Privacy Notice

Leumos Private Limited, a company incorporated in India, is the controller of the information described here. We operate leumos.ai and Leumos AI Studio, a colour-grading tool that runs in your browser. Write to us about anything on this page at studio@leumos.ai.

• Your account. Your email address, whether it has been verified, the name on your Google account if you sign in that way, and a normalised form of your address so the same inbox cannot be registered twice. If you set a password, our identity provider stores it hashed; we never hold it and cannot read it.
• The footage and stills you work with. What leaves your computer, and when, is set out in full in the next section.
• Your projects. A project you save is kept in our cloud: its name, the names, sizes, dates and durations of the files you are working with, the timeline you build, the grades you make, the record of each reference match, and small preview thumbnails taken from your frames. The footage itself is not part of the project — see the next section for when footage is stored.
• Usage and technical information. Ordinary server records of your use: when you signed in, which requests your browser made, errors, and the network address and browser your device reports.
• Payment information. If you subscribe, Razorpay takes the payment and tells us the state of your subscription and the identifiers that let us match it to your account. We never receive or store your card number.
• What you send us. Anything you put in an email to us, and — if you joined our waitlist while it was open — the address, role and comments you submitted.

Opening a clip in the Studio does not upload it. Playback, scrubbing and most of the colour work read the file on your own machine. Four things do travel to us, and it is worth being exact about which.

• A small, low-resolution copy of a clip, sent automatically when you import it. The Studio needs to know where the shots change in your edit, and it works that out on our servers. This happens without a separate click, because it has to be ready the moment the clip appears. The copy is far below the quality of your original, and the original is not sent at this point.
• Frames, when you use reference matching.Your reference image is reduced and sent, along with frames from the shots you are matching. For a very short shot, or a file your browser cannot read on its own, the Studio sends that shot’s source instead — for a short clip that can be most of the file. The Studio tells you, shot by shot, which of the two happened.
• The complete file, when you export. Exporting uploads your original to our cloud storage, produces the graded result there, and gives you a time-limited link to download it.
• A copy of your footage, if you choose to keep one in our cloud. Some plans let you keep footage with a project so it opens on another machine. That is a choice you make; it does not happen on its own.

Your footage is yours, and so are the grades and looks you make from it. We do not use either to train models, we do not sell them, and no outside AI provider receives your material — the analysis runs on infrastructure we operate.

• To provide the service you asked for — creating and securing your account, opening and saving your projects, running the work you start, delivering your exports, and taking payment for a plan. This is our performance of our contract with you.
• To keep the service working and safe — diagnosing faults, preventing abuse and unauthorised access, and understanding load in aggregate. These are our legitimate interests, and yours.
• To measure how the website is used — only if you allow analytics. This is your consent, and you can withdraw it at any time.
• To meet legal obligations — keeping the records of payments that the law requires us to keep.

The service runs on Amazon Web Services. Account records are held in its US East (N. Virginia) region; projects, uploaded footage and exports are held in its US East (Ohio) region.

Using the service therefore means your information is transferred to and stored in the United States. Where the law requires a safeguard for that transfer, we rely on our providers’ standard contractual clauses and their equivalents.

We do not sell your information and we do not share it for anyone else’s advertising. A small number of providers process it on our instructions so that we can run the service:

• Amazon Web Services — accounts and sign-in, storage of projects, footage and exports, the computing behind the service, and delivery of account email such as verification codes.
• Google — signing in with Google, and website analytics if you allow it.
• Razorpay — taking subscription payments and issuing refunds.
• Resend — delivery of waitlist email. The waitlist form is no longer on the site; this covers what we received while it was.

When you choose a password, we check it against a public register of passwords exposed in known breaches, in a way that never sends your password or a full fingerprint of it anywhere.

We may also disclose information where the law requires it, or to establish or defend a legal claim. If the business is ever sold or reorganised, information may transfer with it, subject to this notice.

If you choose “Continue with Google,” we ask Google for three things and nothing else — openid, email and profile. From those we receive the email address on your Google account, the name on it, whether Google has verified that address, and an identifier that lets us recognise you next time.

We use that for one purpose: creating your Leumos account and signing you in. We never receive your Google password. We do not request access to Gmail, Drive, Contacts, Calendar, Photos or any other Google service, and we cannot read them. You can disconnect Leumos in your Google account’s security settings at any time; that stops future sign-ins but does not by itself delete your Leumos account.

The Video Color Check browser extension has its own extension privacy policy; the extension collects no data and makes no network requests.

Essential cookies keep you signed in and protect the sign-in itself. Google Analytics is optional: it does not load until you choose “Allow analytics,” and before that choice this website sends Google no analytics request at all. Advertising storage and personalisation stay denied even when you do allow analytics.

If you allow it, Google Analytics may process the page path and title, where you arrived from, approximate location, device and browser details, and engagement such as page views. That property keeps event and user-level data for up to fourteen months.

Our cookie policylists what is set, what it is for, and how to change your mind — you can withdraw consent at any time through “Privacy choices” in the footer.

• Your account and its details — until you ask us to delete them.
• A file you upload in order to export — seven days.
• The exported file and its download link — thirty days.
• Footage you keep in our cloud — thirty days from the last time you open it, and in any case removed within one hundred and twenty days.
• A project you delete — recoverable for thirty days, then permanently removed.
• Working files made while a grade is prepared — removed automatically within about half an hour; the records that track an upload in progress expire within a day.
• Website analytics — up to fourteen months, and only if you allowed analytics.
• Payment records — for as long as tax and accounting law requires.

Projects you have not deleted are kept while your account exists, so that your work is where you left it.

You can ask us for a copy of what we hold about you, ask us to correct it, ask us to delete it, object to or ask us to restrict a particular use, and withdraw a consent you have given. Withdrawing consent does not affect what was done before you withdrew it.

Write to studio@leumos.ai from the address on your account and tell us what you want done. There is no self-service delete button in the product yet — a person handles the request, and we will confirm when it is done. If you are not satisfied with our answer, you can complain to the data protection authority where you live.

Information is encrypted while it travels between your browser and us, and while it is stored with our providers. Your signed-in session is held in cookies that page scripts cannot read, and sign-in tokens are never written into browser storage. Each account’s projects and footage are addressed under that account and are not reachable from another one. No system is perfectly secure, so please use a password you use nowhere else, and tell us at once if you think your account has been reached.

The service is for people aged 18 and over. It is not directed at children and we do not knowingly collect a child’s information. If you believe a child has given us information, write to studio@leumos.ai and we will delete it.

If our practices change, this notice changes with them and the “last updated” date at the top moves. If a change materially affects how we handle your information, we will try to tell you before it takes effect.

Leumos Private Limited, India. For anything in this notice, including access, correction and deletion requests, write to studio@leumos.ai.