Legal
Keyweaver Ltd ("Keyweaver", "we", "us", "our") operates Keyweaver plugins for Adobe After Effects (including Cuemark, Superconductor, Trillian, Tamborine, and Ludo), the keyweaver.io website, and related services. We are a company registered in England and Wales (company number 17283644, ICO registration ZC174255).
Registered office: 20 Wenlock Road, London, N1 7GU, England.
For data protection queries, contact us at privacy@keyweaver.io.
When you create an account, we collect:
When you generate captions, the Cuemark plugin sends your audio file to our backend, which forwards it to the OpenAI Whisper API for transcription. Here is exactly what happens:
| Data | Stored? | How long? |
|---|---|---|
| Audio file | No - passed directly to Whisper, never written to disk on our servers | Not stored |
| Transcript text | Yes - stored in your account so you can re-apply styles without re-uploading | Until you delete the job or your account |
| Word timestamps | Yes - stored alongside transcript text | Until you delete the job or your account |
| File name and duration | Yes - stored for your generate history | Until you delete the job or your account |
| Language detected | Yes - stored for reference | Until you delete the job or your account |
Important: OpenAI's API terms state that audio submitted via the API is not used to train their models. We recommend reviewing OpenAI's API data usage policy for the latest information.
When you use our AI generation plugins, we process the inputs you provide so the feature can run, and we may keep related job records so you can review history and download results:
Inputs are forwarded to the third-party model providers listed in section 4 solely to fulfil your request. We do not use your prompts or outputs to train Keyweaver’s own models.
We collect basic usage information including:
We use the Meta Pixel on keyweaver.io to measure visits and ad performance from Meta (Facebook/Instagram) campaigns. Meta may set cookies or similar identifiers in your browser. See Meta’s privacy policy at facebook.com/privacy/policy. We use Google Ads conversion tracking (gtag.js) to measure visits and conversions from Google Ads campaigns. Google may set cookies such as _gcl_au. See Google’s privacy policy at policies.google.com/privacy.
Payments are handled by Stripe. We never see or store your card number, CVC, or full payment details. Stripe provides us with a customer reference, subscription status, and invoice history. Stripe's privacy policy is at stripe.com/gb/privacy.
| Purpose | Legal basis |
|---|---|
| Providing transcription and AI generation services | Performance of a contract |
| Managing your account and shared credit balance | Performance of a contract |
| Processing payments and issuing invoices | Performance of a contract / Legal obligation |
| Sending transactional emails (receipts, password resets) | Performance of a contract |
| Detecting fraud and abuse | Legitimate interests |
| Improving the service and fixing bugs | Legitimate interests |
| Sending product updates (only if you opt in) | Consent |
We do not sell your data. We do not use your audio, transcripts, captions, prompts, or generated media to train Keyweaver’s own AI models.
| Processor | What they receive | Location |
|---|---|---|
| OpenAI | Audio for Cuemark transcription (and related API calls where used for fallback captioning) | USA (SCCs in place) |
| Replicate | Prompts and optional reference images for Superconductor video generation | USA (SCCs in place) |
| ElevenLabs | Prompts and settings for Trillian voiceover and Tamborine music/SFX generation; may return audio and timing data | USA (SCCs in place) |
| Supabase | Account data, transcripts, generation job history, stored outputs/metadata, first-party download and panel-open analytics | EU (AWS eu-west-2) |
| Stripe | Email, billing address, payment tokens | USA (SCCs in place) |
| Vercel | API request data (transient only) | EU edge / USA origin |
| Resend | Email address (transactional emails; marketing only if you opt in at signup) | USA (SCCs in place) |
| Cloudflare Turnstile | IP address and browser signals for bot protection on signup, sign-in links, and contact forms (only when you submit those forms) | USA (SCCs in place) |
We do not share data with any other third parties. All processors listed above operate under Data Processing Agreements compliant with UK GDPR.
Under UK GDPR you have the right to:
To exercise any of these rights, email privacy@keyweaver.io. We will respond within 30 days. You can also delete your account directly from your account page, which removes all personal data immediately.
You have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
We retain your data for as long as your account is active. If you delete your account:
Inactive accounts (no login for 24 months) will receive an email notice and be deleted 30 days later unless you sign in.
We use industry-standard security measures:
If you discover a security vulnerability, please contact us at security@keyweaver.io before disclosing it publicly.
keyweaver.io and Keyweaver After Effects panels use cookies and similar browser storage as follows:
On your first visit, a banner lets you Accept all or Reject non-essential cookies. Google Ads and richer conversion tags do not run until you accept. You can reopen the banner via Cookie settings in the footer.
Keyweaver is not directed at children under 16. We do not knowingly collect data from anyone under 16. If you believe a child has created an account, contact us at privacy@keyweaver.io and we will delete it.
We may update this policy from time to time. Material changes will be notified by email at least 14 days before they take effect. The "last updated" date at the top of this page always reflects the current version.
For any privacy questions: privacy@keyweaver.io
Keyweaver Ltd · Registered in England and Wales · Company number 17283644
Registered office: 20 Wenlock Road, London, N1 7GU, England · ICO registration: ZC174255