Privacy Policy

1. Who is the Controller?

We are Majapahit Limited, a company registered in Hong Kong under CR No. 78487472, which operates Offscreen AI at tryoffscreen.com. We process your personal data as a controller — that is, we determine how personal data is processed, for what purpose, for how long, and we select the processors who help us with that processing.

2. Contact Information

If you have any questions about how we process your data, you can reach us at support@tryoffscreen.com or through our Contact page.

3. Age Requirements

Our services are intended for users aged 16 and older. If you are under 16, you may only use our services with parental consent. We do not knowingly collect personal data from children under 13.

4. Our Declaration

As the controller of your personal data, we commit to the following:

• We process your personal data only on a valid legal basis — legitimate interest, contract performance, legal obligation, or your consent.
• We fulfill the information obligations under Article 13 of the GDPR before processing begins.
• We support you in exercising your rights under applicable data protection law, including the GDPR.

5. Scope of Personal Data and Processing Purposes

We process the following categories of personal data:

• Identity data — email address, name, profile information.
• Payment data — billing information and payment method details, handled by our payment processors. We do not store full card numbers.
• Technical data — IP address, device information, browser type, usage statistics.
• Social media data — OAuth access tokens, account identifiers, and channel or profile information from the platforms you connect (YouTube, TikTok, Instagram, Facebook).
• Usage data — credit consumption, subscription details, feature usage statistics.
• Generated content — video files, scripts, thumbnails, and other assets created or uploaded through the service.
• Communications data — email interactions and support communications.

Provision of services, contract performance

Your personal data — including your email and connected social media account information — is necessary for us to fulfill our contract with you: providing access to Offscreen AI, generating short-form video content, and publishing that content to the social media platforms you connect, at your direction.

Accounting

As a paying customer, we process your billing information to comply with legal obligations around issuing and retaining tax documents.

Marketing — newsletter

We use your email and name, along with engagement data (what you click, when you open emails), for direct marketing. If you are a customer, this is based on legitimate interest — we reasonably assume you are interested in product updates — for a period of 5 years. If you are not yet a customer, we only send marketing emails based on your consent, also for 5 years. You can withdraw consent at any time via the unsubscribe link in any email we send.

Advanced marketing based on consent

Only with your explicit consent do we send targeted offers or promotional content, for a period of 5 years. This consent can be withdrawn at any time through our contact information.

AI-powered services

We use your service usage data and stated preferences to improve our AI video generation capabilities. We do not use your personal data to train third-party or externally shared AI models. Our AI systems generate content based on your inputs and selections but do not make automated decisions that significantly affect your legal rights.

6. Data Retention

7. International Data Transfers

We store and process personal data outside the European Economic Area. These transfers are necessary to provide our services and are protected by Standard Contractual Clauses approved by the European Commission, and by adequacy decisions where available. Our service providers maintain appropriate safeguards for these international transfers.

8. Use of Google (YouTube) API Services

We use YouTube API Services to enable video uploads on your behalf when you connect a YouTube account. By connecting your YouTube account, you agree to be bound by the YouTube Terms of Service. Google’s Privacy Policy is available at policies.google.com/privacy.

When you connect your YouTube account, we store OAuth tokens (access and refresh tokens) solely to publish content you explicitly schedule or approve. You may revoke our application’s access at any time via your Google security settings.

If you wish to delete your stored data or disconnect your YouTube account, you can disconnect it from within Offscreen AI’s settings, which immediately deletes the stored tokens from our systems.

9. Use of TikTok, Instagram and Facebook APIs

When you connect a TikTok, Instagram, or Facebook account, we access and store OAuth tokens and basic profile or account identifiers solely to publish content at your direction. You can disconnect any account at any time from within Offscreen AI’s settings, which immediately deletes the associated stored tokens. Use of these integrations is also subject to TikTok’s and Meta’s respective platform terms and developer policies.

