1. Who we are
ShipTeaser (shipteaser.com) is published and operated by Guich Studio LLC, 1087 Flushing Avenue, Brooklyn, New York, United States. ShipTeaser turns a product URL into short marketing videos.
For any question about this policy or about your personal data, write to guich.studio@gmail.com. We are the data controller for the processing described below.
2. Data we collect, and why
We only collect what the service needs to work. The table below is the complete list of personal data ShipTeaser processes.
| Data | Why we process it | Legal basis |
|---|---|---|
| Email address | Creating and identifying your account, sending the 6-digit sign-up verification code, and telling you when a video is ready. | Performance of the contract |
| Account password | Email/password authentication. Passwords are handled and hashed by our authentication provider (Supabase); ShipTeaser never stores your password itself. | Performance of the contract |
| Email verification code | Proving you control the email address before the account is created. We store only a hash of the code, with a 10-minute lifetime and a maximum of 5 attempts; the record is deleted as soon as verification succeeds. | Performance of the contract |
| IP address | Enforcing the free allowance (one free demo video per IP address) and rate limits on sign-ups, render requests and the contact form, to prevent abuse. | Legitimate interest (preventing abuse and fraud, controlling the cost of a free offer) |
| Product URL you submit | The input of the product: the page is visited by a headless browser to extract the brand, and the video is built from it. | Performance of the contract |
| Onboarding answers | Your main goal, your role and how you heard about us, asked during sign-up, to understand who uses the product. | Consent (these answers are given voluntarily during onboarding) |
| Text you write for a video | The "key ideas" field (up to 600 characters) and natural-language revision instructions, used to steer the content of your video. | Performance of the contract |
| Brand data extracted from the page | Colours, fonts, logo, taglines, page copy, feature blocks and images read from the product page you submit, used to generate the video. | Performance of the contract |
| Files you upload | Logos, product screenshots, font files and music tracks, applied to your renders. | Performance of the contract |
| Rendered videos and thumbnails | The output of the service, delivered to you. | Performance of the contract |
| Render metadata | Render configuration, status, attempts, timestamps, duration, storage keys and error output — used to run the queue, recover from crashes, show your dashboard history and debug failures. | Performance of the contract; legitimate interest (operating and debugging the service) |
| Billing data | Your Stripe customer and subscription identifiers, plan, plan status and current period end, plus a record of each successful render — used to manage your subscription and enforce your weekly quota. Card details never pass through our systems: payment is handled entirely by Stripe. | Performance of the contract; legal obligation (accounting) |
| Contact form | If you use the lead form on the landing page, your email address and product URL are sent to our inbox so we can reply. They are not stored in our database. | Legitimate interest (answering your request) |
3. Data obtained from your Google account
You can create an account or sign in with “Continue with Google”. This section describes specifically how ShipTeaser accesses, uses, stores and shares Google user data.
How we access it
We use standard Google OAuth through our authentication provider, Supabase Auth. You are redirected to Google, you sign in on Google’s own pages, and Google returns a basic identity for your account. We never see or receive your Google password, and we do not request access to Gmail, Drive, Calendar, Contacts or any other Google service.
How we use it
Only to create and authenticate your ShipTeaser account: the email address linked to your Google account identifies you, lets you log back in, and is used to send you service emails (verification, video ready). We do not use Google user data for advertising, profiling, or resale.
How we store it
The identity returned by Google is stored in our authentication database (Supabase), in the same account record used for email/password sign-in. Your email address is also stored in our user profile table so the application can address you. No other Google profile field is copied anywhere else by ShipTeaser.
How we share it
We do not sell or transfer Google user data to third parties. It is only made available to the sub-processors listed in section 4 that are strictly necessary to run the service — our database and authentication provider (Supabase), our email provider (Resend, to deliver service emails to your address), and our payment provider (Stripe, which receives your email address if you subscribe). It is never used for any purpose other than operating ShipTeaser for you.
How to revoke it
You can revoke ShipTeaser’s access at any time from your Google account’s third-party access settings, and you can ask us to delete your ShipTeaser account and its data as described in section 7.
