Legal information
Privacy Policy
Last updated: July 13, 2026
Your video files are never uploaded
Orcast reads your video and audio files on your own computer. We do not upload, store, or see the contents of your recordings — your video files are never uploaded. Only what is necessary leaves your machine: account sign-in and licensing, technical audio data and the settings you chose, used to compute the cut plan, and, if you use speech recognition, the audio of the material you selected.
This policy explains what data we process when you use the Orcast application (the "Application") and this website, why and on what legal basis, whom we share it with, and what rights you have. By using Orcast, you accept the practices described here.
01 Who processes your data
The controller (operator) of personal data is the company:
For any privacy questions and for requests about your rights, write to info@demhafuture.com.
02 What data we collect
We follow the principle of data minimization: we collect only what the account, the license, and the cutting engine cannot work without.
- Account email You provide it when signing in (via Google or email + password). It is needed to link your license and subscription to you.
- Technical license and device data Account identifier, plan (Free / Pro), subscription validity period, and also the name, operating system, and last-active time of the devices you have signed in on (a license is valid on up to 3 devices). The same record holds usage counters — how many edits and minutes have been processed on your account — so that your plan's limits can be applied.
- IP address and approximate location Collected when you sign in and by our website analytics (Google Analytics) on the marketing pages. The IP address is used to derive an approximate location and is then discarded.
- Technical audio data and your cut settings To build the cut plan, the engine needs technical numeric data derived from the sound, speech timing markers, and the cut settings you chose. This is not a recording, not a transcript, and not the audio itself: the content of a conversation cannot be reconstructed from them. The files themselves and their names are never sent to our server.
- Payment data Payment is handled entirely by Lemon Squeezy (see section 6). It processes your card details; we do not see or store your card number. We only receive the fact of an active subscription and a service order identifier.
- Service logs and basic analytics Anonymized events (for example, "plan built", errors) help us understand stability and load. They do not contain the contents of your videos.
03 Where video and audio are processed
Audio synchronisation, sound analysis, assembly of the finished file and export are performed on your own computer, by the Application itself. To build the cut, the Application sends our engine only technical audio data and the cut settings you chose — not the video, not the audio, and not a transcript. The decision of which camera to show at which moment is computed on our server and returned to the Application; your video files are never uploaded.
04 Speech recognition and subtitles
Speech recognition runs over the internet only: the audio of the recording you picked goes to a cloud service — never the video. It starts only on your command, and then the audio of the material you selected is sent for transcription. The video is never transmitted. By default the audio goes through our server to a cloud speech-recognition service (see section 6), within the monthly limit of your plan. If you have entered your own access key in the app, the request goes from your computer straight to that service, without passing through us.
- Recognition runs only when you start it — it never runs on its own.
- If you do not use speech recognition, no audio track is sent anywhere.
- The cloud recognition provider processes the submitted audio to return the transcript text. The service terms are on the provider's side (see section 6).
05 On what legal basis we process data
- Performance of a contract Email, license, and devices are needed to provide you the service itself and to verify your subscription rights.
- Consent Audio is sent for speech recognition only when you start it yourself — it never runs on its own. Consent can be withdrawn by no longer using speech recognition.
- Legitimate interest Basic anonymized analytics and logs — to maintain stability and security and to prevent abuse.
- Legal obligation Retaining payment data to the extent required by tax and accounting law (this part is handled by Lemon Squeezy as the Merchant of Record).
06 Sub-processors
We engage a limited set of vetted providers. Each one processes data only for its own task.
| Provider | Purpose | What it receives |
|---|---|---|
| Lemon Squeezy | Billing and payment — Merchant of Record: processes the payment, calculates tax/VAT by the buyer's country, and handles refunds. | The buyer's payment and contact details. Card details stay with it — we do not see them. |
| Google Firebase | Account sign-in, storage of license and devices, basic analytics. | Account email, identifiers, license and device data, anonymized events. |
| AssemblyAI | Speech recognition — whenever you use it: there is no other way to recognise speech in the app. By default the audio reaches this provider through our server. If you have entered your own service key in the app, the request goes to the provider straight from your computer, without passing through us. | The audio of the file you started internet recognition for. The video is not transferred. |
| Google (Google Analytics 4) | Anonymous website audience and traffic measurement on our marketing pages (the landing page and pricing). | IP address (used to derive approximate location, then discarded), a client-ID cookie, and the pages viewed. |
Paid subscriptions are available through Lemon Squeezy. When you purchase, the provider processes the payment and the information needed for checkout, as described above. Free editing and export cover the first 5 minutes of each edit.
