Last updated: 12 November 2025. This Policy describes how Exportlab collects, uses, and protects your information.
Exportlab ('we', 'us', or 'our') is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard personal information when you use our Service. It applies to all users worldwide, including account holders and collaborators who interact with shared videos or galleries.
By using Exportlab, you agree to the practices described here. If you do not agree, please do not use the Service. We may update this Policy periodically; the date above reflects the latest revision.
Controller Information: Exportlab (Munich, Germany) acts as the data controller for information we collect directly. When customers upload personal data about others, the customer may be the controller and Exportlab acts as a data processor under their instructions.
We collect several types of information to provide and improve the Service:
We do not intentionally collect special categories of personal data unless you or your users upload it as part of your content. Please avoid uploading sensitive information unless strictly necessary and lawful.
We use collected information to:
Provide and maintain the Service, including processing media uploads (transcoding, thumbnails, automated tagging, AI-driven analysis), enabling collaboration, and operating core features.
Facilitate sharing by sending invitations or notifications to collaborators and displaying relevant information within shared workspaces.
Manage accounts, personalize experiences (e.g., theme preferences), and communicate regarding onboarding, billing, and product updates.
Process payments and subscriptions via Stripe, send invoices or renewal notices, and manage upgrades or downgrades.
Deliver support, respond to inquiries, and send optional product communications (you may opt out of non-essential messages).
Analyze usage trends, improve performance, troubleshoot issues, and develop new features using aggregated or de-identified data where possible.
Protect the Service through security monitoring, fraud prevention, and compliance with legal obligations.
Comply with applicable laws and respond to lawful requests. If we rely on consent for specific processing (such as marketing emails or optional integrations), you may withdraw consent at any time.
We base processing on contract performance (providing the Service), legitimate interests (improving and securing Exportlab), legal obligations, and consent where required.
We do not sell or rent personal data. We share information only in the circumstances below, and only with parties that protect it appropriately:
Third parties may process data outside the EU. When required, we implement safeguards such as Standard Contractual Clauses or ensure participation in recognized transfer frameworks.
Exportlab is based in the European Union, and we strive to keep storage within EU regions. However, cloud operations and support activities may involve access from other countries. Some service providers (for example Stripe, OpenAI, or Google) may process data in the United States or other jurisdictions.
When data leaves the EU or another region with data transfer rules, we rely on appropriate safeguards such as Standard Contractual Clauses or other lawful mechanisms, and we monitor legal developments to remain compliant. By using the Service, you understand that your data may be transferred internationally with these protections in place.
We retain personal data only as long as necessary for the purposes described in this Policy or to comply with legal requirements:
When we no longer need personal data, we delete or anonymize it. Aggregated insights may be retained without identifying individuals.
We implement technical and organizational measures to safeguard your data:
No system is completely secure, but we continuously improve our safeguards to mitigate risks.
Depending on your jurisdiction, you may have rights such as access, portability, correction, deletion, restriction, objection, and withdrawal of consent. EU and UK users may also object to processing based on legitimate interests or request copies of data under GDPR; California residents have rights under the CCPA, including the right to know, delete, and non-discrimination for exercising privacy rights.
You can update certain information directly in the product, delete content, or request assistance via the contact details below. We will verify your identity before fulfilling sensitive requests and respond within the timeframes required by law.
Exportlab does not perform automated decision-making that produces legal or similarly significant effects. We do not sell personal information.
The Service is not intended for children under 13 (or under 16 where applicable). We do not knowingly collect data from children without verifiable parental consent. If we learn that a child provided personal information without proper authorization, we will delete it promptly. Account holders are responsible for ensuring they do not invite minors in violation of applicable laws.
We may update this Policy periodically to reflect changes in practices, technologies, or legal requirements. When we do, we will revise the 'Last updated' date and, if changes are material, provide prominent notice via email or within the Service. Continued use after updates constitutes acceptance of the revised Policy.
If you have questions, concerns, or requests related to this Privacy Policy or your personal data, contact Exportlab - Privacy Office at hey@exportlab.io, Exportlab, Attn: Privacy, Adelgundenstrasse 1, 80538 Munich, Germany. EU and UK users may also lodge a complaint with their local supervisory authority (for example, BayLDA in Bavaria) if concerns remain unresolved.