PRIVACY NOTICE

PRIVATE WORK STAYS OUT OF THE PUBLIC STORY.

DigiBridge Inc, a Delaware corporation, is responsible for the personal information described in this notice. We use account information and permitted process evidence to support human creation verification. This notice covers our website, workspace, connected recording features and support services.

Updated 30 September 2026Recording and sharing choicesPlain language notice

Optional social connections

Confirm access to the accounts you share.

Connecting a social account is your choice. We use the provider’s response to confirm access and show a dated reference beside your public profile. The connection does not authorise posting, message access, video collection or AI training.

A confirmation expires after 30 days unless renewed. Disconnecting removes the current public indicator. Provider permissions can also be removed through the provider’s settings. We discard access tokens after the check, so a later provider change is not automatically detected. Connection history may be kept to protect account links and resolve disputes under the retention purposes below.

WHAT WE MAY HANDLE

DATA WITH A JOB TO DO.

DigiBridge uses data to operate accounts, connect contributions, check the recorded process, apply publishing rules and review disputed findings. The fields collected depend on the features and recording permissions you use.

Account and profile data

Contact details, account type, creator biography, public links and profile images you provide. Identity checks add a verification reference, status and review information for the account.

Workspace and record data

Registered projects, selected versions, contributor roles, activity summaries, declarations, permission history and review decisions. These may be supplied by you, your collaborators or authorised reviewers.

Device and proof context

Disclosed recording data can include event categories, timing, coarse movement, device and session references, supported tool context, hashes and signatures. It excludes typed content and source creative files.

Service and transaction data

Sign in events, device and browser details, network and error logs, billing and referral records, enquiries and support conversations. A support attachment is information you deliberately send, separate from activity recording.

PRIVATE CREATIVE MATERIAL

YOUR SOURCE FILES STAY WITH YOU.

Excluded from activity evidence collection

Raw audio, video and source files
Editing projects, stems and masters
Raw keystroke text or passwords
Lyrics, prompts and scripts
Screenshots or screen recordings
Unrelated application contents

You do not need to send unreleased footage, audio, project files or passwords to explain a finding. If you deliberately attach material to a support request, we handle it for that request. Send only what is necessary and remove confidential details first.

PUBLIC AND PRIVATE

YOU CHOOSE THE PUBLIC STORY.

Private workspace

Preparation stays private

Workspace membership, device details, private evidence, internal project fields and unpublished assets stay behind access controls. Individual account policy marks and review cases remain private.

Selected publication

Approved fields can be published

Publishing shares the permitted profile, contribution and version information you approve. A recipient sees the published record and its current status, rather than your private workspace or detailed input history.

Why we use personal information

Where UK or European data protection law applies, our reasons for processing include providing the agreement you enter with us, your consent, the legitimate interests explained below and legal obligations. We collect information directly from you, through the features you authorise, and from account, payment and identity providers or people working with you.

Understand campaign interest

Campaign links count redirect requests in aggregate without storing an IP address, browser fingerprint or individual visitor identifier. Campaign and referral parameters can be stored in your browser and included with your registration, so we can identify the source of an enquiry or signup. Request counts can include repeated visits or automated requests and are not a count of individual people.

Provide your account and workspace

We use account, project, membership and service information to deliver the service you request, manage access, respond to support and administer your agreement.

Record and analyse with permission

The recording disclosure identifies the permitted activity and retention choice. AI analysis requires separate permission. Withdrawing either permission stops the corresponding future processing; it does not undo processing already completed lawfully.

Protect accounts and review evidence

We use security, permission and review information for our legitimate interests in preventing misuse, protecting other users and applying the programme fairly, subject to your rights. A model suggestion alone does not decide a programme penalty.

Meet legal obligations

We retain and use information when required for applicable tax, accounting, lawful requests and other legal obligations. Where processing relies on another legal basis, the relevant feature notice explains it.

AI analysis and programme review

Your dedicated AI verification agent reads the process evidence you authorise for analysis. It supports checks for prohibited AI assistance and software generated control, explains relevant activity and helps reviewers consider your response. It cannot operate your creative tools or change the original evidence.

Findings include the affected recording, reason, evidence references, confirmation state and review decision. AI suspicion and gaps alone are not confirmed incidents. The first confirmed incident holds the affected version; the third distinct confirmed incident makes the project ineligible for directory submission and publication. Personal policy cases remain restricted.

Permission to analyse a recording is limited to its disclosed purpose. It is not permission for unrelated research or model training. Any new use needs its own applicable notice and permission before it begins.

Retention and recording choices

Detailed input recording offers a retention choice of up to 30 days, with shorter choices in its disclosure. This choice applies to those details, not every account, summary or review record.

