FirstPass — Privacy Policy
This Privacy Policy explains how A2V MEDIA, LLC ("A2V Media," "we," "us") collects, uses, and shares information in connection with the FirstPass application and website (the "Service"). It is part of, and incorporated into, our Terms of Service.
The short version: your footage stays on your machine. FirstPass runs on your computer. Your video files are never uploaded to us or anyone else. To produce a cut, the app sends only an extracted audio track (to transcribe speech) and the resulting text transcript (to make editing decisions) to our processing providers. We do not sell your data, and we do not use your content to train AI models.
1. Information We Collect
a. Account information
When you create an account, our authentication provider collects your name and email address and manages your sign-in. We use this to identify you, provide the Service, and communicate with you.
b. Billing information
If you subscribe, our payment processor (Stripe) collects and processes your payment details. We do not receive or store your full card number. We retain limited billing records (such as your plan, subscription status, and transaction history) to operate your account.
c. Content you process — handled with data minimization
To produce a cut, FirstPass extracts an audio track from your footage and creates a text transcript. Only that audio and transcript are transmitted to our processing providers to deliver the result:
- the extracted audio is sent to our speech-to-text provider to generate the transcript with word timings;
- the transcript text (and your editing goal/prompt) is sent to our AI provider to choose and arrange clips.
Your original video files are never transmitted. Your projects, caches, transcripts, and rendered previews are stored locally on your device, under your control. We do not retain copies of your footage, audio, or transcripts on our servers beyond what is transiently required to process a request.
d. Usage and diagnostic data
- Metering data: to enforce plan limits, we record events such as when a cut is run and how much was processed. This is a count of activity — not the content of your footage.
- Product telemetry: we may collect limited, allow-listed technical events (such as feature usage and error indicators) that do not include the content of your projects.
- Crash reports: if something crashes, we may collect a diagnostic report only if you opt in, and such reports are scrubbed of project content.
2. How We Use Information
- to provide, operate, secure, and improve the Service;
- to authenticate you and manage your account and subscription;
- to process payments and prevent fraud and abuse;
- to provide support and respond to your requests;
- to understand reliability and fix problems; and
- to comply with legal obligations.
We do not sell your personal information, and we do not use your footage, audio, transcripts, or outputs to train machine-learning models.
3. Service Providers (Subprocessors)
We share information with a small set of providers strictly to operate the Service. Each processes data only as needed for its function:
| Provider | What it handles | Purpose |
|---|---|---|
| Deepgram | Extracted audio | Speech-to-text transcription with word timings |
| Anthropic | Transcript text + your editing goal | AI selection/arrangement of clips |
| Clerk | Name, email, authentication | Account sign-in and identity |
| Stripe | Payment details | Subscription billing and payments |
| Railway | Account & usage metadata | Hosting our backend service |
Our speech-to-text and AI providers process content submitted through their APIs to return a result to us and, per their applicable business/API terms, do not use that content to train their models. You can review their practices on their respective websites. We may update this list as our providers change; material changes will be reflected here.
We may also disclose information if required by law, to enforce our Terms, or to protect the rights, safety, and property of A2V Media, our users, or the public. If we are involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction.
4. Data Retention
- On your device: your footage, transcripts, caches, and outputs remain on your computer until you delete them. You control them.
- With us: we retain account, billing, and usage records for as long as your account is active and as needed for legal, accounting, and fraud-prevention purposes.
- At our providers: audio and transcript data are processed transiently to return your result and are handled according to each provider's retention practices; they are not retained by us as a content archive.
5. Security
We use reasonable technical and organizational measures to protect information, including encryption in transit, server-side handling of API keys (so they are never exposed in the app), and access controls. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.
6. Your Rights & Choices
Depending on where you live, you may have rights to access, correct, delete, or port your personal information, to opt out of certain processing, and to not be discriminated against for exercising these rights.
- California (CCPA/CPRA): we do not sell or "share" personal information as those terms are defined; you may request access or deletion.
- EU/UK (GDPR/UK GDPR): where applicable, you may exercise access, rectification, erasure, restriction, portability, and objection rights; our legal bases are performance of our contract with you, our legitimate interests in operating and securing the Service, and consent where required (e.g., opt-in crash reports).
- Account data: much of your content never leaves your device and can be deleted by you directly.
To exercise any right, contact [email protected]. We will respond as required by applicable law and may need to verify your identity.
7. Children
The Service is not directed to, and may not be used by, anyone under 18. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.
8. International Users
We operate in the United States, and our providers may process information in the United States and other countries. By using the Service, you understand your information may be processed in the U.S., which may have different data-protection laws than your jurisdiction.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will update the "Last updated" date above and, for material changes, provide additional notice where appropriate. Your continued use after the changes take effect constitutes acceptance.
10. Contact Us
A2V MEDIA, LLC — Connecticut, USA
Privacy questions: [email protected]