This policy explains what information Unpleat collects, why, who it’s shared with, and the choices you have. It applies to the Unpleat website, dashboard, Chrome extension, live tour script, share links and help centers (together, the “Service”).
1. Who we are
Unpleat is operated by Do The Thing LLC, a limited liability company organized in the State of New Mexico, United States (“we”, “us”). You can reach us about anything in this policy at [email protected].
We play two roles:
- For your account (your name, email, sign-in and billing details), we decide how the information is used. Under data protection laws such as the GDPR, we are the controller.
- For the content you record and publish (“Customer Content”), we process it on your behalf and following your instructions. You are the controller and we are your processor. Our Data Processing Addendum governs that processing.
2. Information we collect
Information you give us
- Account details: your name, email address and password. We store passwords only as a secure one-way hash, never in readable form.
- Sign in with Google: if you choose it, Google shares your name, email address and Google account ID with us. We never receive your Google password.
- Content you create: tutorial titles, captions, voiceover text, categories, help center settings, and the voice and display preferences you choose.
- Messages: anything you send us by email.
- Billing details: when paid plans are available, payments are handled by our payment provider (Stripe). We receive limited details such as your plan, billing country, invoices and the last four digits of your card. We never receive or store full card numbers.
Recordings made with the Chrome extension
The Unpleat Recorder extension only records when you press Start, and only the browser tab you’re recording (including content embedded in that page, such as a video or a booking widget). It stops when you press Finish or Discard. While recording, it captures:
- the structure and visible content of the pages you visit in that tab (text, layout, styles, images and other files the page uses), so the steps can be replayed as a video and guide;
- the addresses of those pages;
- your clicks, scrolling and the elements you interact with, and the timing between them;
- a screenshot of the tab at each step, used as the step’s thumbnail.
Text typed into form fields is masked: the recording shows that a field was filled in, not what was typed. Password fields are never recorded. Even so, a recording captures whatever is displayed on the pages you record, so avoid recording screens that show information you don’t want in a tutorial. Recordings are Customer Content (see section 1).
The extension also stores your connection key and the state of a recording in progress in your browser. We keep a description of the browser each connection is used from (for example “Chrome on Windows”) and when it was last used, so you can see and disconnect your devices.
Information collected automatically
- Technical and log data: IP address, browser and device type, pages requested and timestamps. We use it to run and secure the Service, for example to limit repeated sign-in attempts and to investigate errors.
- Email delivery records: when we send you an email, we log the time, recipient, subject and whether it was delivered, without the message content.
3. Visitors to live tours, share links and help centers
Our customers can publish tutorials through share links, help centers (for example how.unpleat.com/yourcompany) and live tours that run inside their own website through a script they install. If you’re a visitor to one of these:
- We don’t ask you for personal information, and we don’t use advertising or analytics trackers.
- The live tour script loads the tour from our servers and saves your progress through the tour and your sound preference in your own browser (local storage), so the tour can continue across pages. This information stays in your browser.
- Share links and help centers may set our session cookie (see section 6) and save your viewing preferences, such as subtitles or sound, in your browser.
- Our servers and our network provider receive standard request information (such as your IP address and browser type) in order to deliver the content.
The tutorial itself is published by our customer, who is responsible for its content. Questions about it, or about the customer’s own website, should go to that customer.
4. How we use information
- To provide the Service: create your account, record and process your tutorials into videos, guides and live tours, generate voiceovers, and host your help center and share links.
- To send service emails, such as confirming your email address, password resets, team invitations, receipts and important changes. We don’t send marketing emails without your permission.
- To keep the Service secure: preventing abuse, fraud and unauthorized access.
- To provide support and respond to your requests.
- To understand and improve how the Service works, using account and technical data.
- To meet legal obligations and enforce our Terms of Service.
We do not sell personal information, we don’t use it for advertising, and we don’t use your Customer Content to train artificial intelligence models.
