Privacy Policy

This policy describes how Rough to Final handles personal information when you visit our website, contact us, create an account, commission a video, or view a video we host. Our business identity and contact details appear below.

A customer may supply information about other people for a production. The customer must have permission to share that information and tell those people how it will be used. A separate project or data-processing agreement may specify additional responsibilities.

The information involved depends on how you use the service:

• Inquiries and correspondence: your name, email, optional company, project goals, source links, notes, and messages exchanged with us.
• Accounts: account identifiers, contact and profile details, authentication and session information, and project membership. Our authentication provider handles sign-in credentials.
• Project materials: recordings, images, voice, likeness, scripts, brand assets, supporting evidence, comments, approvals, and deliverables you provide or ask us to create.
• Commercial records: accepted scopes, billing information, invoices, payment status, transaction references, and cancellation or refund correspondence. A payment provider collects payment credentials through its payment surface; do not send card details in an inquiry or project upload.
• Technical and viewing information: our hosting, authentication, and video providers may process IP addresses, browser/device information, request times, cookies or similar identifiers, security events, and playback/performance information.

We use information to respond to inquiries, agree a scope, manage access, produce and revise videos, collect payments, deliver files, provide hosting and support, maintain business records, troubleshoot problems, and protect the service against misuse.

Project communications concern your inquiry or service. Submitting an inquiry is not permission for unrelated marketing. We ask separately before using a client's production, name, or testimonial in our portfolio or advertising.

Where applicable privacy law requires a legal basis, the basis depends on the activity: steps you request before a contract, performance of a contract, legal obligations, legitimate interests such as security and service administration, or consent where required. You may withdraw consent for future processing without affecting processing already lawfully performed.

Our website uses Clerk for authentication, Supabase for application data and file storage, Render for application hosting, Resend for transactional email, and Mux and Streamable for video delivery or playback. These services process the information needed for their respective functions. Video providers may also receive viewing and device information when their content loads.

A payment provider identified on your invoice or checkout handles payment processing. Production may involve additional creative software, AI services, or collaborators appropriate to the agreed work. We identify material processing arrangements and resolve confidentiality restrictions before using restricted customer materials.

We may disclose information when reasonably necessary to comply with law, address fraud or security incidents, protect legal rights, or complete a business transfer with appropriate safeguards. We do not sell customer contact lists or project materials.

Providers may process information in the United States and other countries. Any legally required transfer arrangements depend on the services and regions used; this policy does not assert a certification or data-residency guarantee.

• Clerk privacy policy
• Supabase privacy policy
• Render privacy policy
• Resend privacy policy
• Mux privacy policy
• Streamable privacy policy

Our service combines human creative direction with AI-assisted production. Depending on the accepted scope, relevant text, images, recordings, or other materials may be processed by production tools to create or refine your video. The scope should identify any intended synthetic presenter, voice, or likeness treatment and the authorization required for it.

Do not send passwords, payment credentials, government identifiers, sensitive medical information, or materials restricted by a confidentiality obligation unless we have first agreed on an appropriate handling arrangement. Ask us about the planned tools before providing material subject to special restrictions.

A production authorization is not a blanket authorization for unrelated impersonation, publicity, or model training. Provider retention and training settings must be addressed as part of the production arrangement; we do not promise that every third-party tool has identical practices.

Authentication uses cookies or similar storage to support sign-in and security. Video delivery and embedded players may use cookies, local storage, and network requests for playback, measurement, and their own service operations. Some video resources load with a page; others load when you select a player.

You can manage cookies and site storage through your browser and consult the providers' privacy controls. Blocking them may affect sign-in or playback. Browser controls are not a substitute for any consent choice that applicable law requires us to provide.

This notice does not treat visiting the site, continuing to browse, or submitting an inquiry as consent to optional tracking.

We keep information for the purposes described here, taking account of active inquiries and projects, agreed hosting and support periods, recordkeeping duties, disputes, and security needs. Project-specific storage or deletion commitments should be recorded in the scope. The included hosting period is not a promise to retain every source file or working file for that period or indefinitely.

We use access controls and private storage for nonpublic project records and materials. A viewing page approved for public sharing is accessible to its viewers, and recipients may copy or redistribute downloaded material. No internet service or transmission can be guaranteed completely secure.

Deletion requests may be limited by legal obligations, unresolved transactions, or necessary security records. Backup copies and provider systems can have separate deletion cycles. We explain relevant limitations when responding to a request.

Contact us using the details below to ask about your information, request access or correction, request deletion, or raise a privacy concern. You do not need to create an account or purchase a service to make a request. Describe the request and your connection to the information; avoid sending sensitive documents unless we ask for a suitable verification method.

Depending on your location and applicable law, you may have additional rights to portability, restriction, objection, withdrawal of consent, appeal, or a complaint to a privacy regulator. We may verify your identity or an authorized agent's authority and will respond within applicable deadlines. Exercising a privacy right does not result in discriminatory treatment.

Our service is intended for adult business customers and is not directed to children under 13. Contact us if you believe a child has provided personal information. Productions featuring a minor require a separately agreed authorization and handling arrangement.

We may update this policy as our services or practices change. The effective date identifies the current version. We provide additional notice or obtain consent for material changes where required; an update does not itself authorize a new use of previously collected information.