Privacy Policy

Recall is a brand owned and operated by Clik Marketing LLC ("Clik Marketing", "we", "us"), who acts as the data controller for the personal data described here. This notice explains what we collect, why, who we share it with and what you can ask us to do about it.

• Account information — email address, authentication identifiers, display name and any profile image you upload.
• Billing and subscription status — plan, renewal state and purchase records received from Paddle. Card details are handled by Paddle, not by us.
• Imported material — the video URLs you submit, video metadata (title, channel, thumbnail, duration) and transcripts retrieved for them.
• Workspace content — knowledge items, notes, generated content packs, scripts, captions, hooks and generated thumbnail images.
• Credits and usage events — credit balances and AI usage records (model, token counts, estimated cost, timestamps) used for metering and cost control.
• Technical and security logs — IP address, device/browser information, request and error logs, and rate-limiting records needed to keep the service safe.

To create and secure your account; to run imports, transcription and AI generation; to store and search your workspace; to process subscriptions and maintain credit balances; to prevent abuse and fraud; to diagnose errors and improve reliability; and to answer support requests. Where required, our legal bases are performance of our contract with you, our legitimate interest in operating and securing the service, legal obligations (such as tax records), and consent where we ask for it.

• Supabase — database, authentication and file storage.
• Paddle — Merchant of Record for sales, subscription management, payments, tax and invoicing.
• Transcript providers such as TranscriptAPI — retrieving transcripts for the videos you import.
• AI model providers — generating summaries, packs, scripts and thumbnail images.
• Hosting, storage and infrastructure providers that run the application.
• Professional advisers, and authorities where the law requires it.

We do not sell your data, and we do not use your library to train our own models.

When you run an AI action, the relevant inputs — for example transcript excerpts, your notes and your instructions — are sent to an AI provider to produce the output. With managed AI this goes through Recall-managed provider access. With bring-your-own-key (BYOK), requests are routed through the provider account whose key you connected, and that provider's own data handling, retention and training policies apply. Please review your provider's policies before connecting a key. We store BYOK keys encrypted server-side and never expose them to the browser.

We cannot promise zero retention across every provider: retention depends on each provider's terms for the account being used.

If you upload assets such as a profile photo, headshots, logos or brand images, you must have the rights and any necessary consents for them. Uploaded assets are stored in private storage scoped to your account and are only used when you select them for a generation.

We keep your workspace data while your account exists. You can delete individual items at any time, delete your whole account from the Danger Zone in Settings, or request deletion by emailing clikmarketingllc@gmail.com. Deleting your account permanently removes your imported videos and transcripts, knowledge items, content packs and remixes, generated thumbnails and uploaded files, notes and preferences.

Some records — such as billing, tax and payment records, security and fraud logs, abuse-prevention data and information needed to handle disputes — may be retained for a limited period where we have a legal or legitimate need, after which they are deleted or anonymised.

Depending on where you live, you may have the right to access, correct, delete, restrict or port your data, to object to certain processing, to withdraw consent, and to complain to your local data protection authority. Contact us and we will respond within the time your law requires (one month under UK/EU GDPR).

Our providers may process data outside your country, including in the United States. Where required, we rely on appropriate safeguards such as standard contractual clauses or adequacy decisions.

We use cookies and local browser storage that are essential to run the app — keeping you signed in, holding your session, remembering your workspace preferences and carrying a referral code through checkout. You can clear them in your browser, though signing in will no longer persist.

Secrets and provider keys are held server-side, generated files are kept in private storage, and workspace records are scoped to your account with row-level access rules. We use encryption in transit and access controls appropriate to the service. No system is perfectly secure, so please use a strong, unique password and enable email sign-in codes in Settings.

Privacy questions, rights requests, deletion or account-removal requests, and other data requests should be sent to Clik Marketing LLC at clikmarketingllc@gmail.com.