Your data, plainly.

Last updated: 20 September 2026

This notice explains what happens to personal data when you visit aperture.castomo.com, use the free tools, create an account or work in the Aperture editor. It is written to be read: where something is not done, we say so, and where something is done on a best-effort basis, we say that too.

1. Who is responsible

The controller of your personal data is:

Castomo prosta spółka akcyjna · ul. Powstańców Śląskich 5/212, 53-332 Wrocław, Polska · KRS 0001188843 · Sąd Rejonowy dla Wrocławia-Fabrycznej we Wrocławiu, VI Wydział Gospodarczy Krajowego Rejestru Sądowego · NIP 8993033031 · REGON 542471636 · kapitał akcyjny 100 000,00 zł

Write to us about anything in this notice, and to exercise your rights, at hello@castomo.com.

Content that a team or organisation puts into its own Aperture workspace is a separate case: the organisation decides what is uploaded and why, and we handle that content on its behalf. If your employer or client gave you access to a workspace, address requests about that content to them first.

2. Visiting this website

Web server. The pages of this site are delivered by our own server. To answer a request, the server necessarily handles your IP address and what your browser sends with it, such as the page you asked for and your browser type. We do this to deliver the site and keep it secure (our legitimate interest, Article 6(1)(f) GDPR). Any operational logs the server writes are used only to run and secure the service.

Fonts. The typefaces on this site (Inter and JetBrains Mono, and Archivo on the pitch page) are served from this site itself. Opening a page makes no request to Google or any other font provider.

Your theme. If you pick a light, dark or high-contrast theme, the choice is saved in your browser so the next page looks the same (see Cookies and device storage).

Analytics: Observer. We count visits with Observer, our own analytics, run by Castomo on its own server in Frankfurt. It sets no cookies and stores nothing on your device. For each page you open it records: the page address (of any query only campaign tags such as utm_source) and title, the site you came from, your browser, device type and operating system, your browser language, a rough screen-size bracket, how long the page was actively open, how fast it loaded, any script error, and — as totals — where people click and how far they scroll. It takes no recording of your screen and reads no keystrokes.

Your IP address is used for a moment, together with your browser, to make a code that changes every day and is different on every site. The IP address itself is never stored, and the server that delivers Observer keeps no access log. The code lets us count one visitor once a day, and it cannot be used to link a visit to visits on other days or other sites. Raw records are deleted after 24 hours; only totals are kept, for 25 months. If your browser sends Do Not Track or Global Privacy Control, Observer sends no visit data.

We do this because we have a legitimate interest in knowing how our pages are used (Article 6(1)(f) GDPR). You can object at any time: hello@castomo.com.

Chat assistant. Every page has a chat button run by Castomo (chat.castomapi.com, servers in Amsterdam). Until you open the chat, the button stores nothing on your device and starts no conversation; loading the page only fetches the button's settings from our chat server, which, like any web server, records the request, including your IP address, in a rotating log that is overwritten as it fills.

When you open the chat, the chat window saves a visitor code and a few settings in your browser's local storage, and our server creates a visitor record: the code (kept only as a hash), a hash of your IP address, your browser type, language and time zone, the page you were on and where you came from, and everything you type — plus your name, e-mail or phone number only if you give them.

The assistant is an AI, and it says so. Its answers are written by AI models run by OpenRouter (Google Gemini) and OpenAI, which receive what you type in order to reply; after a conversation ends the same text is sent to a model again to write a short summary. A person on our team can read the conversation and take it over. These providers may process data outside the European Economic Area.

We keep a visitor's record and conversations until 180 days after their last visit, then delete them. You can ask us to delete them sooner: hello@castomo.com. Please do not type anything you do not want us to have.

3. Free tools and the homepage merge

The free tools and the two-video merge on the homepage need no account. That is not the same as anonymous: to run a job we keep some data about it.

• What you give us: the video, audio or image files you drop in (up to 100 MB each; the homepage merge uses the first 60 seconds of each file) and the options you choose.
• What we store with each job: your files and the result, a random claim token that lets your browser come back for the result, the options, the time, and your IP address, in our database and object storage.
• Why: to run the tool you asked for (Article 6(1)(b) GDPR), and to limit how many jobs one IP address can start per hour so the free service is not abused (legitimate interest, Article 6(1)(f)).
• How long: files, results and the IP address stored with them are deleted within 24 hours of the job being created, on a best-effort schedule. Cleanup runs when someone starts a new job, so in a quiet period an expired job can stay longer than 24 hours. Please do not rely on a guaranteed deletion time.
• If you sign in to download: the result is copied into your library and from then on treated like the rest of your content (see Your media).
• Subtitles: the auto-subtitles tool transcribes on our own server with an open speech-recognition model; the audio is not sent to a third party.

