BlurAway Privacy Policy

Effective Date: [Month Day, Year]

This Privacy Policy explains what information BlurAway, operated by Telion Labs LLC ("BlurAway," "we," "us," or "our"), collects, how we use it, and the choices you have. It should be read together with our Terms of Service. Capitalized terms not defined here have the meaning given in the Terms.

This policy describes how the Service actually operates today. Where a practice depends on details that should be confirmed with counsel before publication, we mark it [review with counsel].

1. Information We Collect

Video you upload. When you use BlurAway, your video is uploaded directly to our object storage and processed to detect and redact faces. We hold the original upload and the generated output only transiently, for processing, preview, and download (see the Data Retention section below).

Account information. If you create an account, we collect your email address and a securely hashed version of your password. We do not store your password in plain text.

Credit and transaction records. If you purchase credits, we keep records of your purchases, credit balance, and the credit charges associated with your exports.

Operational and non-content data. To operate and improve the Service, we process non-content technical data such as file format, duration, processing time, error codes, and aggregated usage statistics. This mirrors Section 5 of our Terms of Service.

We do not require an account to use the free tier.

2. Face Detection and Biometric Data

BlurAway is a face-redaction tool. To redact faces, the Service automatically detects the location of faces within each frame and tracks those locations across the video. This produces a redaction manifest — a record of where detected faces appear over time — which drives the blur, pixelate, box, or emoji effect you choose.

How we handle this:

• Face detection is performed transiently, as part of processing, to produce the redaction manifest.
• We use face-location data only to redact faces in your video. We do not use it to identify, recognize, or verify the identity of any individual, and we do not sell it.
• We do not use your video, extracted frames, audio, or outputs to train face-recognition or other machine-learning models. This mirrors Section 5 of our Terms of Service.

Depending on the content and your location, face-related data may be regulated as biometric or sensitive personal information under laws such as the Illinois Biometric Information Privacy Act (BIPA), the Texas Capture or Use of Biometric Identifier Act (CUBI), Washington's My Health My Data Act, and consumer-privacy laws including the California Consumer Privacy Act / California Privacy Rights Act (CCPA/CPRA) and the EU and UK General Data Protection Regulation (GDPR/UK GDPR). Whether and how these laws apply to your use of BlurAway, and any consent or disclosure obligations they impose, should be confirmed with counsel. [review with counsel]

3. How We Use Information

We use the information we collect to:

• Provide the Service — upload, process, detect, redact, preview, and deliver your video;
• Operate accounts, process credit purchases, and apply credit charges to exports;
• Maintain security, prevent fraud and abuse, and enforce our Terms;
• Diagnose failures and provide support you request; and
• Operate, monitor, and improve the Service using non-content operational data.

We do not sell your video or face-location data, and we do not use your uploaded content to train general-purpose or customer-facing machine-learning models. [review with counsel]

4. Retention and Deletion

• Original uploads and generated outputs are scheduled for deletion from active processing systems within [24 hours] after processing.
• Where the feature is available, you may request earlier deletion ("delete now").
• Redaction manifests, account records, and credit/transaction records are retained as described in our Terms of Service (Section 6).
• Deletion from backups, caches, logs, failed-job storage, and disaster-recovery systems may take additional time, and we may retain certain records longer where required for security, fraud prevention, dispute resolution, or legal compliance.

BlurAway is not a permanent storage or backup service. You are responsible for downloading and retaining any output you wish to keep.

5. Service Providers (Sub-processors)

We rely on third-party infrastructure and service providers to operate BlurAway. They process information only as needed to provide their service to us. The categories we use are:

• Cloud compute — running detection and rendering — [vendor];
• Object storage — holding uploads and outputs transiently (e.g. Cloudflare R2 / Amazon S3) — [vendor];
• Database — account, job, and transaction records (PostgreSQL host) — [vendor];
• Queue / cache — coordinating processing jobs (Redis host) — [vendor]; and
• Payment processor — processing credit purchases (Stripe, planned) — [vendor].

A current list of sub-processors and their locations should be maintained and confirmed with counsel before publication. [review with counsel]

6. Cookies and Local Storage

BlurAway stores an authentication/session token in your browser's localStorage so that your guest session or account stays signed in and can access the jobs you create. This token remains until you sign out or clear your browser storage. We use this for core functionality, not for advertising.

If we add analytics or other cookies in the future, this section will be updated and any required consent obtained. [review with counsel]

7. Your Rights and Choices

Depending on where you live, you may have rights to access, correct, delete, or export your personal information, and to object to or restrict certain processing, under laws such as CCPA/CPRA and GDPR/UK GDPR.

• You can request access to, deletion of, or a copy of your account information.
• Where the feature is available, you can delete an upload and its output immediately ("delete now").
• You can sign out at any time, which removes the session token stored in your browser.

To make a request, contact us at [privacy email]. We may need to verify your identity before acting on a request, and some records may be retained where permitted or required by law. The specific rights available to you, and how we verify and respond to requests, should be confirmed with counsel. [review with counsel]

8. Children

BlurAway is not directed to children, and you must be at least 18 years old to use it, as described in our Terms of Service.

9. International Users

BlurAway is operated from the United States. If you access it from outside the United States, your information may be processed in the United States and other countries, which may have different data-protection laws than your own. [review with counsel]

10. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will apply prospectively and will be communicated as required by law. The version and effective date displayed when you use the Service will govern.

11. Contact

Questions or privacy requests: [privacy email]

Other contact addresses (support, copyright, abuse) are listed in our Terms of Service.