Privacy Policy

Effective Date: October 26, 2025

1. Introduction

This Privacy Policy describes how Golem - AI Video Editing Assistant ("we", "us", or "our") collects, uses, and protects your personal information when you use Golem, a desktop application for video editing automation (the "Service").

We are committed to protecting your privacy and complying with applicable data protection laws, including the General Data Protection Regulation (GDPR) for users in the European Union and Ukraine.

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.

2. Information We Collect

2.1 Information You Provide

When you create an account or use the Service, we collect:

• Account Information: Email address, name, and password
• Billing Information: Payment details are collected and processed by our payment processor, Paddle. We do not store your credit card information on our servers
• Support Communications: Information you provide when contacting customer support

2.2 Automatically Collected Information

When you use the Service, we may automatically collect:

• Usage Data: Features used, actions performed, session duration (anonymized for analytics)
• Device Information: Operating system, application version, device type
• Log Data: Error logs, crash reports, and diagnostic information
• Cookies and Tracking: We use minimal cookies for authentication and session management

2.3 Information from DaVinci Resolve

Golem integrates with DaVinci Resolve on your local machine. We do not:

• Access or store your video projects, timelines, or media files
• Upload your creative work to our servers
• Monitor your DaVinci Resolve activity beyond what is necessary for the Service to function

3. How We Use Your Information

We use your information for the following purposes:

3.1 Provide and Improve the Service

• Create and manage your account
• Process subscriptions and payments
• Deliver features and functionality of the Service
• Provide customer support
• Improve and optimize the Service based on usage analytics

3.2 Communication

• Send transactional emails (account notifications, billing confirmations)
• Respond to your inquiries and support requests
• Send important Service updates and security alerts

We will not send marketing emails unless you explicitly opt in, and you can unsubscribe at any time.

3.3 Legal and Security

• Comply with legal obligations
• Enforce our Terms of Service
• Protect against fraud, abuse, and security threats
• Resolve disputes

4. How We Share Your Information

We do not sell, rent, or trade your personal information to third parties.

We may share your information with:

4.1 Service Providers

• Supabase: Database and authentication services (hosted in accordance with GDPR)
• Paddle: Payment processing and subscription management
• Cloud Infrastructure: Hosting and storage providers

These service providers are contractually obligated to protect your data and use it only for the purposes we specify.

4.2 Legal Requirements

We may disclose your information if required by law, regulation, legal process, or government request.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. We will notify you before your information is transferred and becomes subject to a different privacy policy.

5. Data Storage and Security

5.1 Where We Store Your Data

Your data is stored on secure servers provided by Supabase, with data centers located in regions that comply with GDPR requirements.

5.2 Security Measures

We implement industry-standard security measures to protect your information:

• Encryption in transit (TLS/SSL) and at rest
• Secure authentication mechanisms
• Regular security audits and updates
• Access controls and monitoring

However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

5.3 Security Breach Notification

In the event of a data breach that may affect your personal information, we will:

• Notify you via email within 72 hours of becoming aware of the breach (as required by GDPR)
• Inform you of the nature of the breach, affected data, and steps we are taking to mitigate the issue
• Report the breach to relevant data protection authorities as required by law

5.4 Data Retention

We retain your personal information for as long as your account is active or as needed to provide the Service.

• If you delete your account, we will delete your personal information within 30 days, except where we are required to retain it for legal or regulatory purposes
• Anonymized usage data may be retained indefinitely for analytics

5.5 Limitation of Liability for Data Breaches

While we take all reasonable measures to protect your data, no system is 100% secure. To the maximum extent permitted by law, our liability for any data breach or unauthorized access is limited as described in our Terms of Service (Section 9: Limitation of Liability).

6. Your Rights (GDPR Compliance)

If you are located in the European Union, Ukraine, or other jurisdictions with data protection laws, you have the following rights:

6.1 Right to Access

You can request a copy of the personal information we hold about you.

6.2 Right to Rectification

You can request correction of inaccurate or incomplete information.

6.3 Right to Erasure ("Right to be Forgotten")

You can request deletion of your personal information, subject to legal retention requirements.

6.4 Right to Data Portability

You can request your data in a structured, machine-readable format.

6.5 Right to Restrict Processing

You can request that we limit how we use your information.

6.6 Right to Object

You can object to certain types of processing, such as direct marketing.

6.7 Right to Withdraw Consent

Where we rely on your consent to process your data, you can withdraw consent at any time.

6.8 How to Exercise Your Rights

To exercise any of these rights, contact us at:
Email: support@golem.video

We will respond to your request within 30 days.

7. Cookies and Tracking Technologies

7.1 What We Use

We use minimal cookies and similar technologies for:

• Authentication: Session management and login
• Preferences: Saving your settings (e.g., dark mode)
• Analytics: Anonymized usage statistics to improve the Service

7.2 Third-Party Cookies

Our payment processor (Paddle) may use cookies for payment processing and fraud prevention.

7.3 Your Choices

You can control cookies through your browser settings. Note that disabling cookies may affect the functionality of the Service.

8. Children's Privacy

The Service is not intended for children under the age of 16. We do not knowingly collect personal information from children.

If you believe we have collected information from a child, please contact us at support@golem.video, and we will delete it promptly.

9. International Data Transfers

If you are located outside Ukraine, your information may be transferred to and processed in Ukraine or other countries where our service providers operate.

We ensure that such transfers comply with applicable data protection laws, including:

• Standard Contractual Clauses (SCCs) for GDPR compliance
• Adequate safeguards for data protection

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will:

• Notify you via email or through the Service
• Update the "Effective Date" at the top of this page
• Provide at least 30 days' notice before changes take effect for material changes

Your continued use of the Service after changes take effect constitutes acceptance of the revised Privacy Policy.

11. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Email: support@golem.video
Data Controller: Golem - AI Video Editing Assistant
Location: Ukraine

For GDPR-related inquiries, you also have the right to lodge a complaint with your local data protection authority.

12. Data Protection Officer

As we are a small operation, we do not currently have a dedicated Data Protection Officer. For all privacy-related inquiries, please contact:

Email: support@golem.video

Last Updated: October 26, 2025