Your browser remembers the current job (see device storage) so you can come back to it. Files can show faces and voices of other people: only upload material you are entitled to use.

4. Accounts

You can create an account with an e-mail address, a password and, optionally, a display name, or sign in with your Castomo account (accounts.castomo.com), in which case we receive your account identifier, e-mail address, whether the address is verified, and your name from that account.

• Password: stored only as a salted PBKDF2-SHA256 hash, never as text.
• Session cookie: keeps you signed in for 30 days and is renewed while you use the app, with a hard limit of 90 days from your sign-in (see device storage).
• API tokens you create: we store a hash of each token, its name, who created it and whether it has been revoked.
• Audit log: actions in a workspace such as creating or deleting media, versions, collections, sequences, share links and API tokens are recorded with who did them, what was done, to what, and the IP address they came from. Workspace administrators can see them. We have not set an automatic deletion period for audit entries.

Why: to create and run your account (Article 6(1)(b) GDPR), and to keep the service and each workspace secure and accountable (legitimate interest, Article 6(1)(f)). Giving us an e-mail address and password, or a Castomo sign-in, is necessary for an account; without it we cannot offer one.

Deleting an account: when an account is erased, the address and name are removed, the account is marked deleted and its API tokens are revoked. Media, sequences and comments belong to the workspace, not to the individual account, and stay in the workspace until it deletes them.

5. Your media and what you make with it

In the editor we process what you upload, import or record and what is made from it: video, audio and images, transcripts, sequences, comments, versions and review threads. The screen recorder uses your browser's own permission prompts for screen, camera and microphone, and records only after you start; the recording is sent to your library while you record.

• Transcripts are produced on our own server with an open speech-recognition model. Whether a given transcript is later sent anywhere else depends on the optional features you use (next section).
• Guest review links: a person who opens a link can watch and comment. If they enter a name, it is stored with their comments and remembered in their browser. The person who created the link decides who receives it and can set an expiry, a password and a watermark.
• Where it is stored: in our own database and object storage on a server hosted by UpCloud.
• Why: to provide the editor and the features you use (Article 6(1)(b) GDPR).
• Deleting: when you delete media, its records are removed at once; the stored file itself is removed by a later cleanup pass, for which we do not yet promise a deadline. Copies in server backups, where they exist, disappear as the backups rotate.

6. Optional features that send data to others

These features send data out only when they are switched on and used. Most are set up by a workspace administrator with their own keys.

The recipients above are separate services with their own terms and privacy notices. The AI, embeddings and YouTube providers may process data outside the European Economic Area; where they do, the transfer relies on a mechanism under Chapter V GDPR such as an adequacy decision or standard contractual clauses. Ask us at hello@castomo.com if you want to know more.

7. Who receives data

• Hosting: UpCloud, whose servers run Aperture, processes data on our behalf.
• Castomo's own services: Observer, the chat assistant and accounts.castomo.com, all run by Castomo, as described above.
• AI, embeddings, YouTube and stock providers: only as described in the previous section.
• Authorities and advisers: where the law requires it, or to establish, exercise or defend legal claims.

We do not sell personal data and we do not use it for advertising.

8. Cookies and device storage

The marketing pages set no cookies for a visitor who does not sign in. The items below are used only to give you what you asked for or to remember a preference; we do not use them for advertising or to follow you across sites, and for that reason we do not ask for consent for them. Observer stores nothing on your device; the chat stores items only after you open it (see section 2).

9. How long we keep data

10. Automated decisions and AI

We make no decisions about you by automated means that have legal or similarly significant effects. Transcription, moment search and the AI helpers produce suggestions, transcripts and drafts for you to review; none of them decides anything about you or your account. The chat assistant is an AI and says so.

11. Your rights and complaints

Under the GDPR you may ask us for access to your data, correction, erasure, restriction of processing, and a copy in a portable format. Where we rely on our legitimate interest you may object at any time, and where you gave consent you may withdraw it, without affecting what happened before.

Send requests to hello@castomo.com. We answer within one month and may ask you to confirm who you are. Requests are handled by e-mail.

You also have the right to complain to the supervisory authority: in Poland, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl. You may also complain to the authority in your own EU country.

12. Changes to this notice

When we change how we handle personal data, we update this page and its date. The Polish version is Polityka prywatności.