Privacy policy
This policy explains what personal data Unrush processes, why, for how long, and how to exercise your rights. It covers the unrush.io website, the app.unrush.io application, the plugins for editing software and the desktop application. The French version (Politique de confidentialité) is the reference text; both versions say the same thing.
1. Who processes your data
The data controller is UNRUSH.IO, a French simplified joint-stock company (SAS), 47 rue Vivienne, 75002 Paris, France, registered with the Paris Trade and Companies Register under number 108 577 214.
For any question or to exercise your rights: contact@unrush.io.
2. Two situations
Your account data. When you create an account, request a demo or write to us, Unrush decides how this data is used: we are the data controller. This is the main subject of this page.
What your footage contains. The videos you upload show and record people. For that data, you — or your company — are the data controller; Unrush acts as a processor, on your instructions, under the data processing agreement. If you appear in a video entrusted to Unrush by one of our customers, please contact that customer; we will help them answer your request.
3. The data we process
| Data | Source | What it is used for |
|---|---|---|
| Name, email address, password (stored hashed) | Account creation | Identifying you, securing access |
| Organization, members, invitations, shares | You and your colleagues | Teamwork |
| Plan, invoices, payment identifiers (not the card number) | Subscription | Billing, accounting |
| Usage history: number of queries, uploaded volumes, transcribed hours | Use of the Service | Applying quotas, billing, sizing the Service |
| Your queries, instructions and project context; the answers produced | Use of the Service | Providing the Service, keeping your analyses |
| Feedback you send us from the application | You | Fixing and improving the Service |
| Technical logs: IP address, date, errors | Automatic | Security, troubleshooting |
| Demo form: name, email, company, profile, software, volume, message | You | Answering and preparing the demo |
| Meeting booking: name, email, chosen time slot | You, through our online calendar | Organizing the demo call |
Linked publishing accounts. If you link a TikTok, YouTube, Instagram or Twitch account from Settings › Exports & publishing, we store that account's identifier and public name, and an encrypted access token. They are used only to send the moments you choose to it: TikTok draft, private YouTube video, Instagram Reel, Twitch clip. We do not read your followers, messages or statistics, and nothing is published without an action from you. You can unlink an account at any time from the same page: the token is deleted immediately. You can also revoke access directly with the service: Google, TikTok (Security › Manage app permissions), Instagram (Settings › Apps and websites), Twitch.
YouTube. Unrush uses the YouTube API Services. By linking a YouTube channel, you agree to the YouTube Terms of Service; the data concerned is also subject to the Google Privacy Policy. From YouTube we only store your channel's name and identifier, and the identifiers of the videos you send to it from Unrush.
Data received from Google: who it is shared with. The data we receive from Google when you link a YouTube channel (channel identifier and name, encrypted access token, identifiers of the videos sent) is not sold, rented, shared with other users, or transferred to advertisers, data brokers or any other third party. It is not used for advertising, and it is not used to train any artificial intelligence model. The only recipients are:
- Google / YouTube itself: the video and the details (title, description, tags, visibility) you choose to send, when you click Publish;
- our application and database hosting provider, which stores it on our behalf, encrypted, without accessing it for its own purposes;
- authorities that request it within a legal framework, or an acquirer in the event of a merger or sale of Unrush, bound by this same policy.
Unrush's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. When you unlink your channel, or revoke access from your Google account, the token and the channel data are deleted immediately.
We do not collect sensitive data about you and do not make any automated decision producing legal effects concerning you.
4. Legal bases
- Performance of the contract: creating and managing the account, providing the Service, support, billing.
- Legal obligation: keeping accounting records, answering authorized authorities.
- Legitimate interest: security of the Service, fraud prevention, quota monitoring, product improvement based on usage statistics, business relationship with professionals.
5. Artificial intelligence
The Service analyzes your footage using artificial intelligence models provided by specialized providers. This processing is used only to produce the results you ask for. Your content is not used to train models, neither ours nor our providers': we only use business offers that contractually exclude it.
Unrush does not perform biometric identification of the people filmed. Names that appear in your results come from what you typed or from what is said or written in the video.
6. Who receives your data
Your data is accessible only to the Unrush staff who need it: support, technical operations, billing. Access to a customer's content is limited to the support they request and to incident resolution.
We use processors, bound by contract to the same obligations as us:
| Category | Role | Location |
|---|---|---|
| Application and database hosting | Running the Service | United Kingdom |
| Website and application interface hosting | Serving the pages; sees your IP address, not your content | European Union and United States |
| Cloud file storage | Storing your footage and thumbnails | European Union |
| AI video analysis services | Reading the videos and answering your queries | European Union and United States |
| Transcription service | Transcribing audio tracks | United States |
| Service email delivery | Invitations, password reset | European Union and United States |
| Payment provider | Collecting subscriptions | European Union and United States |
| Online calendar (demo booking) | Booking a slot; loaded only if you use the demo form | European Union and United States |
The identity of each processor is available on request at contact@unrush.io; the data processing agreement details their categories, the data entrusted and the processing locations. We do not sell any data, do not share any for advertising purposes, and do not use any audience tracking tool: see the cookie policy.
7. Transfers outside the European Union
The application database is hosted in the United Kingdom, a country covered by a European Commission adequacy decision. Some providers are established in the United States or process data there. These transfers are governed by the adequacy decision on the EU–US Data Privacy Framework when the provider participates in it, and otherwise by the European Commission's standard contractual clauses. You can request a copy at contact@unrush.io.
8. Retention periods
| Data | Period |
|---|---|
| Account and profile | For the duration of the contract; deleted within 30 days after the account is closed |
| Inactive account | After 24 months without login, we notify you; without an answer within 30 days, the account is deleted |
| Footage, projects, analyses, transcripts | Until you delete them, and at the latest 30 days after the end of the contract |
| Working copies at analysis services | 48 hours at most after the last processing |
| Audio tracks sent to the transcription service | Not kept by the provider after processing |
| Moments cut to MP4 (download, sending to a network) | One hour at most on our servers |
| Tokens and names of linked publishing accounts | Until you unlink the account or revoke access; deleted immediately |
| Named usage history | 24 months, then kept in aggregated and anonymous form |
| Technical logs | 12 months |
| Invoices and accounting records | 10 years |
| Demo requests and contacts | 24 months after the last exchange |
| Backups | Overwritten on a cycle of 30 days at most |
9. Security
Exchanges are encrypted in transit. Passwords are stored hashed, access keys and tokens encrypted. Files are stored in private storage, accessible through temporary signed links. Administrative access is restricted and individual. In the event of a data breach presenting a risk to you, we inform you and the CNIL (the French data protection authority) within the legal deadlines.
10. Your rights
You have the right of access, rectification, erasure, restriction, objection and portability, as well as the right to set instructions for your data after your death.
Write to contact@unrush.io from the address associated with your account; we answer within one month. You can delete your videos and projects yourself from the application.
If you believe your rights are not respected, you can lodge a complaint with the CNIL: cnil.fr.
11. Changes to this policy
We update this page when the Service or the regulations change. In the event of a significant change, account holders are notified by email or in the application.
Last updated: October 12, 2026