Privacy notice
This notice explains what personal data Showreel Studio keeps, why, where, for how long, and what you can ask us to do about it. It covers this website, the service at app.showreelstudio.app (the web app, share links and cloud recording), the help centre and the software on your computer.
Who we are
Showreel Studio is run by Gareth Lee Joseph, a business registered in Italy (Partita IVA 04826660237), Via Prato Santo 18, 37126 Verona, Italy. We decide how the personal data in this notice is used (we are its "controller"). Write to hello@showreelstudio.app about anything in it.
What we keep, and why
| What | What we keep | Why, and on what legal basis |
|---|---|---|
| The website's form | your name, work email, company, website and message; a one-way fingerprint of your internet address | to reply to you (steps you asked for before a contract); the fingerprint only to stop abuse (our legitimate interest in keeping the form usable) |
| Your account | your email address, which organisation you belong to, your role, invitations, and when you were last here | to give you the service (our contract with your organisation) |
| Your sign-ins | for each sign-in, in a browser or the software: when you signed in and how (Google, or your company's single sign-on), when it was last used, and the browser or app it came from; with single sign-on, the identifier your company's sign-in gives you | to keep you signed in, show you where you are signed in and let you end it (contract); to keep accounts secure (legitimate interest) |
| Your organisation | its name, email domain, licence, people, settings and a count of what it used (recordings, voice reads, shares) | to run the service and its plans, and to see how the product is used (contract; legitimate interest) |
| Paying | the billing name, email and address, VAT number, SDI code or PEC, plan, amounts, and when you accepted the terms | to take payment, invoice and keep tax records (contract; legal obligation) |
| Comments and reviews | who wrote a comment, when, and what it says | to show it to your colleagues (contract) |
| Views of shared films and decks | a random number for each play and for each browser, when it started, how far it got, whether it ended, and, for an embedded film, the name of the website it is on (not the page) | to count views without knowing who watched (our legitimate interest in showing your organisation how its films are doing) |
| Your own voice | the consent recording and the sample you record, and the voice made from them | to make a voice from your own recording (your consent, which you can withdraw by deleting the voice) |
| Your organisation's activity log | who in your organisation changed its people, settings, links, keys, kits, voices, audiences or plan, and when | so its owners and admins can see what changed (legitimate interest, ours and your organisation's) |
| The service's logs | each request to the service: the address asked for, when, how it went, and the internet address it came from | to keep the service running and secure, and to find faults (legitimate interest) |
| Staff changes | which staff member changed what, and when | to keep the service secure and accountable (legitimate interest) |
Card details are entered on Stripe's own pages and never reach us.
Your films, decks and storyboards are made on your computer and stay there unless you share them or record in the cloud. When you do, they are stored so your colleagues can watch and review them. For any personal data inside them (people shown in your app, for example), your organisation decides how it is used and we act only on its instructions, as our terms of service set out. Our staff see how organisations use the product, not their films, scripts or decks. We never use your material to train AI models, never sell personal data, and show no advertising.
Writing and the voice-over
Scripts are written on your own Claude plan in Claude Code, or on your organisation's own Claude API key, and the voice-over runs on your organisation's own Google Cloud project. Those providers handle that text under your organisation's agreements with them, not ours.
An organisation can instead agree with us, in writing, that the service writes or speaks for it on our own accounts. Then, for that organisation only, Anthropic (Claude) and Google Cloud (Vertex AI and Text-to-Speech) handle that text for us, in the United States, as our sub-processor list says. No organisation has this arrangement today.
The help assistant
Questions you put to the help assistant (on the help pages, in the web app, or with showreel ask) are answered by Google Cloud's Vertex AI (Gemini) on our account, in the European Union, from the help articles. We do this to help you use Showreel Studio (our legitimate interest). We don't keep the words of a question: our log records only that an answer was given, where from and which articles it used. Your network address is kept only as a keyed one-way code, for a day, to limit how often anyone can ask. Please don't put personal data in a question.
Cookies and your browser
We use no advertising or analytics cookies and no tracking scripts, so there is nothing to agree to.
- The web app uses one cookie to keep you signed in. It is needed for the service to work.
- The website remembers the currency you chose, in your own browser. Nothing about it is sent to us.
- The film player keeps a random number in your browser so that a repeat view is counted once. It identifies no one and is never linked to anything else.
Where it is kept, and who helps us
The service runs on Google Cloud: its data is stored in London (United Kingdom) and the service itself runs in Belgium. A recovery copy, so the service can carry on if London is ever down, is kept in the European Union: the database's copies for 7 days, and the files kept in step, so a deletion reaches it within a day. These providers handle personal data for us, only as we instruct:
| Provider | What for | Where |
|---|---|---|
| Google Cloud (Google Cloud EMEA Ltd) | hosting, storage, cloud recording | United Kingdom, Belgium and the European Union |
| Stripe (Stripe Payments Europe Ltd) | taking payments, the billing page | European Union, and the United States |
| Google Workspace | our email at hello@showreelstudio.app | European Union, and the United States |
| Tek01 S.r.l. (FatturaElettronica APP) | issuing electronic invoices | Italy |
Invoices also go to Italy's revenue agency through its invoicing system (the SdI), and to our accountant, because the law requires it. The sub-processor list shows the same providers, with which of them handle customers' material.
Outside the European Union: the United Kingdom is recognised by the EU as protecting personal data adequately. Where Google or Stripe handle data in the United States, they do so under the EU-US Data Privacy Framework or the European Commission's standard contract clauses.
How long we keep it
| What | For how long |
|---|---|
| Enquiries from the website's form | 12 months after we last wrote to each other, unless you become a customer |
| Recordings, share links, views, comments, kits and own voices | until you delete them, or 30 days after your organisation's plan ends |
| Your account and your organisation's usage counts | while your organisation has a plan, then 12 months; after that, usage is kept only as counts with no names |
| Payments, invoices and your acceptance of the terms | 10 years, as Italian tax and accounting law requires |
| Your sign-ins | 31 days from when each began (a sign-in lasts at most a week in a browser, 30 days in the software) |
| The service's logs | 30 days |
| Your organisation's activity log (who changed its people, settings and links, and when) | 2 years at most, and deleted with the accounts 12 months after a plan ends |
| The record of staff changes | 2 years |
So that we can recover from a mistake or a fault, anything deleted stays in our backups for up to 7 days more, and is then gone for good.
Your rights
You can ask us for a copy of the personal data we keep about you, and to correct it, delete it, restrict how we use it, or send it to you or someone else in a common format. You can object to what we do on the basis of our legitimate interests, and withdraw your consent where we rely on it (deleting your own voice, for example). Write to hello@showreelstudio.app; we answer within a month.
If your organisation holds the data (in its films, for example), we will pass your request to it.
You can also complain to your data protection authority. In Italy that is the Garante per la protezione dei dati personali (garanteprivacy.it).
The software on your computer
The software counts how often each command runs, on your computer only; that count is never sent to us. Once a day it checks with the service that your organisation's licence is good, which updates when you were last here.
Security
Data is encrypted in transit and at rest. Only the people who run Showreel Studio can reach it, and every change staff make is recorded. To stop abuse, the service counts requests from each network address for up to a day, keeping the address only as a one-way code. Our security page says more, and how to report a vulnerability. If personal data is ever breached, we will tell the Garante and, where it affects you, you, as the law requires.
Children
Showreel Studio is for businesses and is not meant for anyone under 18.
Changes
If we change this notice in a way that matters, we will tell your organisation's owner by email before it applies. The date below shows the latest version.
Last updated 29 October 2026.