Privacy Policy
Last updated: 8 November 2026
This policy explains how Coherence Limited (“Coherence”, “we”) handles personal data when you use Pyntra at pyntra.ai, its API and command-line tools, or appear in content that Pyntra’s users upload. We are a company registered in the Republic of Cyprus (HE 490848), with registered office at 195 Arch. Makariou III, 3030 Limassol, Cyprus. Until 28 October 2026, Pyntra was operated by WHUT.AI LLC; from that date Coherence is responsible for it.
Contact for privacy questions and requests: office@coherenceltd.com. We have not appointed a data protection officer because the law does not require one for our processing; the email above reaches the person responsible.
1. Our role
- Controller. We decide how and why personal data is used for accounts and sign-in, workspace membership and invitations, billing and usage, security, usage records, learning from edits, and communications with you.
- On behalf of businesses. The footage, audio, images, briefs and presentations a business uploads to its workspace can contain personal data, for example the faces and voices of people in a video. That business decides what to upload and why, and we process it on the business’s behalf to provide Pyntra. If you appear in someone’s content, please contact that business first; we will help them respond.
2. What we collect and why
| Data | Where it comes from | Why | Legal basis (GDPR Art. 6) |
|---|---|---|---|
| Account data: email address, name, password (stored only as a hash), the workspaces you belong to and your role | You, or a colleague who invites you | Create your account, sign you in, run your workspaces | Contract (6(1)(b)) |
| Invitations: the invited email address, role, who invited and when | A workspace owner or admin | Send the invitation and let the right person join | Legitimate interests of the inviting business and ours in running workspaces (6(1)(f)) |
| Sign-in and security records: sign-in times, IP address, browser, actions in the workspace activity log | Your use of Pyntra | Keep accounts and Pyntra secure, investigate misuse | Legitimate interests in security (6(1)(f)) |
| Acceptance records: the business-use declaration (who, when, declared country, terms version) and auto-reload authorisations (who, when, limit, wording version) | Your confirmations | Prove what was agreed | Legal obligation and legitimate interests (6(1)(c), (f)) |
| Billing data: business name, billing email, address, VAT number and its VIES check, plan, invoices, card brand and last four digits | You and Stripe | Charge fees, issue invoices, meet tax and accounting law | Contract and legal obligation (6(1)(b), (c)) |
| Usage records: each paid action, its credits, the project and who started it; requests waiting for usage, with their typed text, for up to 30 days | Your use of Pyntra | Charge for usage, show usage, keep audit records | Contract and legal obligation (6(1)(b), (c)) |
| Content: footage, audio, images, briefs, scripts, chat with Pyntra, presentations, brand kits and style guides | You and your colleagues | Provide Pyntra | We process it for the business (section 1) |
| Learning data: your edits, ratings and revision notes, what Pyntra placed in your videos and signals such as a change you undid or a request you repeated, and the editing preferences learned from them | Your use of the video editor | Apply your preferences to your next videos, and find where Pyntra falls short so we can improve it (section 4) | Contract (6(1)(b)) for your preferences; our legitimate interest in improving Pyntra (6(1)(f)); you can switch it off |
| Support emails: what you tell us | You | Answer you | Legitimate interests (6(1)(f)) or contract |
You need to give us your email address to have an account. Billing details are needed to pay licence fees for a plan or extra usage.
No selling, no advertising. We do not sell personal data, do not share it for cross-context behavioural advertising, and do not use it for advertising.
Emails. We send sign-in codes, invitations, service messages and billing notices such as low usage or a failed automatic reload. Stripe emails invoices and receipts. If we ever send product news, each email will include a way to unsubscribe.
3. AI processing
Pyntra uses AI models to analyse footage, transcribe speech, plan, edit and review videos, write and design presentations, make pictures and understand requests. Most requests go through Vercel’s AI Gateway; the presentation editor also calls Anthropic directly. Each provider receives only what its step needs (section 5 lists them). Providers may keep requests for a limited time under their own terms, for example to detect abuse. We do not use your content to train AI models. We do not make decisions about you based solely on automated processing that have legal or similarly significant effects on you.
4. Learning from your edits
When you edit, rate or ask for changes to a video, Pyntra records what you changed and learns your preferences, for example caption style, pacing or where text sits, and applies them to your next videos. You can switch learning off, after which nothing more is recorded and your lessons stop applying, and you can turn off any single lesson. Where at least three people independently show the same preference, we may use it as a default for everyone. Such defaults are typed settings; they contain no footage, text or other content and do not identify anyone.
We also use these records to find where Pyntra falls short and to improve it. Alongside your edits we record what Pyntra placed in your videos (for example sound effects, graphics and on-screen effects) and signals such as a change you undid, a request you repeated or a thumbs-down. A small number of Pyntra staff can review these records, including the short text you typed in a request or rating note and which video it was about, but never your footage, audio or transcripts. We may use the text of requests Pyntra handled badly as test cases when we improve it; a test case keeps only that text, without your name, workspace, project or video, and is deleted within 12 months. Switching learning off stops this recording too.
