Privacy notice
THSE Recorder · last updated [DATE]
DRAFT — to be reviewed by a lawyer before publication (Ecuador LOPDP, EU / UK GDPR, US state laws, and each Asian market). Replace the [BRACKETED] parts. Checklist: docs/LEGAL.md.
In short
Your videos and records never leave your computer. THSE Recorder processes footage locally in your browser and stores records in the browser and, if you choose, in a folder of your own (disk, USB drive or your own cloud folder). We only handle the data needed for your account and subscription. We do not sell or share personal information, and we do not use advertising, tracking cookies or analytics in the app.
1. Who is responsible
Ariel Samir Rivera Murillo, doing business as Nostricorp, Ecuador, is the controller (responsible for the processing). Privacy requests: [PRIVACY E-MAIL]. [Data protection officer, if appointed: NAME / E-MAIL.] [EU representative (GDPR Art. 27): NAME, ADDRESS, E-MAIL.] [UK representative, if needed.]
2. What stays on your device (we never receive it)
- Footage, exported videos, thumbnails, records, annotations, projects, file types and preferences.
- The browser keeps them with its own storage (IndexedDB and localStorage) only so the app works — no tracking.
- The library folder you choose. If it is inside OneDrive, Google Drive or Dropbox, that service syncs it under your own account and its own privacy terms.
3. What we process, why and on what basis
| Account | Name, e-mail, password (stored hashed by the account service), sign-in times and technical logs. To provide your account. Basis: contract. |
|---|---|
| Subscription | Plan, status and renewal date, received from the payment provider. To give you your plan. Basis: contract. |
| Payments | Handled by Paddle (Paddle.com Market Ltd) as merchant of record; we do not see your card details. Basis: contract and legal (tax) obligations. |
| Messages | Service e-mails (confirmation, password reset, renewal reminders, important changes). Basis: contract. Marketing e-mails only with your consent, which you can withdraw at any time. |
| Support and reports | What you send us. Basis: legitimate interest in answering you and keeping the service safe. |
4. Who receives it (processors)
Supabase (accounts; servers in the United States) and Paddle (Paddle.com Market Ltd) (payments), [and the e-mail provider: NAME]. They process data only on our instructions, under data processing agreements. We may disclose data when the law or a competent authority requires it.
5. International transfers
Our providers may process data outside your country (for example in the United States or the EU). We use safeguards required by law: adequacy decisions or standard contractual clauses (EU / UK), and the guarantees required by Ecuador's Ley Orgánica de Protección de Datos Personales and other applicable laws.
6. How long
Account data while your account exists and up to [12] months after closing it; billing records as long as tax law requires; technical logs up to [90] days.
7. Security
Encrypted connections (HTTPS), hashed passwords, access limited to what each provider needs, and database rules so each user reads only their own subscription. If a breach affects your data, we will notify you and the authorities as the law requires (in the EU within 72 hours).
8. Your rights
- Everyone: access, correct, delete, export (portability) and object to the processing of your data, and withdraw consent; write to [PRIVACY E-MAIL]. We answer within the legal period (usually 15 to 30 days).
- Ecuador: rights under the LOPDP; complaints to the Superintendencia de Protección de Datos Personales.
- EU / UK: rights under the GDPR, including restriction; complaints to your data protection authority.
- United States (e.g. California): know, delete, correct and opt out — we do not sell or share personal information, and we do not discriminate for exercising rights.
- Asia and other countries: the rights given by your local law (for example Japan APPI, Korea PIPA, Singapore PDPA, India DPDP Act).
9. Children
The service is not for children under 16 (13 in the United States) without a parent's or guardian's permission. We do not knowingly collect data from children under 13; if we learn of it, we delete it.
10. Browser storage
The app stores its working data in your browser (IndexedDB, localStorage) and, with your permission, accesses the library folder you choose. These are strictly necessary for the app to work; we use no cookies for advertising, tracking or analytics.
11. Changes
We will announce important changes to this notice in the app or by e-mail before they apply.
12. Contact
Ariel Samir Rivera Murillo (Nostricorp), Ecuador · [PRIVACY E-MAIL].
© 2026 Nostricorp. All rights reserved.