10. Google User Data

If you connect Google-related services to Offscreen AI:

• Google user data accessed — we access your email address, profile avatar, name, and YouTube channel name (if connected) to provide our services.
• No AI or ML training — we do not use data obtained through Google APIs to develop, improve, or train generalized AI or ML models.
• Limited data use— data obtained through Google APIs is used only for the specific purpose of providing Offscreen AI’s core functionality. We do not transfer Google user data to third parties for purposes other than providing or improving the application.
• Prohibited uses — we do not use data obtained via Google APIs for targeted advertising, sale to data brokers, credit-worthiness assessment, lending decisions, or any other advertising purpose not directly related to providing our service, in accordance with the Google API Services User Data Policy.

11. Cookies, Analytics and Advertising

This website uses and stores cookies — small files stored in your browser that collect information about your visit. When you browse our website, we record your IP address, session duration, and referral source. Using cookies to measure website traffic and customize page display is considered our legitimate interest, as it allows us to offer a better experience.

We use the following tools. Each sets its own cookies or identifiers and processes data under its own privacy policy.

• Google Analytics 4 — measures page views, traffic sources, and how visitors move through the site. It sets cookies beginning with _ga and may collect your IP address, device and browser information, and the pages you visit. You can opt out across all sites with the Google Analytics Opt-out Browser Add-on.
• Meta Pixel and Meta Conversions API — measure the performance of our advertising on Facebook and Instagram. The Pixel runs in your browser; the Conversions API sends the equivalent events from our servers, including your email address in hashed (irreversible) form when you have given it to us, so that Meta can match the event to an account without receiving the address itself. Manage what you see in your Meta ad preferences.
• Vercel Analytics and Speed Insights — measure traffic and page performance for our own hosting.
• PostHog — product analytics inside the Offscreen AI app, used to see which features are used and where people get stuck.

This means we share data with Google and Meta for traffic analysis, advertising conversion tracking, and ad performance measurement, including hashed identifiers used for ad matching. We do not sell your personal information, and we do not share your videos, scripts, or connected-account tokens with any of these tools. You can block or delete cookies in your browser settings at any time, though declining essential cookies may stop parts of the service from working.

12. Security and Protection of Personal Data

We protect your personal data to the maximum extent possible using modern technical and organizational measures appropriate to the current state of technology, to prevent misuse, damage, or destruction of your data. Data is transmitted over encrypted connections (HTTPS) and stored on secure cloud infrastructure.

In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected users within 72 hours where feasible.

13. Transfer of Personal Data to Third Parties

Our team members and collaborators have access to your personal data on a need-to-know basis. For processing operations we cannot handle ourselves, we rely on the following processors:

• Vercel — website and application hosting and infrastructure, plus traffic and performance analytics.
• Cloudflare R2 — object storage for generated assets.
• Stripe and Lemon Squeezy — payment processing.
• Resend — transactional and marketing email.
• Google — analytics via Google Analytics 4, and the YouTube API integration you authorize.
• Meta — analytics and conversion tracking via the Meta Pixel and Conversions API, and the Instagram and Facebook API integrations you authorize.
• TikTok — the TikTok API integration you authorize.
• PostHog — product analytics inside the app.

If we engage additional processors in the future, we commit to holding them to the same security and data-quality standards we hold ourselves to.

14. Your Rights

You have the following rights regarding your personal data. To exercise any of them, contact us via our Contact page.

• Right to information — fulfilled by this policy.
• Right of access — request what data we hold about you and why; we respond within 30 days.
• Right to rectification — correct outdated or inaccurate data.
• Right to restriction of processing — request that we limit processing under certain conditions.
• Right to data portability — receive your data in machine-readable form; we need up to 30 days.
• Right to erasure (“right to be forgotten”) — request deletion of your data from our systems, processors, and backups. We need up to 30 days, subject to legal retention obligations such as tax records. We will confirm by email once complete.

15. Complaint to a Data Protection Authority

If you believe we are not handling your data lawfully, you may file a complaint with your local data protection authority at any time. We would appreciate the chance to address the concern directly first, via our Contact page.

16. Unsubscribing from Newsletters and Commercial Communications

You can stop receiving marketing emails at any time by clicking the unsubscribe link included in every email we send.

17. Confidentiality

Our team members and collaborators who process your personal data are bound by confidentiality obligations regarding your data and our security measures. This obligation survives termination of their engagement with us. We will not release your personal data to any third party without your consent, except as described in this policy.

18. Related Documents

This policy should be read together with our Terms of Service and Refund Policy.