5. Who receives personal data
We share personal data only with providers that process it for us to run Pyntra:
| Provider | What for | What it receives |
|---|---|---|
| Supabase | Database, sign-in and file storage, in the United States (N. Virginia) | Account data, workspace content and uploads |
| Vercel | Hosting, scheduled jobs, the machines that prepare and render video, and the AI Gateway (United States) | Requests and IP addresses; content while it is processed |
| Anthropic (Claude) | Plans and edits videos, writes and edits presentations, reads brand files | Briefs, transcripts, descriptions of footage, slide content, chat |
| OpenAI (GPT) | Reviews each video edit plan as a second opinion | Edit plans, transcripts and descriptions of footage |
| Google (Gemini) | Watches footage and linked YouTube reference videos to describe what is in them; summarises rating notes for learning | Video frames and footage, YouTube links, rating notes |
| ElevenLabs (Scribe) | Transcribes speech in footage | Audio from footage |
| Black Forest Labs (FLUX) | Makes pictures for presentations | Picture descriptions written from your brief |
| TypeSafe AI (Jev) | Classifies briefs, file names, script lines and chat requests; finds where a speaker's face is in the frame so a crop can follow it (it does not identify anyone) | Short text from briefs, file names, transcripts and chat; still frames from footage, requested with zero data retention |
| Stripe | Payments, invoices and the billing portal, on Coherence Limited's account | Business name, billing email and address, VAT number, card details (held by Stripe) |
| Resend | Sign-in codes, invitations and billing notices | Email addresses and message content |
| Firecrawl | Reads a website you ask Pyntra to import a brand from or research | The web address |
| Jina AI | Reads a public web page when Firecrawl cannot | The web address |
| Unsplash | Image search for presentations | Search words |
| Pixabay | Stock video search for B-roll | Search words |
Stripe also acts as a controller for its own fraud-prevention and legal duties. We also disclose data where the law requires it, to protect rights and safety, or to a buyer of our business, who would have to respect this policy.
6. International transfers
Pyntra’s database (Supabase) and servers (Vercel) are in the United States, and several providers above are based there. This is a transfer outside the European Economic Area. We rely on the EU–US Data Privacy Framework where the provider is certified and on the European Commission’s Standard Contractual Clauses otherwise. You can ask us for a copy of the relevant safeguards at office@coherenceltd.com.
7. How long we keep data
| Data | How long |
|---|---|
| Account data | While your account exists; deleted within 30 days after you ask us to delete it |
| Workspace content | While the workspace exists; deleted within 30 days after it is deleted |
| Source footage in an inactive Free workspace | May be deleted after 180 days without use, after emails 30 and 7 days beforehand; projects and finished exports are kept |
| Invitations | Deleted 30 days after they close (accepted, declined, revoked or expired); the activity log keeps the event without the email address |
| Learning data | While your account exists; switching learning off stops new recording. Request text kept as an anonymous test case: up to 12 months |
| Billing, usage, acceptance and activity records | Seven years after the end of the year they relate to, for Cyprus tax, accounting and audit obligations |
| Support emails | Up to 24 months after the conversation ends |
| Hosting request logs | The hosting provider's short log period |
8. Your rights
Under the GDPR (and similar laws where you live) you can ask us to give you a copy of your personal data (access), correct it (rectification), delete it (erasure), limit how we use it (restriction), give it to you or another provider in a machine-readable format (portability), and stop using it where we rely on legitimate interests (objection). Where we rely on consent, you can withdraw it at any time without affecting earlier processing.
Email office@coherenceltd.com. We reply within one month, and may need to confirm your identity. We do not charge for requests unless they are clearly unfounded or excessive. We honour these rights for everyone, wherever they live; if you are a California or other US state resident, this includes the right to know, delete and correct, and we do not sell or share your personal information.
Complaints. You can complain to the Cyprus supervisory authority: the Office of the Commissioner for Personal Data Protection, 15 Kypranoros Street, 1061 Nicosia (P.O. Box 23378, 1682 Nicosia), Cyprus; telephone +357 22818456; commissioner@dataprotection.gov.cy. You can also complain to the authority where you live or work. We would appreciate the chance to help first.
9. Security
Each workspace’s data is separated at the database level by row-level security, and a person removed from a workspace loses access with their next request. Passwords are stored only as hashes, invitation links are stored only as hashes and work once, and connections use TLS encryption. If a breach puts your rights at risk, we will tell you and the authority as the law requires.
10. Cookies
We use only cookies that are strictly necessary: to keep you signed in, to remember your workspace and to remember your light or dark theme. We do not use analytics, advertising or tracking cookies.
11. Children
Pyntra is for businesses and is not directed at anyone under 18. We do not knowingly collect data from children.
12. Changes
We will update this page when our practices change and show the date of the latest version above. If a change materially affects how we use your data, we will tell account holders by email before it takes effect. The Terms and Licence set out the licence on which businesses use Pyntra.