← Back to home

Privacy Policy

Last updated: February 25, 2026

Uncut Gems LLC (“we,” “us,” or “our”) operates the RoughCut platform (roughcut.com, app.roughcut.com). This Privacy Policy describes how we collect, use, disclose, and protect your information.

1. Information We Collect

Account Information: Name, email address, password (hashed), organization name, and billing information when you subscribe.

Audio Content: Audio and video files you upload for transcription and processing. We process this content solely to provide the Service and do not use it for any other purpose.

Generated Content: Transcriptions, story scripts, translations, music analyses, and exports we generate from your uploaded content.

Usage Data: Log data, device information, IP addresses, browser type, pages visited, and feature usage patterns.

Cookies: We use httpOnly secure cookies for authentication. We do not use third-party tracking cookies or advertising cookies.

2. How We Use Your Information

We use your information to: (a) provide, maintain, and improve the Service; (b) process your audio files and generate transcriptions, stories, and exports; (c) communicate with you about your account and the Service; (d) process payments and manage subscriptions; (e) detect and prevent fraud, abuse, and security incidents; (f) comply with legal obligations.

3. Third-Party Services

We use the following third-party services to provide the Service:

  • Cloud Infrastructure: Amazon Web Services (AWS) for file storage (S3), computing (ECS), and databases (RDS). Data stored in US-East-2 (Ohio).
  • AI Processing: OpenAI for transcription and natural language processing. Audio content is sent to OpenAI's API for processing. OpenAI's data usage policy applies.
  • Email: Resend for transactional emails (password resets, notifications).
  • Hosting: Vercel for frontend hosting. MongoDB Atlas for document storage.
  • Payments: Stripe for subscription billing (when applicable).

We do not sell, rent, or share your personal information or audio content with third parties for their marketing purposes.

4. Audio Content & Intellectual Property

You retain all rights to the audio content you upload. We claim no ownership of your audio files, transcriptions, or generated story scripts. We process your content solely to provide the Service.

Audio files are stored in encrypted AWS S3 buckets and are automatically deleted 90 days after project deletion, or upon your request.

Music files: You are solely responsible for ensuring you have valid licenses for any music you upload to the platform. We do not verify music licenses and accept no liability for copyright infringement related to music you upload.

Music analysis: When you upload music to the platform, we perform technical analysis of the audio file to provide our music sync features. This includes detection of tempo, key signature, energy levels, song structure, and lyrical content. This analysis is performed solely for the purpose of providing the Service to you. The analysis data is stored exclusively within your project, is not shared with any third party, is not used for training or improving any models, and is not redistributed in any form. No derivative works of your music are created — the original audio file remains unmodified. You may delete your music files and all associated analysis data at any time.

5. Data Security

We implement industry-standard security measures including: encryption at rest (AWS S3, RDS), encryption in transit (TLS 1.2+), httpOnly secure cookies for authentication, organization-scoped data isolation (every database query is scoped by organization ID), and regular security reviews.

6. Data Retention

We retain your account data for as long as your account is active. Audio files and generated content are retained for as long as the associated project exists. You may delete projects at any time, which schedules deletion of associated files within 90 days. Upon account deletion, all your data is permanently removed within 90 days.

7. Your Rights

You have the right to: access, correct, or delete your personal data; export your data; withdraw consent for processing; lodge a complaint with a data protection authority. Contact us at privacy@roughcut.com to exercise these rights.

8. Children's Privacy

The Service is not intended for individuals under 18. We do not knowingly collect information from children.

9. Changes to This Policy

We may update this policy. Material changes will be communicated via email or in-app notification at least 30 days before taking effect.

10. Contact

Uncut Gems LLC
Email: privacy@roughcut.com