Privacy at unfill.io
This is what happens to your data when you use unfill.io. Written in plain English, updated when we change anything material.
The short version
- • Your recordings are automatically deleted within 24 hours.
- • Your transcripts and decks stay with your account so you can revisit them.
- • Generated decks are automatically removed 30 days after generation.
- • We don't train any model on your files.
- • We don't sell your data to anyone.
- • You can delete your account and data anytime.
Who we are
unfill.io is a product of Cloud Vertex LLC, a Florida limited liability company based in Jacksonville, FL, United States. When we say "we," "us," or "unfill" on this page, we mean Cloud Vertex LLC.
For any privacy question, email privacy@unfill.io. A real person reads it.
What we collect
Account information
If you create an account, we store your email address and a secure identifier from our authentication provider (AWS Cognito). We do NOT store your password — Cognito hashes and stores it on their infrastructure.
Recordings you upload
When you upload an audio or video file (or paste a URL to one), we temporarily store that file in an encrypted Amazon S3 bucket. We use it only to generate your transcript and deck. The file is automatically deleted within 24 hours — a lifecycle rule enforces this at the storage layer.
Transcripts
The transcript we generate from your recording is stored with your account so you can regenerate or refine decks later. Transcripts are text-only and much smaller than the recording. You can delete them anytime from your account.
Generated decks
The PowerPoint or PDF file we build for you is stored in an encrypted S3 bucket and available for you to download. Decks are automatically deleted after 30 days. You can also delete them earlier at any time.
Usage information
We keep basic technical records: which endpoint you hit, the response, and error logs. We use this to keep the service working and to fix bugs. We do not build advertising profiles from this data.
Cookies
When you sign in, we set HttpOnly, SameSite=Strict, Secure session cookies to keep you authenticated. These cannot be read by JavaScript, which protects them from cross-site attacks. We also use a small cookie to remember whether you've acknowledged our upload consent notice. We do not use advertising or analytics cookies.
Third parties we use
To provide the service, some of your data passes through the following processors. We picked each of them because they have strong security practices.
- Amazon Web Services (AWS) — hosts our servers, storage (S3), database (RDS), authentication (Cognito), email (SES), and CDN (CloudFront). All data is encrypted in transit (TLS) and at rest (AES-256).
- Deepgram — transcribes your audio into text. Your recording is streamed to Deepgram for transcription, then no longer retained on their side per their policy.
- Anthropic — turns your transcript into slide content using their Claude API. Anthropic's terms confirm they do not train models on API traffic.
- Zoho Mail — receives email sent to our unfill.io addresses. Used only for you contacting us; we don't share your email with Zoho unless you email us.
How long we keep things
| Data | Retention |
|---|---|
| Uploaded recordings | Deleted within 24 hours |
| Transcripts | Kept with your account until you delete them |
| Generated decks (PPTX / PDF) | Deleted after 30 days |
| Account (email + auth records) | Until you delete your account |
| Server logs | Up to 30 days for debugging |
Your rights
You have the right to know what we hold about you, to correct anything wrong, and to delete it. To exercise any of these, email privacy@unfill.io from the address on your account. We respond within 7 days.
You can also delete your decks and transcripts at any time from your account without emailing us. Account deletion is available on request — email us and we remove your account and all associated data within 7 days.
For users in the EU / UK
You have additional rights under GDPR (or the UK GDPR): the right to access, rectify, erase, restrict processing, object to processing, and data portability. To exercise any of these, email privacy@unfill.io. If you feel we haven't handled your request well, you can lodge a complaint with your local supervisory authority.
Security
We use industry-standard security practices: TLS 1.3 on all connections, AES-256 encryption at rest, HttpOnly + SameSite session cookies, JWT-based authentication with token rotation, and least-privilege access controls on our infrastructure. No system is perfect, but we take this seriously.
If you find a security issue, please email privacy@unfill.io with details. We'll respond within 48 hours.
Age minimum
unfill.io is intended for users aged 18 or older. We do not knowingly collect data from anyone under 18. If you believe a minor has created an account, email privacy@unfill.io and we will delete it.
Changes to this policy
If we materially change this policy, we'll email registered users at least 7 days before the change takes effect. For minor edits (typo fixes, clarifications), we update the date at the top and the change is effective immediately.
Governing law
This policy and any dispute related to it are governed by the laws of the State of Florida, United States, without regard to conflict-of-laws principles.
Questions?
Email privacy@unfill.io — a person reads it, not a bot.
Cloud Vertex LLC · United States