Privacy

CreatorMission is a product operated by Swepth Oy, a company registered in Finland with Business ID (Y-tunnus) 3619574-3, at Kampinkuja 2, 00100 Helsinki, Finland. CreatorMission is a brand and product name, not a separate company.

Swepth Oy is the controller for the personal data described here. For anything in this policy, write to privacy@creatormission.com. For help with the product, write to support@creatormission.com.

Your campaigns, clip records, edit state, transcripts, confirmations and small assets such as a logo image are stored by the application in your browser’s own storage (IndexedDB) on the machine you are using. They are not transmitted to Swepth Oy by the product.

That local record can of course contain information you typed into it — a campaign brief, a client’s name, a transcript of someone speaking. We do not receive that information merely because it exists on your device. If you want it gone, clearing the site data for CreatorMission in your browser removes it, and there is no copy elsewhere for us to restore.

Being precise about the claim that matters most:

• A source video is opened from your own disk. The browser grants the application permission to read that file.
• It is read and processed locally — scrubbing, trimming, preview and rendering all decode from the file on your machine.
• CreatorMission's editing workflow does not upload your source video to us, and there is no code path in the editor that sends it to a server.
• The exported MP4 is encoded locally and saved by you, wherever you choose to put it. It does not pass through our infrastructure.

A description of each source you have opened — file name, size, duration and dimensions — is kept in that local browser record so the application can recognise the file if you pick it again. The description is not the file, and the file itself is not stored by us.

Transcription runs on your machine. The first time you generate captions, your browser downloads a speech recognition model — currently the open whisper-base.en variant distributed through the Hugging Face CDN — and caches those files locally so later clips do not download them again. After that the model runs in a worker on your own device.

Downloading a file means contacting the service that hosts it, so the provider delivering the model can see the ordinary network information any download involves, such as your IP address and request metadata. What is not sent is the material being transcribed: CreatorMission does not transmit your audio or video to that provider, or to anyone else, for transcription.

CreatorMission is a web application, so your browser has to download it. We will not claim that no data ever reaches a server: serving a page inevitably involves the infrastructure delivering it receiving connection data — IP address and network information, the request and response metadata, and the security and error logging that hosting and CDN providers keep as a matter of course.

This processing is necessary to deliver a working, reasonably secure service, and we rely on our legitimate interests in operating and protecting it. We do not use that data to build a profile of you or to track you between visits.

If you email support@creatormission.com or privacy@creatormission.com, we obviously receive what you send: your email address, your message and anything you attach or quote. We use it to

• answer you and provide the support you asked for, relying on our legitimate interests in responding to people who contact us, or on steps taken at your request in relation to an agreement where that applies;
• operate and protect the service, including handling abuse and security reports, relying on our legitimate interests;
• comply with legal obligations where any apply to the correspondence; and
• establish, exercise or defend legal claims where that becomes necessary, relying on our legitimate interests.

Please do not send us source footage or sensitive material we did not ask for. We do not need it to help you.

As of the date at the top of this page, CreatorMission runs no analytics, no product telemetry, no advertising pixels and no marketing or behavioural trackers, on this website or in the application. Nothing intentionally reports your usage back to us.

We are not promising this can never change. If it does, this page will describe it plainly before the change ships, and anything requiring consent will ask for consent.

There is a difference worth keeping straight. The application stores data on your device because that is how it works — IndexedDB for your projects, the browser cache for the downloaded speech model, and temporary local storage while a long export is written. That storage is strictly necessary to provide the service you asked for, and it stays on your device.

Separately, there are advertising and analytics cookies. We do not set any. That is also why you are not being shown a cookie banner: there is no non-essential tracking here to consent to, and putting up a consent dialog for project data that stays in your own browser would be theatre.

We do not sell personal data and we do not share it for advertising. Data is handled by others only in these categories, and only as far as delivering the service requires:

• Hosting, CDN and domain infrastructure providers, which process connection data in order to deliver this website and the application to your browser.
• The infrastructure distributing the speech model files, for the first-run download described above.
• Email and related service infrastructure, when you write to us.
• Professional advisers or authorities, where we are legally required to disclose something or need to establish or defend a legal claim.

These are stated as categories on purpose. Naming a specific vendor we have not finalised would be less accurate, not more; when the production infrastructure is settled, this section will name what needs naming.

We are based in Finland, but internet infrastructure providers commonly operate globally, so we cannot claim that every request is handled inside the EEA. Where personal data is processed outside it, we use transfer mechanisms and safeguards required by applicable data protection law. If you would like to know how a particular transfer is covered, ask at privacy@creatormission.com and we will tell you what applies at that time rather than guess here.

• Local project data — campaigns, clips, transcripts, assets — stays in your browser on your device until you or your browser removes it. We cannot delete it for you, because we do not have it.
• Correspondence with support or privacy is kept only as long as reasonably necessary to handle the request and any related operational or legal purpose, and longer only where law requires it.
• Infrastructure and security logs are kept for the limited period justified by operating and protecting the service, in line with the configuration and arrangements of the providers involved.

We would rather give you the criterion than invent a number we do not yet apply. When production infrastructure is finalised, the log retention period will be stated exactly.

Under the GDPR you have the right to request access to your personal data, to have it corrected or erased, to restrict or object to processing, to receive it in a portable form where that applies, and to withdraw consent where processing is actually based on consent. We do not currently rely on consent for anything described here.

Not every right applies in every situation — they depend on the legal basis and the circumstances, and some are limited by law. There is also a practical limit worth stating plainly: for data that only ever existed in your browser, there is generally nothing for us to retrieve, correct or delete, because it never reached us. Where we do hold something about you — usually correspondence — write to privacy@creatormission.com and we will handle it within the time limits the GDPR sets.

If you think we have handled your personal data unlawfully, please tell us first at privacy@creatormission.com so we can put it right. You also have the right to lodge a complaint with a supervisory authority. Ours is the Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto) in Finland, at tietosuoja.fi. You may instead complain to the authority in the EU or EEA country where you live or work, or where you believe the issue occurred.

The Campaign Check is deterministic software running on your own device: it compares your clip against requirements you entered and reports what it can and cannot verify. It is not a decision made by Swepth Oy about you, it produces no legal or similarly significant effect, and it is not a judgement about your compliance, your eligibility or your character. We do not carry out automated decision-making or profiling in the sense of Article 22 of the GDPR.

If this policy changes, the date at the top of the page changes with it. Material changes to how data is handled will be described rather than folded quietly into a revision, and anything that starts collecting data we do not collect today will be spelled out before it ships.