Overview
Codas Labs, LLC, doing business as Saycut (“Saycut”, “we”, “us”), makes a desktop app that turns a script into finished videos, driven from the AI chat app you already use. This Privacy Policy explains how we collect, use, share and protect information in connection with our website at saycut.ai, our waitlist, the Saycut app, Saycut accounts, and related services (together, the “Service”).
This policy covers three groups of people:
- Visitors: anyone who visits our website or interacts with our content.
- Waitlist members: people who ask us to email them when Saycut opens.
- Customers: individuals and companies who create a Saycut account, buy a plan and use the app.
We act as a data controller for the information described in this policy.
Saycut has not launched yet. Today our website collects only analytics information (see Cookies and analytics). The waitlist form is switched off for now. The parts of this policy about the waitlist, accounts and billing apply from the day those features open.
What stays on your computer
Saycut builds and exports videos on your own computer. In particular:
- Your footage and voice recordings stay on your computer and never go to Saycut’s servers, unless you choose to use Saycut Cloud, an optional add-on for synced storage and backup.
- Finished files are made on your computer when you export.
- Your AI app (for example Claude, ChatGPT or Codex, or Gemini) receives the script, the transcript and small storyboard thumbnails. It sees your footage only if it asks for frames or clips. When you ask your AI to match the style of a video, it receives at most 24 small frames, each 512 pixels or smaller, plus sound measurements, and only after you confirm. It never receives the audio itself.
- Your AI login stays yours. Saycut never stores your AI login and never reads another app’s credential files. If you pay your AI company by usage, your API key stays in your agent tool.
Information you send to your AI app, or to any other outside service you connect, is handled by that company under its own privacy policy and terms, not this one.
Information we collect
From Visitors
We use Google Analytics 4 and similar technologies on our website to measure how the site is used, such as pages visited, approximate location derived from your IP address, browser and device type, and referring site. See Cookies and analytics below.
From Waitlist members
When the waitlist is open and you join it, we collect your first name and email address, and the date you joined.
From Customers
When you create an account, buy a plan, or contact our support team, we collect identifiers (such as name and email address), your plan and billing history, payment information (processed by our payment processor; we do not store full card numbers), and any other information you choose to provide.
From use of the Service
Saycut’s servers keep four things about your use of the app: your account, your devices (the computers you sign in on), your plan, and usage counts. When you sign in or use features that need the internet, we also receive technical information such as IP address, app version and operating system, which we use to operate, secure and improve the Service.
From Saycut Cloud
If you choose to use Saycut Cloud when it becomes available, the project files you sync, which may include footage and voice recordings, are stored by us or by service providers acting for us, so that we can sync and back them up across your computers and your team.
Voice and face samples
Saycut lets you clone your own voice and create an AI presenter twin of yourself, or of someone who has given written permission. To do this you provide recordings, photos or video (“samples”). Samples, and the voice or likeness made from them, can identify a person and may be treated as sensitive or biometric information under laws in some places. We handle them with extra care:
- Consent first. A real person’s voice or likeness is used only when their consent is recorded in Saycut: “This is me” for yourself, or “Written permission” for someone else, with who agreed and when. Fictional presenters use preset voices only, never a clone.
- Purpose-limited. We use samples only to make the voice or presenter you asked for, and to provide the related features. We do not use your samples to make voices or presenters for anyone else.
- Who processes them. Samples may be processed by Saycut, by service providers acting for us, or by an outside voice or presenter service you choose to connect with your own account. A connected service handles samples under its own terms and privacy policy.
- Not sold. We never sell samples or the voices and likenesses made from them, and we do not share them for advertising.
- Withdrawal and deletion. Consent can be withdrawn at any time, and the voice and presenter slots lock again. You can ask us to delete samples and models we hold by emailing [email protected]. We delete them when you ask, when consent is withdrawn, or when your account closes, unless the law requires us to keep them. Copies held by a service you connected must be deleted with that service.
How we use information
We use the information described above to:
- Provide, maintain, secure and improve the Service.
- Authenticate accounts and devices, process transactions, and manage subscriptions.
- Email waitlist members when Saycut opens, and send launch news they asked for.
- Respond to support requests, communicate product updates, and send transactional emails.
- Market our Service, subject to your opt-out rights under applicable law. Every marketing email has an unsubscribe link.
- Understand how our website is used, so we can improve it.
- Comply with legal obligations, respond to lawful requests, and enforce our Terms of Service.
