Privacy Policy

zlabz.io is a browser-based video editor. The videos, images and text you edit are processed entirely on your device using WebCodecs and FFmpeg WASM. Your raw creative content — footage, imports, exports — never leaves your browser unless you explicitly share or upload it.

We collect the minimum data needed to run accounts, billing, and support: an email address, basic profile info, and aggregated usage analytics. We do not sell your data, and we do not show ads.

• Account data — your email, display name, avatar URL, and auth provider ID through Clerk. Clerk manages authentication, password hashing, and session cookies.
• Project metadata — titles, timestamps, and settings for the projects you choose to save. Project contents themselves (text strings, highlight phrases, canvas config) are stored in our Convex real-time database only when you save a project.
• Support & feedback — any message you send via the feedback dialog or support tickets, along with the email it ties to.
• Billing — subscription status, plan tier, trial state, credit balance, and ledger entries. Card details are handled by Dodo Payments directly; we never see or store your card number.
• Aggregated analytics — page views, locale, referrer, performance metrics via Vercel Analytics and Umami. These are anonymised and not linked to individual accounts.

• Your uploaded videos, images or PDFs. Source assets are decoded, composited, and encoded in the browser via WebCodecs / Canvas / FFmpeg WASM.
• Exported video files. Exports download straight from your browser to your device.
• Card or bank details. Dodo Payments is the processor of record.
• Location data beyond what a standard IP address discloses at request time.

zlabz.io uses a small set of first-party cookies and localStorage entries to keep you signed in (Clerk session), remember your locale and theme preference, and cache open projects between tabs. No advertising cookies, no cross-site trackers, no fingerprinting.

• Clerk — authentication and session management.
• Convex — real-time database for account, subscription, and project metadata.
• Dodo Payments — subscription billing and card processing.
• Vercel — hosting and edge delivery. Vercel Analytics is used for performance metrics.
• Umami — privacy-focused, cookie-less page analytics.
• Mistral AI — server-side AI paragraph generation. Only the prompt you submit is sent; responses are returned immediately and not stored beyond the scope of your session.
• SearXNG — meta-search for the Frames and Object Match Cut modes. Only the query string is transmitted.

Account data is kept while your account is active. Deleting your account removes your profile, saved projects, tickets, and feedback entries. Billing records are retained for seven years or as required by tax law.

Depending on your jurisdiction you may have the right to access, correct, export, or delete the data we hold about you. Email us from the address on your account and we will respond within 30 days.

zlabz.io is not directed at children under 13. If you believe a child has created an account, contact us and we will remove it.

We may update this page as the product evolves. Material changes will be announced on this page and, where appropriate, via email. The "Last updated" date at the top always reflects the current version.

Questions, requests, or complaints? Message us through the support page or via our Telegram channel.