Privacy Policy

Last updated: 18 April 2026

1. Data controller

Gonzalo Molina
VAT/NIF: 73509062G
Address: Calle Clara Campoamor 3, 31013 Pamplona (Navarra), Spain
Email: gonzalo@videocensor.com

A Data Protection Officer has not been designated, as it is not legally required. You may direct any data protection queries to gonzalo@videocensor.com.

2. Data we collect

• Account data: username, email address and password (stored hashed). Required to identify you and grant access to the service.
• Billing data: name, billing address, country and payment data. Managed directly by Stripe, our payment processor. VideoCensor does not store card details.
• Uploaded content: video or audio files you upload for processing. These files are stored temporarily during processing and deleted automatically afterwards.
• Biometric voice data (Pro and Agency users only): when you activate the voice-cloned replacement mode, we extract a sample of your voice from the uploaded video to generate a cloned voice profile via ElevenLabs. This processing requires your explicit consent (see section 5).
• Usage data: access logs, IP address, browser type and service usage. Used for security and internal usage statistics.

Providing account data (username, email and password) is necessary to access the service; without it, it is not possible to create an account or use VideoCensor. Billing data is required only if you subscribe to a paid plan. Voice data for cloning is entirely voluntary and is only requested if you expressly activate that feature.

3. Purpose and legal basis

We process your data to:

• Provide the video censorship service you have contracted (legal basis: performance of contract)
• Manage subscription billing (legal basis: performance of contract)
• Comply with tax and accounting obligations (legal basis: legal obligation)
• Improve the service and prevent fraud (legal basis: legitimate interest)
• Clone your voice for the vesre replacement mode (legal basis: explicit consent)

We do not carry out profiling or automated decision-making that produces legal or similarly significant effects on users within the meaning of Article 22 GDPR.

4. Retention periods

• Processed video and audio files: the uploaded file is deleted as soon as processing is complete; the output file (available for download) is automatically deleted within 1 hour of processing completion. After that point the download link expires.
• Cloned voice profile: retained while your Pro or Agency subscription is active. Deleted automatically upon cancellation or withdrawal of consent.
• Account data: while your account is active and for up to 30 days after deletion.
• Billing data: for the period required by applicable tax law (6 years under Spanish law).

5. Specific consent for voice cloning

The voice-cloned replacement mode, available on Pro and Agency plans, involves the processing of biometric data under Article 9 GDPR. Before using this feature you must explicitly tick a consent checkbox.

By giving that consent you authorise VideoCensor to:

• Extract a voice sample from your uploaded video
• Send that sample to ElevenLabs (located in the United States, with adequate protection guarantees) to generate a cloned voice profile
• Store that profile on our servers while your subscription is active
• Generate synthetic audio using your cloned voice exclusively to replace censored words in your videos

You may withdraw this consent at any time from your user panel. Withdrawal does not affect the lawfulness of processing carried out prior to it.

VideoCensor will never use your cloned voice for any other purpose, share it with parties other than the technical provider (ElevenLabs), or use it to train its own models. Your cloned voice will not be used to generate audio for third parties or made available to other users. Upon withdrawal of consent, both the cloned voice profile and all associated pre-generated audio stored on our servers are deleted.

6. Recipients of data

We share data with the following processors, under data processing agreements with the guarantees required by GDPR:

• Supabase — database hosting (EU)
• Hostinger — web hosting (EU)
• Stripe — payment processing (EU/US). Certified under the EU-US Data Privacy Framework.
• ElevenLabs Inc. (US) — voice cloning, with consent only. Certified under the EU-US Data Privacy Framework.
• Amazon Web Services (US) — cloned audio storage in S3. Certified under the EU-US Data Privacy Framework.
• Google Cloud (US) — audio transcription, occasional use. Certified under the EU-US Data Privacy Framework.

For any transfers to providers not certified under the EU-US Data Privacy Framework, the applicable safeguard is the Standard Contractual Clauses adopted by the European Commission (Implementing Decision 2021/914).

7. Your rights

You may exercise the following data subject rights at any time by writing to gonzalo@videocensor.com:

• Access to your personal data
• Rectification of inaccurate data
• Erasure of your data ("right to be forgotten")
• Objection to processing
• Restriction of processing
• Data portability
• Withdrawal of consent

We will respond to your request within one month of receipt, as required by GDPR.

If you consider that the processing of your data does not comply with applicable law, you may lodge a complaint with the Spanish Data Protection Authority (AEPD, www.aepd.es) or with the supervisory authority of your country of residence.

8. Security

We apply reasonable technical and organisational measures to protect your data, including encryption in transit (HTTPS), hashed password storage, restricted data access and automated deletion of processed files.

9. Cookies

We use only technically necessary session cookies to keep you logged in. We do not use advertising or third-party tracking cookies.

10. Changes to this policy

We may update this policy to reflect legal or service changes. We will notify you by email of material changes at least 15 days in advance.