Privacy
Privacy notice
Last updated 3 June 2026
1. Who is responsible
Umberfold G.K., Osaka, Japan, handles the personal information described here as a business operator under the Act on the Protection of Personal Information (APPI). Questions and requests: privacy@umberfold.cloud.
2. Two kinds of information
Account information is what you tell us when you ask for access and what we need to run your account. We decide why and how it is used.
Files you send are yours. Footage can contain faces, voices and places, and we treat it as information you have entrusted to us: we process it only to provide the service, on your instructions, and you remain the one who decides what it is used for.
3. What we hold
| Information | Why | How long |
|---|---|---|
| Account details: name, work e-mail, studio | Run your account, answer you | While you are a customer, then 12 months |
| Session records: file names, sizes, checksums, times | Provide the service, support | 90 days after a session ends |
| Request logs: IP address, user agent, path, status | Keep the service secure and working | 30 days |
| Original files | Verify, cut copies, let you re-download | 14 days after sealing; 3 days if never sealed |
| Edit copies and previews | Give them back to you | Until you delete them, or 30 days after the account closes |
4. What we do not do
We do not sell or rent personal information, we do not run advertising or analytics on this site, and we do not look at your footage beyond what making copies requires.
5. Who else handles it
| Provider | What for |
|---|---|
| Our hosting provider (Japan) | Servers and storage |
| Our e-mail provider | Sending and receiving correspondence |
They act on our instructions. We may also disclose information where the law requires it.
6. Customers abroad
Many of our customers upload from other countries. Files are stored in Japan. If that ever changes, we will tell you first and meet the APPI requirements for transfers abroad.
7. Your rights
Under the APPI you may ask us to disclose the personal information we hold about you, correct it, stop using it, or delete it. Write to privacy@ and tell us which account or session you mean; we may ask you to confirm who you are before we act.
8. Security
Connections use TLS, access to stored files is limited to the staff who need it, and project keys are stored hashed. See also our security page.
9. Cookies
This site sets no cookies.
10. Changes
If we change this notice in a way that matters to you, we will say so by e-mail before it takes effect.