07 How long we keep data
- Account and license Kept while your account is active. After you delete your account, this data is deleted or anonymized within about 30 days.
- Technical audio data Processed on our server only while your request is being computed, and not retained by us once the result has been returned to the Application. We keep only a short technical fingerprint of the job, so that a repeated request is not counted twice.
- Usage counters How many edits and minutes have been processed on your account — needed to apply your plan's limits and to protect the service from abuse. Daily records are kept for about two months; the cumulative totals for as long as the account exists.
- Payment records Kept by Lemon Squeezy for the period set by tax and accounting law.
- Logs and analytics Retained for up to about 14 months (the Google Analytics 4 default) and then deleted automatically.
08 Your rights
If GDPR (EU/EEA), the UAE Personal Data Protection Law (UAE PDPL), or similar legislation applies to you, you have the right to:
- Access Learn what data of yours we process.
- Rectification Correct inaccurate data.
- Erasure Ask us to delete your data (the "right to be forgotten").
- Portability Receive your data in a machine-readable form.
- Withdrawal of consent Withdraw consent where processing is based on it (for example, by no longer using speech recognition).
- Objection and restriction Object to processing based on legitimate interest, or restrict it.
- Complaint Lodge a complaint with the data protection supervisory authority in your country.
To exercise any of these rights, write to info@demhafuture.com. We will respond within the timeframes required by applicable law.
If you are a resident of a US state with its own privacy law (for example, California under the CCPA/CPRA), you also have the right to know what personal information we collect about you, to request its deletion, and not to be discriminated against for exercising these rights. We do not sell your personal information. To make such a request, email info@demhafuture.com.
09 Cookies and this website
The website is static and uses cookies minimally. Account sign-in (via Firebase) may use technical cookies and browser local storage necessary for the session. On our marketing pages (the landing page and pricing), Google Analytics 4 sets first-party analytics cookies (such as _ga and _gid) to measure anonymous, aggregated usage — it does not identify you personally, and we do not set advertising cookies from third-party ad networks. You can opt out of Google Analytics with Google's opt-out browser add-on; your browser's Do-Not-Track setting and content blockers also stop it from loading. These legal pages (Terms, Privacy, and Refunds) do not load analytics at all.
10 Security
We apply reasonable technical and organizational measures to protect data: encryption in transit, restricted access to internal systems, and working with vetted providers. The main privacy guarantee is built into Orcast's architecture: your video files are never uploaded, and audio leaves your computer only for speech recognition, when you start it.
11 International data transfers
Our providers may process data outside your country, including in the UAE, the USA, and the EU. In such cases, the transfer is secured by legally provided mechanisms (for example, standard contractual clauses). The amount of data transferred remains minimal, as described above.
12 Children
Orcast is a professional editing tool and is not intended for children under 16. We do not knowingly collect children's data. If you believe such data has been provided to us, write to info@demhafuture.com, and we will delete it.
13 Governing law
This policy is governed by the law of the United Arab Emirates and the Emirate of Dubai. That said, if you are a consumer in the EU/EEA, you retain the mandatory protections of your local data-protection and consumer-rights law, which cannot be limited by contract.
14 Changes to this policy
We may update this policy as Orcast evolves. The current version is always available on this page; the date at the top reflects the last change. We will notify you of material changes in the Application or by email.
15 Contact
Privacy questions, rights requests, and complaints — to info@demhafuture.com. Data controller: DEMHA FUTURE - FZCO, IFZA Business Park, Dubai Digital Park, Dubai Silicon Oasis, Dubai, United Arab Emirates.