Privacy Policy

Last updated: April 17, 2026

SPACEFOX UNIPESSOAL LDA ("we", "us") operates Screencast — a Chrome extension and web service for AI-powered screen recording. This Privacy Policy explains what personal data we collect, why we collect it, and how you can control it. We are the data controller for the purposes of the EU General Data Protection Regulation (GDPR).

1. Data we collect

Account data

• Email address, display name, authentication identifiers.
• Billing information (processed by Stripe / T-Bank — we do not store full card numbers).

Content you create

• Screen recordings, audio, camera footage, and DOM events you capture with the extension.
• Prompts, settings, and parameters you submit to AI features.

Technical data

• IP address, browser type, device type, OS version.
• Usage logs (features used, error events, timestamps).
• Cookies and similar technologies — see our cookie section below.

2. How we use data

• Deliver the Service: store your recordings, run AI editing, stream videos via CDN.
• Account management: authenticate you, process payments, send transactional emails.
• Improve the Service: aggregated, anonymised analytics to fix bugs and prioritise features.
• Security: detect abuse, prevent fraud, enforce our Terms.
• Legal: respond to valid legal requests and comply with applicable law.

We do not sell your personal data. We do not train foundation AI models on Your Content without your explicit opt-in.

3. Legal basis (GDPR)

• Contract: to provide the Service you requested.
• Legitimate interest: service security, fraud prevention, product improvement.
• Consent: marketing emails, optional analytics.
• Legal obligation: tax, accounting, responses to legal requests.

4. Sub-processors

We use trusted third-party providers to run the Service:

• Google Cloud / Gemini AI — AI video analysis and editing.
• ElevenLabs — AI voice and SFX generation.
• Amazon Web Services (S3, CloudFront) — video storage and delivery.
• Stripe / T-Bank — payment processing.
• Hetzner — application hosting.

5. International transfers

Your data may be processed outside the European Economic Area. Where required, we rely on Standard Contractual Clauses and equivalent safeguards approved by the European Commission.

6. Retention

We retain your recordings and account data for as long as your account is active. On deletion, recordings are removed within 30 days; backups are purged within 90 days. Billing records are retained for 10 years as required by Portuguese tax law.

7. Your rights

Under GDPR you have the right to:

• Access your personal data.
• Correct inaccurate data.
• Delete your data ("right to be forgotten").
• Export your data in a portable format.
• Object to or restrict processing.
• Withdraw consent at any time.
• Lodge a complaint with your national data-protection authority (in Portugal: CNPD — cnpd.pt).

To exercise any of these rights, email support@doitong.com.

8. Cookies

We use essential cookies for authentication and core functionality. Analytics and marketing cookies are loaded only with your consent. You can manage cookies via your browser settings.

9. Children

The Service is not directed to children under 16. If we learn that we have collected personal data from a child under 16 without parental consent, we will delete it.

10. Changes

We may update this Policy. Material changes will be announced via email or in-product notice. The "Last updated" date at the top reflects the latest version.

11. Data controller