Privacy Policy

What we collect, why we collect it, who helps us run PithPlay, and the choices you have

Last updated: October 1, 2026
Effective date: October 1, 2026
Status: PithPlay is in beta

In short

  • PithPlay is run by Artbits Solutions Ltd. in Ontario, Canada. We follow Canada's privacy law (PIPEDA), and we honour access, correction and deletion requests from users wherever they live.
  • We collect what we need to run PithPlay: your account details, the content you upload, billing records and some technical data.
  • Your project content is visible only to you and the people you work with on that project (and to us when we need it to run or support the service).
  • We use a small set of providers, such as Firebase, Cloudflare, MongoDB on Azure, Stripe and Azure OpenAI, and we name them all below.
  • We don't sell your data, we don't use it for advertising, and we don't use your content to train AI models.
  • Want your account deleted? Email info@pithplay.com and we'll delete it within 30 days, apart from records the law makes us keep.

1. Who we are

PithPlay is a video-editing collaboration platform run by Artbits Solutions Ltd., a company based in Ontario, Canada. We're responsible for the personal information described in this policy. It covers pithplay.com, the app at app.pithplay.com, and the emails and services connected to them.

Questions or requests? Email info@pithplay.com. We'll respond within 30 days.

2. What we collect

Account details

  • Your name, email address and role (creator or editor), plus profile details you choose to add.
  • Your password is handled by Google Firebase Authentication. We don't keep it in our own database.

Your content

  • Videos, images, audio and reference files you upload.
  • Annotations, project briefs, notes, tasks and revisions.
  • Files and notes that editors upload to the projects they work on.

Billing details

  • Your plan, your Stripe customer and subscription IDs, invoices, and the billing address Stripe collects to work out sales tax.
  • We never see or store your full card number. Card details go straight to Stripe.

Usage and technical data

  • Server logs, your IP address (used for security and rate limiting), and basic device and browser information.
  • Records of important actions, such as sign-ins, invitations and plan changes, so we can keep accounts secure and help when something goes wrong.

Emails and messages

  • The service emails we send you: email verification, password resets, editor invitations and project notifications.
  • What you send us, for example through our contact form or by email to support.

Website and app statistics

  • On pithplay.com: page-view statistics from Cloudflare Web Analytics, which doesn't use cookies, and Google Analytics data only if you choose "Accept All" on our cookie banner.
  • In the app: usage statistics from Google Analytics for Firebase, such as which screens are visited and basic device and browser information.
  • Our Cookie Policy has the details.

3. How we use it

  • To run PithPlay: creating your account, storing and streaming your videos, sharing projects with the people you choose, and creating download links.
  • To bill you for paid plans, work out sales tax and keep the records tax law requires.
  • To send service emails such as verification, password resets, invitations and project notifications.
  • To keep PithPlay safe: spotting abuse, preventing fraud, rate limiting and investigating problems.
  • To support you when you contact us.
  • To improve PithPlay using statistics about how the service and website are used.
  • To generate AI suggestions, only when someone on a project chooses to use that feature (see section 6).
  • To meet legal obligations, such as tax rules or valid legal requests.
What we don't do

We don't sell your personal information or your content. We don't use your data for advertising. We don't use your content to train AI models.

4. Who can see your content

  • Creators and editors: a creator's project content (video, annotations, brief and assets) is visible to the editor the creator assigns. Files and notes the editor uploads are visible to that creator. Other users can't see your projects.
  • Download links: links to files are signed and expire. Handoff links expire after 7 days. Anyone who has a link can use it until it expires, so share links with care. Once a file is downloaded, that copy is outside our control.
  • Our team: a small number of people at Artbits may access account or project data when it's needed to run the service, fix a problem you've reported, keep PithPlay secure or meet a legal obligation.

5. Service providers we use

We use these providers to run PithPlay. They handle data on our behalf and only for the purposes below.

Provider What they do for us Data involved
Google Firebase Authentication Accounts and sign-in Name, email address, password (stored by Firebase), sign-in activity
Cloudflare Hosting the website and app, running our API, file storage (Cloudflare R2), sending service emails, and Cloudflare Web Analytics on the marketing site Your uploaded files, the data passing through our API, email addresses and email content, IP addresses, cookieless page-view statistics
MongoDB, hosted on Microsoft Azure Our main database Account, project, annotation, task and billing records
Stripe Payments, invoices and sales tax calculation Payment card details (held by Stripe, never by us), billing address, plan and invoice details
Microsoft Azure OpenAI Optional AI task suggestions Project text sent when the feature is used (see section 6)
Google Analytics (including Google Analytics for Firebase) Website statistics on pithplay.com (only if you choose "Accept All"), and usage statistics in the app Pages or screens visited, device and browser information, approximate location

Where your data is processed

Your data may be stored and processed in Canada, the United States and other countries where these providers operate. Privacy laws there may differ from those where you live, and authorities there may be able to access the data under local law. We choose established providers and rely on their contractual and security commitments to protect your data.

