Privacy Policy

Who We Are

DirectorMode.AI is operated by KPI Creatives LLC, 695 Santa Clara Ave, Venice, CA 90291, United States. For any privacy question or request, contact us at legal@kpicreatives.com or +1 (747) 677-1203.

This Policy is written for users in the United States. We do not target or knowingly offer the Service to individuals in the EU, UK, or EEA. It applies to the DirectorMode.AI web application and related services, and does not cover third-party websites we may link to.

Data We Collect

Information you provide

• Account details: your name and email address, and a securely hashed password (we never store your password in plain text).
• If you sign in with Google, the basic profile information Google shares with us (name, email).
• Billing information processed by our payment provider, Stripe. We store only limited details such as your card brand, last four digits, and expiry date — never your full card number.
• Feedback you submit about analysis quality, and anything you send us directly such as support requests.

Content you upload

• Videos you submit for analysis.
• Brand books, briefs, and other reference material you attach.
• Material derived from your content, such as transcripts (text of speech with timecodes), scene metadata, and AI analysis results (scores, work orders, compliance notes).

Information collected automatically

• Technical data such as IP address, browser, and device information.
• Authentication cookies needed to keep you signed in.
• Security and audit logs (IP address, the action taken, before/after values for changes, timestamps, and status). Error and diagnostic data when something goes wrong.
• Product-analytics and usage data via PostHog — events about how you use the app and heavily masked session recordings. All text, form inputs, and media are masked or blocked, so recordings capture only layout and interactions — never your content, what you type, or your uploaded videos. This may load by default; you can opt out any time via Cookie Settings, the "Do Not Sell or Share My Personal Information" link, or a GPC signal (see our Cookie Policy).
• Marketing and acquisition data via Google Analytics 4 and Google Ads — traffic source, campaign, referrer, approximate location, and the pages you visit, used to understand how visitors find us and to measure our advertising. Google Analytics uses an anonymous identifier (never your name or email); for Google Ads conversion measurement, a one-way, irreversible hash of your email may be shared with Google when you sign up or subscribe — never your actual email. This may load by default; you can opt out any time via Cookie Settings, the "Do Not Sell or Share My Personal Information" link, or a GPC signal.

What we do NOT do

• We do not use facial recognition or create faceprints, voiceprints, or other biometric identifiers, and we do not attempt to identify individuals appearing in your content.
• We do not conduct human review or manual moderation of your content as part of the analysis.
• We do not train AI models on your raw video, audio, or transcripts (see "AI Processing of Your Content").

How We Use Your Data

We use your data to:

• Provide the service — store your projects, run automated AI analysis, and return results.
• Manage your account, subscription, and billing.
• Keep the platform secure, prevent fraud, and diagnose problems.
• Communicate with you about your account, important service updates, and marketing (unless you've opted out).
• Improve the service — we may use analysis results, aggregated or de-identified usage data, and your feedback to improve quality and accuracy, including by processing analysis results through AI systems. Humans do not view your content for this purpose.
• Comply with our legal obligations and enforce our Terms.

We do not sell your personal data, and we do not use your uploaded content to train AI models (see 'AI Processing of Your Content' below).

Cookies, Analytics & Advertising

We use cookies and similar technologies for product analytics, marketing analytics, and advertising measurement (including Google Analytics and Google Ads). In the United States, these technologies may load by default when you use our site. You can opt out at any time via Cookie Settings or the "Do Not Sell or Share My Personal Information" control — available in our site footer, on our sign-in screens, and in your account settings (Profile → Privacy & Cookies). We honor Global Privacy Control (GPC) browser signals and treat them as a valid opt-out. See our Cookie Policy for the full list and controls.

Service Providers

We share data with a small set of service providers (sub-processors) strictly to operate the service. Each processes data on our behalf under appropriate agreements and may not use it for their own purposes:

• Google Cloud Platform — hosting, file storage (Google Cloud Storage, in the us-west1 region, United States), and task queues.
• Google Vertex AI (Gemini) — runs the AI analysis of your content.
• Google Cloud Speech-to-Text — transcribes audio from your videos.
• Google — 'Sign in with Google' authentication, if you choose to use it.
• Stripe — payment and subscription processing.
• Mailgun — transactional email (verification, password reset, notifications).
• Sentry — error monitoring and diagnostics.
• MongoDB — our application database.
• PostHog — product analytics and masked session replay (United States), subject to your opt-out.
• Google Analytics 4 — marketing and acquisition analytics (traffic sources, campaigns), subject to your opt-out. Identified by an anonymous identifier only.
• Google Ads — advertising performance measurement and remarketing, subject to your opt-out. For conversion measurement it receives only a one-way, irreversible hash of your email — never your actual email address.

