Privacy policy

1. What stays on your device

Video and audio recordings are not uploaded automatically. Your browser composes and stores the video (IndexedDB), together with work in progress and display settings. Neither the Publisher nor a third party has access unless you explicitly select Publish on YouTube. In that case the file goes directly from your browser to YouTube with the publication details you entered; it does not pass through Medusar servers. Clearing site data or changing browser permanently removes locally stored takes.

2. What is stored on your account

• Account: email address, technical identifier and sign-in method (password or Google).
• Content: briefs, generated presentations, successive versions and their names.
• Take records: duration, slide count and date, never image or sound.
• Usage: credit balance, payment allocations, reservations and charged AI processing, to apply your plan and verify usage. Legacy counters may remain in the technical history.
• Feedback: if you use Report a problem, your message, the current screen, your plan and browser.
• Billing: Stripe processes subscription payment data. The Publisher stores no card numbers.
• Optional YouTube connection: an encrypted publication authorisation and its creation date. You may revoke it from the publication screen; it is deleted with the account.

3. Purposes and legal bases

Your content is not resold, used for advertising or used to train models: the providers listed below contractually commit not to train on data received through their programming interfaces.

• Provide the service, store and retrieve your presentations: performance of the contract.
• Generate presentations, including sending your brief to the model provider: performance of the contract.
• Read teleprompter text with an AI voice, including sending it to the selected voice engine: performance of the contract. Generated audio is subsequently cached only in your browser.
• Apply plan limits and prevent abuse: legitimate interest.
• Process payments and keep accounting records: performance of the contract and legal obligation.
• Respond to feedback and fix problems: legitimate interest.
• Publish a video to your selected YouTube channel only at your request: performance of the contract.

4. Who processes which data

Some processing involves transfers outside the European Union. These rely on the European Commission’s Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework.

5. Retention periods

• Account and content: for as long as the account exists, then deletion within thirty days of closure.
• Technical usage and credit history survives account deletion to verify processing, pending operations and billing records. It remains linked to a technical identifier and contains no source documents, presentation text or audio/video recordings.
• Feedback: three years.
• YouTube authorisation: until disconnection or account deletion.
• Invoices: ten years, as required by accounting law.

6. Your rights

You have rights of access, rectification, erasure, restriction, objection and portability, as well as the right to give instructions concerning your data after death. Contact nicolashedoire@hotmail.com; you will receive a response within one month.

From Settings → Your data, you can export all your presentations, scripts and records in one file and delete your account. Deletion is immediate, with no recycle bin; the screen explains what is deleted and what remains before confirmation.

For other rights, contact nicolashedoire@hotmail.com. If you are dissatisfied with the response, you may contact the CNIL (3 place de Fontenoy, 75007 Paris, France).

7. Cookies and local storage

Medusar uses no advertising trackers. A session token keeps you signed in; browser storage holds work in progress, takes and interface preferences. A functional cookie stores your chosen interface language for one year. Connecting YouTube sets an anti-fraud HttpOnly cookie for ten minutes until the return from Google, then deletes it. These elements are necessary for the service and require no prior consent.

Vercel Web Analytics measures visits, page views, demo playback, pricing views, successful sign-ups, ready presentations and produced exports as aggregate statistics, without analytics cookies or cross-site advertising tracking. URL parameters and fragments are removed before transmission. Only predefined campaign, source and creative codes from the current URL may accompany an event; we do not store them in an advertising identifier. We send no email addresses, account or Stripe identifiers or presentation content to this tool. Statistics may include referral source, browser, device type and approximate location. According to Vercel, the temporary visit identifier expires after twenty-four hours. Internal daily counters record created checkout sessions and eligible paid invoices without a visitor identifier, distinguishing initial invoices, renewals and upgrades. They do not link purchases to visits or campaigns. These aggregates without identifiers are kept to monitor activity until administrative deletion. See the Vercel analytics privacy information linked below.

8. Security

Data is encrypted in transit. Database access rules prevent an account from reading or modifying another account’s presentations. Model provider keys stay on the server and are never exposed to the browser.