies and Tracking Technologies: As described in our Cookie Policy
  • Referral Source: How you found or accessed our Service (e.g., search engine, referral link)

2.3 Third-Party Information

We may receive information about you from:

  • Video Platforms: When you import videos from TikTok, YouTube, Instagram, Facebook, or Twitter/X, we may receive metadata about those videos and channels
  • Payment Processors: Stripe provides payment confirmation and subscription status information
  • Authentication Providers: Supabase provides authentication data
  • Analytics Services: Information about your interactions with our Service

3. How We Use Your Information

We use the information we collect for the following purposes:

  • Providing and Improving the Service: To deliver the features and functionality you request, including video processing, documentation generation, and storage
  • AI Processing: To generate summaries, transcripts, and documentation from your videos using AI services (see section 4 below)
  • Account Management: To manage your account, process subscriptions, and handle billing
  • Communication: To send you service updates, security alerts, and responses to your inquiries
  • Analytics and Improvements: To understand how users interact with the Service, identify trends, and improve features and functionality
  • Personalization: To customize your experience and provide relevant recommendations
  • Legal Compliance: To comply with applicable laws, regulations, and legal processes
  • Fraud Prevention: To detect, investigate, and prevent fraudulent transactions and other illegal activity
  • Marketing: To send promotional communications (with your consent, where required by law)

4. AI Processing and Third-Party Services

Ashlar uses third-party AI services to process your videos and generate documentation. By using the Service, you acknowledge and consent to:

  • AI Service Providers: Your video content and metadata may be transmitted to and processed by third-party AI providers including but not limited to:
    • Google (Gemini API)
    • OpenAI (GPT models)
    • Anthropic (Claude)
  • Processing Outside the EU/UK: Your data may be processed in jurisdictions outside the European Union or United Kingdom. We implement Standard Contractual Clauses and other safeguards to protect your data in transit
  • Third-Party Policies: These service providers have their own privacy policies and terms of service. We encourage you to review them. Their use of your data is governed by their terms, not solely by this Privacy Policy
  • Data Retention by Third Parties: Third-party AI providers may retain logs of processed data according to their own policies. We do not control their retention practices
  • No Guarantee of Deletion: While we delete data from our systems, we cannot guarantee third-party providers will immediately delete all copies of your processed videos

5. Data Sharing and Disclosure

5.1 We Do Not Sell Your Data

We do not sell, trade, or rent your personal information to third parties for their marketing purposes. We do not use your personal information for behavioral advertising.

5.2 Service Providers

We share information with third-party service providers who perform services on our behalf, including:

  • Cloud hosting providers (Vercel)
  • Database providers (Supabase)
  • Payment processors (Stripe)
  • AI service providers (as described above)
  • Analytics providers
  • Customer support tools
  • Email service providers

These service providers are contractually obligated to use your information only as necessary to provide services to us and are required to maintain the confidentiality and security of your information.

5.3 Legal Requirements

We may disclose your information when required by law or if we have a good faith belief that such disclosure is necessary to:

  • Comply with applicable laws, regulations, or legal processes
  • Enforce our Terms of Service and other agreements
  • Protect the security or integrity of the Service
  • Protect the rights, privacy, safety, or property of Ashlar, our users, or the public
  • Prevent or investigate possible wrongdoing

5.4 Business Transfers

If Ashlar is involved in a merger, acquisition, bankruptcy, dissolution, reorganization, or similar transaction or proceeding, your information may be transferred as part of that transaction. We will provide notice before your information becomes subject to a different privacy policy.

6. Data Retention

We retain your personal information for as long as necessary to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. Specifically:

  • Account Information: Retained while your account is active. After account deletion, we retain data for 90 days before permanent deletion, unless legal holds apply
  • Video Data: Retained until you delete it or close your account. Deleted videos are removed from our primary systems within 30 days but may persist in backups for up to 90 days
  • Payment Records: Retained for at least 7 years for tax and financial compliance purposes
  • Usage and Analytics Data: Retained for 12 months and then aggregated or deleted
  • Communications: Retained while necessary for support or legal purposes, typically 1-2 years

We may be required to retain certain information for longer periods to comply with legal, accounting, or other regulatory requirements. We will anonymize or aggregate information where possible to reduce privacy impact.

7. Your Privacy Rights

7.1 General Rights

Depending on your location, you may have the following rights:

  • Right to Access: Request a copy of the personal information we hold about you
  • Right to Rectification: Request correction of inaccurate or incomplete information
  • Right to Deletion: Request deletion of your personal information ("right to be forgotten"), subject to certain legal exceptions
  • Right to Restrict Processing: Request that we limit how we use your information
  • Right to Data Portability: Request your information in a portable format that you can transfer to another service
  • Right to Object: Object to certain processing of your information, including for marketing purposes
  • Right to Withdraw Consent: Withdraw consent for processing based on your consent

7.2 EU/UK Users (GDPR/UK GDPR)

If you are located in the European Union or United Kingdom, you have additional rights under the General Data Protection Regulation (GDPR) or UK GDPR. To exercise these rights, please contact us at support@ashlar.tools. We will respond to your request within 30 days (extendable by 60 days for complex requests).

7.3 California Users (CCPA)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA), including the right to know, delete, and opt-out of the "sale" of personal information. To exercise these rights, please contact us at support@ashlar.tools.

7.4 Exercising Your Rights

To exercise any of these rights, please contact us at support@ashlar.tools with your request and proof of identity. We will verify your identity and respond within the timeframe required by applicable law. You will not be discriminated against for exercising your privacy rights.

8. Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • Encryption of data in transit (SSL/TLS)
  • Encryption of sensitive data at rest
  • Secure password hashing and storage
  • Regular security audits and vulnerability assessments
  • Restricted access to personal information on a need-to-know basis
  • Employee training on data protection and privacy

However, no security system is completely secure. While we strive to protect your information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.

9. Children's Privacy

Ashlar is not intended for children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children under 13. If we become aware that we have collected information from a child under 13, we will take steps to delete such information promptly. If you believe we have collected information from a child under 13, please contact us immediately at support@ashlar.tools.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, which may have data protection laws that differ from your home country. By using Scroll Gold, you consent to the transfer of your information to countries outside your country of residence, which may include countries that do not have the same level of data protection.

For EU/UK residents, we implement appropriate safeguards including Standard Contractual Clauses and other mechanisms recognized under the GDPR and UK GDPR to ensure your information is protected.

11. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to operate the Service and understand how you use it. Please see our Cookie Policy for detailed information about cookies, tracking pixels, and similar technologies.

12. Do Not Track

Some browsers include a "Do Not Track" feature. Currently, there is no industry standard for recognizing DNT signals, and Ashlar does not respond to DNT browser signals. However, you can control certain tracking through your browser settings and cookie preferences.

13. Third-Party Links

Ashlar may contain links to third-party websites and services that are not operated by us. This Privacy Policy applies only to information collected through our Service. We are not responsible for the privacy practices of third-party websites or services. We encourage you to review the privacy policies of any third-party services before providing your information.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by updating the "Last updated" date at the top of this policy and, where required by law, by sending you an email notice or displaying a prominent notice on the Service.

Your continued use of Ashlar following changes to this Privacy Policy constitutes your consent to the updated policy. We encourage you to review this policy periodically to stay informed about how we protect your information.

15. Contact Us

If you have questions about this Privacy Policy, wish to exercise your privacy rights, have a concern about our privacy practices, or want to report a privacy incident, please contact us at:

Ashlar
Email: support@ashlar.tools

We will respond to your inquiry within 30 days. If you are not satisfied with our response, you may have the right to lodge a complaint with your local data protection authority.