GoAfter · PRIVACY

Privacy Policy

Effective 19 October 2026

GoAfter is a film-delivery service for video editors and their clients. This policy explains how the GoAfter Windows app and its web services handle information. For privacy questions or deletion requests, contact support@goafter.in.

1. Information used by the service

• Editor accounts: email address, authentication records and session information. Password-based authentication is handled by Supabase Auth.
• Projects and reviews: client and project names, dates, film categories, file identifiers, revision information, video dimensions and sizes, comments, timestamps, song links, approvals and notification read status.
• Studio branding: studio name, logo, theme colour and any contact email or WhatsApp number the editor chooses to display.
• Connected storage: Google authorization tokens, folder identifiers and files uploaded through the app. Advanced connection settings may also include a Google OAuth client ID and client secret.
• Operational information: requests, error information and technical logs needed to operate and troubleshoot the service. Hosting and authentication providers may process network and device information as part of providing their services.

2. Why this information is used

GoAfter uses this information to sign editors in, keep their workspaces separate, upload and play films, show project covers and branding, save client changes, record approvals, enable final downloads and provide support. Notification status is displayed in the app; feedback is not automatically sent through email or WhatsApp.

Assistant and voice input

The assistant uses your question and recent messages to answer product questions. When you are signed in, it may use relevant workspace summaries allowed by your account permissions. General product knowledge does not include private client records. Your browser remembers only your preferred reply language and tone; GoAfter does not save chat transcripts as a conversation history.

Voice input starts only when you tap Speak and allow microphone access. Depending on your browser, speech is transcribed by its speech service or sent for online transcription. GoAfter does not save these audio recordings. Review and edit the text before sending. Task previews do not change your workspace until you confirm. Confirmed tasks use the normal account permissions; selected files upload through the same app workflows. Avoid sharing passwords or OTPs.

3. Google Drive access

When an editor connects Google Drive, GoAfter uses that authorization to create project folders, upload videos and images, read file details to verify uploads, and stream files to the editor and people with the project link. Replacing covers or logos, or cleaning up older processed previews, can move the replaced Drive files to Trash.

The new Google connection flow requests the drive.file permission, which limits access to files created or opened with the app. Earlier or manually configured connections may have broader scopes chosen during their original authorization. GoAfter uses connected Drive access for the delivery functions described here; it does not use Drive files for advertising, sale of personal information or training general-purpose AI models.

GoAfter’s use of information obtained from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. Data is used and transferred only to provide the user-facing service described in this policy. Human access to Google data is limited to user-authorized support, security or abuse investigations, legal obligations, or other uses permitted by that policy.

4. Storage and service providers

Videos, newly uploaded project covers and studio logos are stored in the editor’s Google Drive. Project details, comments, approvals, events and branding settings are stored in the hosted application database. Earlier cover images may remain in application object storage. Google connection credentials are encrypted in application object storage. New video uploads travel directly from the editor’s device to Google Drive using a file-specific upload session. The application server sets up and verifies these uploads. Older upload sessions, image uploads and video playback may pass through the application server.

GoAfter uses Supabase for authentication and its hosted application infrastructure, including Cloudflare database and object-storage services, for the delivery service. These providers process the information necessary to supply their services. Processing locations may differ from your country. This policy does not promise that information is stored only in India.

GoAfter Cloud storage

When you choose GoAfter Cloud, gallery photos, films, playback copies, branding images and transfers are stored in private Cloudflare R2 object storage. These files share your plan’s cloud capacity. Google Drive delivery remains available separately. Cloud usage carries over across monthly renewals and space returns after file deletion completes.

You can choose an expiry for each cloud collection or transfer, or choose No expiry. At a selected expiry, access stops and cloud files are queued for permanent deletion. No expiry keeps files without a client deadline while your Cloud subscription continues; new uploads require active Cloud access. We use your registered account email to send renewal reminders for every paid package 7, 5, 3 and 1 days before expiry. Starter, Pro and Studio receive daily renewal reminders for the first seven days after expiry. Cloud subscriptions with stored files receive seven daily deletion warnings if you do not renew. Plan status and expiry dates are also shown in the app and on the web. After the seven-day grace period and at least 24 hours after the final warning, cloud originals, previews, branding and transfers are queued for permanent deletion from cloud storage. Renewal before deletion starts cancels subscription-related deletion; completed deletion cannot be undone. A chosen client expiry or manual deletion may remove files sooner. This policy does not delete connected Google Drive files. Keep your own backups.

5. Sharing and project links

Editors can access their own projects. A client review link acts as an access key: anyone who receives that link can view the project information and selected films, submit feedback and approvals, and download when the app permits it. Keep links private and share them only with intended recipients. Access to a project link does not grant general access to the editor’s Drive.

Editors may display their contact details to clients. YouTube, WhatsApp and WeTransfer links open third-party services, whose own privacy policies apply. Information may also be disclosed when necessary to meet a legal obligation or address security and abuse.

Client viewing activity

When signed-in clients open a photo or film delivery, GoAfter reports viewing activity to the photographer who manages it. This includes session start and last-seen times, foreground active time, opened photo identifiers, favourites, selection confirmation, film playback coverage and position, pauses, seeking, buffering and playback errors, feedback, approvals and download requests. Viewing coverage records observed playback rather than proving attention or explaining why someone stopped watching. Reports update periodically and may be incomplete if a browser blocks tracking or loses its connection. We do not record keystroke content, screen recordings, or activity on other websites for this feature.

6. Cookies and local information

GoAfter uses authentication cookies to maintain editor sessions. Browser or app storage may also hold interface preferences and installation-related settings. GoAfter does not include advertising or marketing-tracking integrations in this version.

7. Retention and deletion

Project information is retained while the project is available in the service. Deleting a project removes its application records, feedback and events and disables its review link. This does not delete the project’s video files or Drive cover images from Google Drive. The editor manages those files in Drive. Replaced logos and covers may be moved to Drive Trash as described above.

For account deletion, stored connection removal or other personal-data requests, email support from the account’s registered address where possible. We may need to verify the request before acting. Clients can contact their editor about project content or contact GoAfter about service-held information. Information needed for security or legal obligations, and copies in provider backups or logs, may persist beyond removal from the active application; this policy does not promise immediate deletion of every copy.

8. Revoking Google access

You can remove GoAfter’s access in your Google Account’s third-party connections settings. This prevents continued Drive access after authorization is invalidated and can stop related uploads and client playback. Revoking Google access does not automatically delete your GoAfter account, application records or files in Drive. Contact support if you also want stored connection information or account records removed.

9. Security and your choices

The app uses HTTPS, server-side account checks, project-specific review links and encrypted stored Google credentials. No online service can guarantee absolute security. Keep account credentials and client links private. Only upload content you are entitled to share and provide the information and permissions needed for your client work.

10. Changes and contact

Updates to this policy will be published here with a revised effective date. Contact GoAfter at support@goafter.in for questions about this policy or your information.