Voices and automatic voiceovers
Automatic voiceover text is written by software that runs in your browser. Free voices also run entirely in your browser: the voice engine is downloaded from a public content network (jsDelivr), and your text is not sent to anyone. If you choose a premium voice, we send the voiceover text to our voice provider, ElevenLabs, which turns it into audio and returns it to us.
Legal bases (EEA, UK and Switzerland)
Where these laws apply, we rely on: performing our contract with you (providing the Service); our legitimate interests (keeping the Service secure, improving it and communicating with you about it), balanced against your rights; your consent, where we ask for it; and compliance with legal obligations.
5. Who we share information with
We share information only as needed to run the Service, with service providers that process it on our behalf under contract:
| Provider | What they do | Information involved |
|---|---|---|
| Our web hosting provider | Hosts our servers, database and files | All Service data |
| Cloudflare | Content delivery, DNS and security | Requests passing through our websites |
| MailerSend | Sends our emails | Your name, email address and the email’s content |
| ElevenLabs | Premium voices | Voiceover text, when you choose a premium voice |
| Sign in with Google | Sign-in information, only if you use it | |
| Stripe | Payments (when paid plans are available) | Billing details and payment information |
We may also share information: with people you choose, for example teammates in your workspace or anyone you give a share link to, or through a help center you publish; with professional advisers under confidentiality; when required by law or to protect rights, safety and the Service; and with a successor if our business is reorganized, merged or sold, subject to this policy.
6. Cookies and browser storage
We use one cookie, unpleat_session, which keeps you signed in and protects forms against forgery. It is strictly necessary for the Service. We don’t use analytics, advertising or tracking cookies.
We also save a few preferences in your browser’s local storage, such as whether the sidebar is collapsed, your video layout, and sound and subtitle settings. This information stays on your device.
If we ever add cookies that aren’t strictly necessary, we’ll update this policy and ask for your consent where the law requires it.
7. How long we keep information
- Account information: for as long as your account is open.
- Customer Content: until you delete it or your account. Recordings that were started but never finished may be deleted automatically.
- After deletion: data is removed from our active systems within 30 days, and from any backups within 90 days.
- Logs: security and email delivery logs are kept for up to 12 months.
- Billing records: kept as long as tax and accounting laws require.
8. Security
All connections to the Service are encrypted (HTTPS). Passwords, extension keys and one-time links are stored only as secure hashes. Access to systems is limited to people who need it to run the Service. No system is perfectly secure, so we can’t guarantee absolute security, but we work to protect your information and will notify you and the authorities of a data breach where the law requires.
9. International transfers
We are based in the United States, and our service providers may process information in the United States and other countries. When we transfer personal data from the EEA, UK or Switzerland, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses and their UK and Swiss equivalents.
10. Your rights and choices
Depending on where you live, you may have the right to access the personal information we hold about you, correct it, delete it, receive a copy in a portable format, object to or restrict certain processing, and withdraw consent you have given. You can update your name, email and password in Settings at any time.
To make a request, email [email protected]. We’ll verify your identity and respond within one month (or the time the law allows). We won’t treat you differently for exercising your rights. If you’re in the EEA, UK or Switzerland, you can also complain to your local data protection authority.
United States residents: residents of certain states (such as California, Colorado, Connecticut, Virginia and others) have rights similar to those above. We do not sell personal information or share it for cross-context behavioral advertising.
If your request concerns Customer Content (for example, you appear in a tutorial published by one of our customers), please contact that customer, who controls it. We’ll help them respond.
11. If you record other people’s information
When you record pages that show personal information about others, such as your users’ names or messages, you are responsible for having a lawful basis to do so and for giving any notices required. We recommend recording with test or demo data whenever possible.
12. Children
The Service is designed for businesses and is not meant for anyone under 16. We don’t knowingly collect personal information from children. If you believe a child has given us information, contact us and we’ll delete it.
13. Changes to this policy
We may update this policy as the Service changes. We’ll post the new version here with its date, and for significant changes we’ll notify you by email or in the Service before they take effect.
14. Contact
Do The Thing LLC
New Mexico, United States
Email: [email protected]