- Detect, prevent and investigate security incidents, fraud and abuse, including misuse of voice and likeness features.
Legal bases for processing
Where the GDPR, the UK GDPR or similar laws apply, we process personal information on one or more of the following legal bases:
- Contract: to provide the Service to you and perform our contractual obligations.
- Consent: where you have given consent, for example to join the waitlist, to non-essential analytics cookies where consent is required, or to the use of your voice or likeness. You may withdraw consent at any time.
- Legitimate interests: to secure and improve the Service, prevent fraud and abuse, and understand how our website is used, where those interests are not overridden by your rights.
- Legal obligation: to comply with applicable laws, court orders and regulatory requirements.
Where samples count as special category or biometric data, we process them only with the explicit consent described in Voice and face samples.
Data retention
We retain information for as long as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce our agreements. Retention periods vary by data type and purpose; for example:
- Waitlist details: until Saycut opens and we have told you, or until you unsubscribe or ask us to delete them, whichever comes first, plus a short period to process the request.
- Customer account data: for the life of the account plus up to seven (7) years afterward for recordkeeping, tax and legal-compliance purposes.
- Voice and face samples: as described in Voice and face samples.
- Saycut Cloud files: while you use Saycut Cloud, and then deleted from active systems after you delete them or end the add-on. Backups expire on a rolling basis.
- Analytics data: for the retention period set in Google Analytics, which is no longer than fourteen (14) months for user-level data.
- Log and security data: typically retained for up to thirteen (13) months, with shorter windows for verbose diagnostic data and longer windows only where required for legal, security-investigation or compliance purposes.
Security
We maintain administrative, technical and physical safeguards designed to protect information, including encryption in transit, access controls, least-privilege access, secret management and regular security reviews. Keeping footage on your own computer also means most of your project never passes through our systems. No method of transmission or storage is perfectly secure. If you believe your account has been compromised or you find a vulnerability, contact us immediately at [email protected].
International data transfers
We are headquartered in the United States and may process information in the US or other countries where we or our service providers operate. Where required by data protection laws, we rely on recognized transfer mechanisms to safeguard international transfers of personal information:
- For transfers from the European Economic Area, the EU Standard Contractual Clauses (SCCs).
- For transfers from the United Kingdom, the UK International Data Transfer Addendum issued by the UK Information Commissioner.
- For transfers from Switzerland, the SCCs with references to the EU adapted to refer to Swiss law and the Swiss Federal Data Protection and Information Commissioner as the competent authority.
Where required, we take supplementary technical and organizational measures designed to ensure an essentially equivalent level of protection.
Your rights and choices
Depending on where you live, you may have rights under the GDPR, the UK GDPR, the California Consumer Privacy Act (as amended by the CPRA), Illinois and other US state privacy and biometric laws, including the right to:
- Access, correct or delete your personal information.
- Restrict or object to certain processing, including direct marketing.
- Request a portable copy of your personal information.
- Opt out of the sale or sharing of personal information and of targeted advertising, where applicable.
- Limit the use of sensitive personal information, including voice and face samples, to what is needed to provide the feature you asked for.
- Withdraw consent where processing is based on consent, including consent to use your voice or likeness.
- Lodge a complaint with a supervisory authority in the EU or UK, or with your state’s attorney general in the US.
We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects.
To exercise rights, email [email protected]. We will verify your identity before acting on requests, typically by confirmation through the email address we have on file. We will respond within thirty (30) days of a verifiable request under the GDPR or UK GDPR, and within forty-five (45) days of a verifiable request under the CCPA or other US state privacy laws, except that we may extend these periods by up to an additional sixty (60) or forty-five (45) days respectively where necessary and permitted by law, in which case we will tell you. You will not be discriminated against for exercising your rights.
You can leave the waitlist or stop marketing emails at any time with the unsubscribe link in any email we send.
Children
The Service is intended for business use and is not directed to children. We do not knowingly collect personal information from anyone under 16 years of age. If you believe a child has provided us with personal information, contact [email protected] and we will take appropriate action.
Changes to this policy
We may update this Privacy Policy from time to time, for example when the waitlist, accounts or Saycut Cloud open. When we do, we will revise the “Last updated” date at the top of the page and, for material changes, notify customers by email or in-app notice. Your continued use of the Service after an update takes effect constitutes your acceptance of the updated policy.
How to contact us
For privacy questions or to exercise your rights, email [email protected]. You can also write to us at Codas Labs, LLC, 1300 South Blvd, Suite 38821, Charlotte, NC 28203, USA.