Other retention depends on the purpose: maintaining your account and requested records, resolving a dispute, protecting the service or meeting legal obligations. Closing an account or withdrawing permission does not automatically erase records that must be retained for those reasons. Ask us about the category and period relevant to your request.

Account details and the required identity check are necessary for access to protected recording features. Public profile details and publication are separate choices. Declining recording or AI permissions limits the corresponding feature, rather than granting wider access to your computer.

AI help and reviewed replies

You can read our help topics or contact the team without enabling AI help. If you choose AI help, keep your question general and leave out passwords, identity documents and private creative material. Questions that need account access or a decision are directed to the team.

Our team may use AI to prepare a reply to an enquiry you send us. Drafts are suggestions for an administrator to review and edit. We record the request purpose, operator, model, usage and outcome to manage the service. Prompts are not included in this usage log. The API is configured not to store responses for later retrieval; provider security and abuse monitoring rules may still apply.

SERVICE PROVIDERS

WHO HELPS DELIVER THE SERVICE.

Providers receive information for the service they perform. Authorised workspace members and reviewers receive information within their access and review scope. Information may also be disclosed to professional advisers or authorities where necessary for a legal obligation, claim or protection of rights.

Connected social accounts

If you choose to connect YouTube, Instagram or X, the provider returns an account identifier, display name, handle and profile address. We keep the access confirmation and its date, not the provider token. Connected handles appear publicly only when your DigiBridge profile is published.

Account, hosting and service operations

Providers that support sign in, storage, service delivery, diagnostics and security process the information needed to operate and protect your account and records.

Identity verification through Sumsub

Sumsub handles identity documents and liveness material, which may include facial biometric checks, in its verification flow. DigiBridge receives the account check status and relevant review information, not a copy of your ID document or liveness media in your creative record.

Payments and communications

Payment providers handle checkout and billing. Communication providers deliver account, verification and service messages using the contact details needed for that message.

Help and communication drafts through OpenAI

If you enable AI help, OpenAI receives your question and approved product guidance to find a relevant answer. When an administrator requests a draft, OpenAI receives limited text from the selected support conversation, sales contact or campaign. Attachments, identity documents and creative source files are excluded. An administrator reviews suggestions before sending a message.

Authorised AI analysis

Where AI analysis is enabled with your separate permission, an analysis provider may process the permitted process evidence to support verification review. The feature disclosure explains its data scope and processing arrangements before you enable it.

Read the identity notice and any biometric consent presented before starting a check. Sumsub also explains its own processing purposes in its privacy notice.

Cookies and service storage

Cookies and browser storage support sign in, security, saved interface choices and continuity of support conversations. Blocking them can interrupt those features. A guest support session uses a cookie that expires after 30 days; this is not the retention period for its conversation.

Review any separate cookie or feature notice before enabling optional uses. A public profile or record can be copied or indexed by others once you publish it. Withdrawing it from DigiBridge does not remove copies held elsewhere.

Where information is processed

DigiBridge operates across the United States and United Kingdom. Service providers may process information in other countries. The applicable arrangements depend on the feature and provider, including any safeguards required for an international transfer.

Contact us for the processing locations and transfer information relevant to your account or a proposed organisation agreement. Do not assume a particular country of storage from the location of your workspace or our company.

YOUR CHOICES

CONTROL BEFORE PUBLISHING.

  1. 01

    Connect or disconnect optional social accounts separately from your identity check.

  2. 02

    Choose whether to publish your profile and permitted project record.

  3. 03

    Review contributor and record details before publication.

  4. 04

    Disconnect a paired device when you no longer want it linked to your account.

  5. 05

    Choose the recording scope and pause or stop recording in the Mac app.

  6. 06

    Grant or withdraw AI analysis permission separately from recording and publication.

  7. 07

    Contact support before sharing confidential material you are unsure about.

Your privacy rights

Depending on your location and the law that applies, you may request access, correction, deletion or a portable copy of personal information, restrict or object to processing, and withdraw consent. Applicable rights may also include opting out of sale, targeted advertising or certain profiling. We will assess the request against the processing involved and explain any relevant exception.

Use our contact page to make a request or appeal a response. We may need to confirm your identity and authority without asking for unnecessary documents. You can also complain to your local data protection authority. UK residents can contact the ICO; Delaware residents can contact the Delaware Department of Justice. Exercising a privacy right is separate from challenging a programme finding.

We update this notice when our practices change and provide additional notice where required for a material change. An updated page does not itself authorise a new use of your existing information.

QUESTIONS, RIGHTS OR CORRECTIONS?

Contact us about account information, recording data, correction, deletion or a disputed finding. Include the relevant account or record reference, and keep source files and credentials out of the message.

DigiBridge help

FAQs, support and sales

What can we help with?

Find a quick answer or leave a message for our team. Replies appear here.