Other times we may share data

  • When the law requires it, such as in response to a valid court order, or to protect people's safety or our legal rights.
  • If our business changes hands, for example in a merger or sale. Your data would stay protected by this policy, and we'd tell you before it became subject to a different one.

6. AI features

  • PithPlay's AI task suggestions are optional. Nothing is sent to the AI service unless someone on the project chooses to use them.
  • When they're used, we send project text (the brief, annotation text, task text and related details such as timestamps, asset notes and links to attached files) to Microsoft Azure OpenAI to generate editing guidance. We don't send your video or audio files themselves.
  • This runs under Microsoft's enterprise terms, which do not permit using customer data to train their models. We don't use your content to train AI models either.
  • The suggestions that come back are stored with the project, like any other project data.

7. How long we keep data

Data How long we keep it
Account details and content Until you delete the content or ask us to delete your account
Uploads that were started but never finished Cleaned up automatically
Invoices and billing records As long as tax and accounting laws require, even after your account is deleted
Backups A limited time, after which they're overwritten
Security logs and support emails As long as needed to keep PithPlay secure and help you, then deleted
Deleting your account

There's no self-serve account deletion yet. Email info@pithplay.com from the email address on your account and we'll delete your account and content within 30 days, except records the law makes us keep (like invoices). Please download anything you want to keep first, because deletion can't be undone. Files an editor or creator has already downloaded stay with them.

8. How we protect your data

What we do
  • HTTPS (encrypted connections) everywhere
  • Signed download links that expire
  • Access checks, so people only see their own projects or projects they're assigned to
  • Rate limiting to slow down abuse
What our providers do
  • Firebase handles passwords and sign-in
  • Stripe handles card details
  • Cloudflare, MongoDB on Azure and our other providers run their own security programs

No system is perfectly secure, and we can't guarantee that your data will never be accessed, lost or changed without permission. If a breach of your personal information creates a real risk of significant harm to you, we'll tell you and report it as Canadian law requires.

Found a security problem? Please email info@pithplay.com.

9. Your rights and choices

Wherever you live, you can ask us to:

  • Access the personal information we hold about you, and get a copy of it;
  • Correct information that's wrong or incomplete;
  • Delete your account and personal information (apart from records the law makes us keep); or
  • Withdraw consent to optional uses, such as analytics cookies, at any time.

Depending on where you live (for example, the European Union, the United Kingdom or California), you may have other rights too, such as objecting to or restricting certain uses. We'll honour these where they apply to us. We don't sell or "share" personal information for advertising.

To make a request, email info@pithplay.com. We may need to confirm your identity first, and we'll respond within 30 days.

If you're not happy with how we've handled your information, please tell us. You can also complain to the Office of the Privacy Commissioner of Canada, or to the privacy authority where you live.

10. Cookies and browser storage

  • On pithplay.com: we use essential storage to remember your cookie choice, cookieless Cloudflare Web Analytics, and Google Analytics cookies only if you choose "Accept All".
  • In the app: we use browser storage to keep you signed in (Firebase) and to remember preferences like draft projects and your frame-rate choice. The app also uses Google Analytics for Firebase for usage statistics.
  • We don't use advertising cookies. Full details, including how to change your choice, are in our Cookie Policy.

11. Children

PithPlay isn't meant for anyone under 16, and we don't knowingly collect personal information from children under 16. If you believe a child under 16 has given us personal information, email info@pithplay.com and we'll delete it.

12. Changes to this policy

We'll update this policy as PithPlay changes, and the date at the top shows when it last changed. For material changes, we'll tell you by email or in the app before they take effect.

13. Contact us

Privacy questions and requests

Email: info@pithplay.com

Also: info@artbits.solutions

Response time: within 30 days

Company

Company: Artbits Solutions Ltd.

Location: Ontario, Canada

Support: support@pithplay.com

This Privacy Policy was last updated on October 1, 2026.