Privacy policy
Last updated: Sep 28, 2026
This policy explains how Cortfy (https://cortfy.com) handles personal data, under Brazil's General Data Protection Law (LGPD, Law 13.709/2018). The controller is [company name and registration number]. Data protection contact: [contact e-mail].
1. What we collect
Account: name, e-mail, password (stored only as a hash, never in plain text), preferred language and, if you sign in with Google, the name and e-mail Google sends us.
Content: the videos and links you upload, transcripts, generated clips, saved styles and the history of jobs and credits.
Payment: subscription and purchase identifiers. Card details are handled by the payment processor; we never receive or store the card number.
Technical: IP address and access logs, for security, abuse prevention and the hourly limit of the free tools.
2. Why we use it
To provide the service you signed up for: processing your videos, delivering clips, charging and tracking credits, and sending account and clips-ready e-mails (legal basis: performance of a contract, LGPD art. 7, V).
For security, fraud prevention and improving the service (legitimate interest, art. 7, IX), and to meet legal and tax obligations (art. 7, II).
We do not sell personal data and we do not use your videos for advertising.
3. Who we share it with
We use suppliers (processors) that handle data only to provide the service, under contract: cloud storage and hosting servers; AI providers for speech transcription, moment and text selection, B-roll image generation and dubbing; a payment processor; and an e-mail delivery service.
Some of these suppliers are outside Brazil. International transfers follow LGPD art. 33, with contractual clauses and protection safeguards.
We may share data when the law or a court order requires it.
4. How long we keep it
Uploaded videos, transcripts and clips: 30 days on every plan, then deleted automatically.
Account data: while the account exists. When you delete your account, we delete your profile, videos, clips and job history.
Payment and credit records: for the period tax law requires. Access logs: 6 months, as Brazil's Internet Civil Framework requires (art. 15).
6. Your rights
You can ask for confirmation of and access to your data, correction, anonymisation or deletion, portability, information about who we share it with, and withdrawal of consent (LGPD art. 18).
To delete everything, use “Delete account” on the Account page. For other requests, write to [contact e-mail]; we answer within 15 days. You can also complain to Brazil's National Data Protection Authority (ANPD).
7. Security
Encrypted connections (HTTPS), passwords stored as hashes, supplier keys encrypted, and file access only through signed, temporary links. No system is infallible: if a relevant incident happens, we will notify you and the ANPD.
8. Minors
The service is not meant for people under 18 without a legal guardian's permission.
9. Changes to this policy
When this policy changes in a meaningful way, we will tell you by e-mail or on the site, with the new date at the top.