4. Sub-processors and international transfers
We do not sell your data. We rely on the following providers to run the service. Your account data and your files are hosted in France: our database sits in Supabase’s eu-west-3 (Paris) region, and our file storage in Scaleway’s fr-par (Paris) region. Some of the other providers below are established outside the European Union; those transfers rely on the safeguards those providers put in place, typically the European Commission’s standard contractual clauses.
| Provider | What they process |
|---|---|
| Supabase | Database and authentication, hosted in the eu-west-3 (Paris) region: accounts, hashed passwords, Google identities, profiles, render history and metadata, brand kits, verification codes, and the IP addresses attached to free demo renders. |
| Scaleway Object Storage | File storage in the fr-par region (Paris, France): rendered videos and thumbnails, uploaded logos, screenshots, font files and music tracks. |
| Anthropic | AI generation: the copy extracted from the product page, the images from that page, the "key ideas" text and revision instructions you write, and the current video configuration are sent to the Claude API to write and revise your video. When the extracted page copy is too thin, Anthropic also runs a web search about the product on our behalf. |
| Stripe | Payments and subscriptions: your email address and account identifier are sent to Stripe, which returns your customer, subscription and plan status. Card data is collected and stored by Stripe, not by us. |
| Resend | Transactional email: the recipient address and the contents of the messages we send you (verification code, video ready), and messages sent through the contact form. |
| Sign-in with Google (see section 3), and Google Fonts, which serves the site typefaces. Because the fonts are loaded from Google servers, Google receives the IP address and browser user-agent of every visitor to this site, including visitors who are not signed in. | |
| Our hosting provider | The web application and the render worker run on a rented virtual server. Web server logs contain visitor IP addresses. |
5. Cookies and local storage
ShipTeaser uses no advertising, analytics or tracking tools. There is no Google Analytics, no Plausible, no PostHog, no advertising pixel. We therefore do not display a cookie consent banner.
The browser storage ShipTeaser writes is strictly functional, first-party, and never used to track you across sites or over time. It is limited to:
- The session token issued by Supabase Auth when you log in, so that you stay signed in.
- Your last finished video (local storage): the link to the rendered video, the product URL it was generated from, and the time it finished. This lets you come back to your own video instead of losing it if you navigate away. It is kept for 6 hours, after which it is ignored. It is written as soon as a demo video finishes on the home page, including for visitors who never sign in.
- A pending plan choice (session storage): if you click a plan while signed out, the plan you picked is remembered so checkout can resume after you sign up. It is removed as soon as checkout resumes, and session storage is cleared by your browser when you close the tab.
None of these are advertising or analytics identifiers, which is why no consent banner is required. You can clear them at any time through your browser settings. Note that loading Google Fonts causes a request to Google servers as described above.
6. How long we keep your data
- Account data (email, profile, brand kits, render history, uploaded files, rendered videos) is kept for as long as your account exists. Delete your account and we delete it, as described in section 7.
- Free demo videos — the video generated from the home page when you are not signed in — are deleted automatically 2 days after they are produced, by a retention rule on the storage bucket itself. You do not have to ask, and we cannot recover them afterwards.
- Email verification codes expire after 10 minutes and are deleted as soon as verification succeeds.
- IP addresses used for rate limiting (sign-ups, render attempts, contact form) are held only in the web server’s memory and are lost when the service restarts. They are never written to our database.
- The IP address attached to a free demo render is stored in our database and kept indefinitely, by design: it is what enforces the “one free video per IP address” rule. If you want it removed, contact us at guich.studio@gmail.com.
- Web server logs containing visitor IP addresses are kept for a short period under our server’s standard log rotation.
- Billing records are kept by Stripe and by us for as long as required by applicable accounting and tax law.
7. Your rights
Under the GDPR you have the right to access your personal data, to have it rectified, to have it erased, to obtain a portable copy, to restrict or object to processing based on our legitimate interest, and to withdraw your consent at any time where processing is based on consent.
To exercise any of these rights, email guich.studio@gmail.com from the address associated with your account, saying what you want. We handle these requests manually — there is currently no self-service deletion button in the product — and we will confirm to you when your data has been deleted from our database and from our file storage.
If you believe your data is being handled improperly, you may lodge a complaint with the data protection authority of the country you live in. If you are in the European Union, that is your own national authority — you do not have to come to ours.
8. Security
The site is served over HTTPS. Passwords are never stored by ShipTeaser: authentication is delegated to Supabase, which stores them hashed. Card details never reach our systems. Access to your rendered videos goes through short-lived signed links rather than public URLs. No system is perfectly secure, and we make no guarantee beyond the measures described here.
9. Children
ShipTeaser is a business tool and is not intended for anyone under 16.
10. Changes to this policy
We may update this policy as the product evolves. The date at the top of this page always reflects the latest version. For significant changes affecting your rights, we will notify account holders by email.
11. Contact
Guich Studio LLC, publisher of ShipTeaser — 1087 Flushing Avenue, Brooklyn, New York, United States — guich.studio@gmail.com. See also our Terms of Service.