The short version: Girato is built local-first. Your screen recordings, microphone audio, webcam and the captions generated from them are processed entirely on your device and are never uploaded to us. The only personal data we hold is the small amount needed to sell you a licence, deliver your key and support you — mainly your email address. We don't run advertising trackers and we never sell your data.
Who we are
Girato ("we", "us") is the data controller for the personal data described here. For any privacy question, or to exercise any of the rights below, email hello@girato.app.
What we do not collect
- Your recordings. Video capture, editing, 3D-tilt, backdrops and export all happen on your machine (desktop app) or inside your own browser tab (web app). The footage is never sent to a Girato server.
- Your audio. Microphone and voiceover audio stay on-device. Automatic captions are transcribed by a speech model that runs locally — your audio is never uploaded.
- Behavioural ad-tracking. We do not use Google Analytics, advertising pixels, or cross-site trackers on this site.
What we do collect
| Data | Why | Where it lives |
|---|---|---|
| Email address | To deliver your licence key, send account/lifecycle emails (receipts, renewal, expiry), and answer support | Our storage (Netlify Blobs) + our email provider (Resend) |
| Licence & plan details | To run your account: plan, expiry, and the Stripe customer/subscription identifiers that tie a payment to a licence | Our storage (Netlify Blobs) |
| Device identifiers | Licences activate on up to three devices; we store an anonymous per-device ID so activation limits work | Our storage (Netlify Blobs) |
| Payment details | To take payment. We never see or store your card number — that is handled entirely by Stripe | Stripe |
| Support correspondence | If you email us, we keep the thread to help you | Our email provider (Resend) |
How we use it
- To deliver and validate your licence and enforce the device limit.
- To process payments, send receipts, and manage renewals and cancellations.
- To send necessary account emails and, if you opted in, occasional product updates. Every email has one-click unsubscribe.
- To provide support and prevent fraud or abuse of licences.
Our lawful bases (UK GDPR / GDPR) are contract (delivering the product and licence you bought), legitimate interests (securing licences, preventing abuse, basic service comms), and consent (optional marketing emails, which you can withdraw at any time).
Who we share it with (sub-processors)
We use a small number of trusted providers to run the service. We do not sell personal data to anyone.
- Stripe — payment processing. stripe.com/privacy
- Resend — transactional and account email delivery. resend.com/legal/privacy-policy
- Netlify — website hosting and encrypted storage of the licence/account data above. netlify.com/privacy
Some providers process data outside the UK/EEA; where they do, transfers are covered by their standard contractual clauses and equivalent safeguards.
Cookies
This marketing site does not set advertising or analytics cookies. Strictly-necessary cookies may be set by Stripe during checkout to process your payment securely. The web app uses your browser's local storage on your own device to remember your settings and licence — that data stays in your browser.
How long we keep it
We keep licence and billing records for as long as your licence is active and afterwards only as long as needed for legal, tax and accounting obligations. If you ask us to delete your account data, we will, subject to those obligations. Unsubscribe records are kept so we can honour your opt-out.
Your rights
Under the UK GDPR, EU GDPR and similar laws (including the CCPA for California residents) you can ask us to: access the data we hold about you, correct it, delete it, export it, restrict or object to processing, and withdraw consent for marketing at any time. California residents: we do not sell or share personal information for cross-context behavioural advertising. To exercise any right, email hello@girato.app and we'll respond within 30 days. You also have the right to complain to your data protection authority (in the UK, the ICO).
Children
Girato is not directed at children under 16 and we do not knowingly collect their data.
Changes
If we change this policy we'll update the date above and, for material changes, notify licensed users by email. Questions? hello@girato.app.