PostHog, Google Analytics, and Google Ads are governed by your cookie choices and Google Consent Mode v2 — you can opt out at any time. PostHog and Google Analytics identify you by an anonymous id only — never your name or email; Google Ads receives only a one-way, irreversible hash of your email for conversion measurement. A current list of named sub-processors is available on request. See our Cookie Policy.

AI Processing of Your Content

Your content is analyzed automatically by Google Vertex AI. Two points matter here:

• No human at DirectorMode reviews your raw footage — the analysis is fully automated.
• Your content is processed through Vertex AI, which under Google Cloud's terms is contractually prohibited from being used to train Google's foundation models. Your creative work stays yours.

Data Location

We store and process data in the United States (Google Cloud). By using the Service, you understand that your data is handled in the United States.

Data Retention

• Content (videos, transcripts, analysis): kept until you delete it, or automatically deleted after 180 days of project inactivity or 30 days after account deletion, whichever is earlier.
• Account data: kept while your account is active.
• Billing records and invoices: kept for 7 years to meet tax and accounting obligations.
• Security and audit logs: kept for 180 days, then deleted automatically; sensitive values may be masked. We may retain logs longer for an active security investigation or legal obligation.
• After account deletion, a one-way, irreversible hash of your email: kept on a suppression list to honor do-not-contact requests and to enforce fair-use limits on re-registration. It cannot be reversed to recover your email, and we do not use it to contact you.

You can delete individual projects and content yourself at any time, and delete your entire account from your account settings (Profile → Delete my account) or by contacting legal@kpicreatives.com. When you delete your account it is deactivated immediately (you can no longer sign in); for a 30-day recovery window you can restore it using the secure link we email you, after which deletion becomes permanent. We complete verified deletion requests within 45 days (extendable by another 45 days with notice), retaining only what we are legally required to keep — for example, billing records and security logs.

Your Rights

Depending on your state, you may have the right to access the personal information we hold about you, delete it, correct it, obtain a portable copy, and opt out of the sale or sharing of personal information and targeted advertising. Specifically, you can:

• Know what personal information we collect and how we use it.
• Request access to, or a portable machine-readable copy of, your personal information — you can download this yourself anytime from Profile → Account → Your Data.
• Request correction of inaccurate personal information.
• Request deletion of your personal information.
• Opt out of the 'sale' or 'sharing' of personal information and targeted advertising — we do not sell your personal data; the advertising category is treated as 'sharing', which you can stop via the "Do Not Sell or Share My Personal Information" link or by enabling GPC.
• Not be discriminated against for exercising your rights.

You can download a portable copy of your data yourself from Profile → Account → Your Data. To exercise any other right — or if you can't sign in — email us at legal@kpicreatives.com. We will verify your identity before acting and respond within the time frame required by law.

Security

We protect your data with industry-standard measures: encryption in transit (TLS) and at rest, hashed passwords (Argon2), access controls, and continuous monitoring. Only administrators can read audit logs. No method of transmission or storage is completely secure, but we work hard to safeguard your information.

Illegal Content & Child Safety

You are responsible for your content (see our Terms). We do not actively monitor content for legality, but our automated systems may detect apparent illegal material. If we become aware of apparent child sexual abuse material (CSAM), we will report it to the National Center for Missing & Exploited Children (NCMEC) and preserve related data as required by law (18 U.S.C. § 2258A), and we may provide it to law enforcement. We may remove other unlawful content and suspend accounts. To report content or submit a copyright (DMCA) notice, contact legal@kpicreatives.com.

Children

DirectorMode is not intended for anyone under 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us data, contact us and we will remove it.

Changes to This Policy

We may update this policy from time to time. We will post the new version here and update the 'Last updated' date above. We will communicate significant changes where appropriate.

Contact Us

Questions about this policy or your data? Email legal@kpicreatives.com or write to KPI Creatives LLC, 695 Santa Clara Ave, Venice, CA 90291, United States · +1 (747) 677-1203.