Privacy policy

Thespis is a product of Innovelle Systems, a South African private company with enterprise number K2026415176. Thespis provides automated product-demo capture, narration, rendering, review, and publishing. We collect only the information needed to operate, secure, support, and improve that service. We do not sell personal information.

• Account identity, contact details, and inquiry content supplied directly or through GitHub.
• Organization, team, repository, commit, configuration, and run metadata.
• Demo inputs, captured footage, narration text, generated audio, and rendered files.
• Usage, security, audit, device, and diagnostic records.
• External demo activity, including views, playback starts, progress, completions, and call-to-action clicks. We derive a rotating monthly viewer key for deduplication and do not store the raw network address or browser-agent string in external demo analytics.
• Billing customer and subscription status supplied by our merchant-of-record provider. We do not receive or store full payment-card details.

We use this information to authenticate users, respond to inquiries, run and publish demos, enforce plan allowances, process subscriptions, prevent abuse, troubleshoot problems, report external demo engagement to the organization that published the film, communicate about the service, and comply with legal obligations.

We use specialist providers for hosting, repository integration, narration, music, and billing. They process information under their own contractual and security obligations. Information may be processed outside your country, including in the United States and European Economic Area.

Production- and Scale-plan run history is retained for up to 90 days. The newest successful artifact set for an active repository is retained so its current film does not disappear merely because it is older than 90 days. A current external film is retained while it remains selected. Superseded external versions are retained for up to 90 days. Account closure, repository removal, deletion requests, or different Enterprise terms may change that period. Account, audit, billing, and legal records may be retained longer where needed for security, dispute resolution, or law. We use access controls, encryption in transit, managed secret storage, and least-privilege service identities. No online service can guarantee absolute security.

You may request access, correction, export, or deletion of personal information, subject to applicable legal and security exceptions. Organization owners can remove members, repositories, API keys, generated artifacts, and external demo access through the service or by contacting us.

Privacy questions and requests can be sent to info@thespis.dev.