Privacy Policy

Who we are

Nice Touch Group Ltd is a company registered in England and Wales (Companies House number 16674872). We build Nice Touch, an AI-powered workflow and edit assistant for professional video post-production teams. When this policy refers to “Nice Touch”, “we”, “us”, or “our”, it means Nice Touch Group Ltd.

What data we collect

We collect and process the following categories of personal data:

• Account information: name, email address, and password (stored as a secure hash) when you register.
• Profile information: organisation name, team membership, and role within your account.
• Signup device: when you create an account we note whether you are on a computer, phone or tablet, and your browser’s time zone. Nice Touch only runs on a computer, so if you sign up on a phone or tablet we email you a personal link that signs you back in on your computer, and time our follow-up emails to your working day. The link only works for your account, and stops signing you in after 14 days or once your trial starts.
• Usage data: records of AI edit generations, asset analysis activity, project usage, and feature interactions.
• Project content: names of files you upload for analysis, transcripts generated from those files, project briefs, notes, and timeline data. This content is processed solely to deliver the service to you.
• Communications: if you contact us by email or through in-app reporting, we retain those communications.
• Technical data: app version, operating system, and diagnostic information collected for error reporting and service reliability. This includes application logs transmitted automatically from the desktop app to our monitoring infrastructure, containing session identifiers, error details, and performance data.

How we use your data

We process your data on the following lawful bases:

• Contract performance: to provide the Nice Touch service you have signed up to, including operating the AI assistant, processing your media, and managing your account.
• Legitimate interests: to improve the product, monitor service reliability, and understand usage patterns at an aggregated level. We do not use your project content to train AI models.
• Legal obligation: where we are required to retain or disclose data by law.
• Consent: where we have asked for your consent, for example for marketing communications.

Where your data is stored

All Nice Touch infrastructure is hosted within the United Kingdom. The third-party services we use to deliver the product predominantly process data in the European Union. Some AI services and Google authentication perform processing in the US.

• Where any third-party processor is located outside the UK, we ensure appropriate safeguards are in place — such as Standard Contractual Clauses — and that your data is not retained for any purpose beyond delivering the service. We take appropriate steps to ensure this remains the case as our infrastructure evolves.

Data retention

We retain your account and usage data for as long as your account is active. If you close your account, we will delete or anonymise your personal data within 90 days, except where we are required by law to retain it for longer. Project content — media files, transcripts, briefs — is retained for as long as it exists within your account. You can delete individual assets and projects at any time.

Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request erasure of your data (“right to be forgotten”)
• Restrict or object to certain processing
• Receive your data in a portable format
• Withdraw consent where processing is based on consent

Cookies and analytics

Our website and web application use essential cookies required for authentication and session management. We do not sell your data.

• Visit statistics. We count visits using PostHog, hosted in the EU, and record which pages are viewed, how long for and how far down they were read, where on a page people click, which buttons, questions and videos they use, and how quickly each page loaded. To recognise a return visit, so we can tell that someone who read about us last week signed up today, PostHog keeps a random identifier in a first-party cookie and in your browser’s storage on this site. It is used only to produce statistics about our own website, never for advertising and never shared with an advertiser. UK law allows storage for this purpose without asking first, provided you are told and can object, so this runs from your first page.
• Objecting to visit statistics. Choose Decline on the cookie question, or later in Cookie settings at the foot of any page. We then delete the identifier from your browser and keep it only in memory for as long as the tab is open, so your visits are still counted but cannot be linked to one another or to an earlier visit. What you type into a form is never recorded by this counting.
• LinkedIn ads. If you agree to the cookie question above, we also load LinkedIn’s Insight Tag so we can tell whether a LinkedIn advert led someone to the site. LinkedIn may recognise you as a member and use that to report conversions and to build audiences of people who visited. If you decline, or do not answer, the tag is not loaded.
• Google Analytics and Google Ads. If you agree to the cookie question above, we also load Google’s tag, which keeps cookies in your browser and sends Google the pages you view and the steps you take towards signing up, so we can see how the site is used and whether a Google advert led someone to sign up. Once you have an account we give Google its internal reference number, never your name or email address. If you decline, or do not answer, the tag is not loaded.
• Meta (Facebook and Instagram) ads. If you agree to the cookie question above, we also load Meta’s pixel, run by Meta Platforms Ireland, which keeps cookies in your browser and tells Meta the pages you view and the steps you take towards signing up, so we can tell whether a Meta advert led someone to the site. Once you have an account we also give Meta a scrambled (hashed) copy of your email address and account reference, never the address itself, so it can match the visit to its own records. Meta may transfer this data to the US under the EU–US Data Privacy Framework. If you decline, or do not answer, the pixel is not loaded.
• OpenAI (ChatGPT) ads. If you agree to the cookie question above, we also load OpenAI’s measurement pixel, which keeps cookies in your browser and tells OpenAI the pages you view and the steps you take towards signing up, so we can tell whether an advert in ChatGPT led someone to the site. Nothing that identifies you by name or email is sent through the pixel. OpenAI may transfer this data to the US under the EU–US Data Privacy Framework. If you decline, or do not answer, the pixel is not loaded.
• Advert clicks. When you arrive from an advert, the advertiser adds a click reference to the link. That reference is part of the page address, so it appears in our visit statistics like the rest of the address, where it tells us which advert a visit came from. Only if you agree to the cookie question above do we also keep it for the visit and, if you sign up, save it with your account, so we can tell the advertiser that the click led to a signup. If you decline, or do not answer, it is not kept for that purpose and nothing about the click is reported to the advertiser.
• Reporting signups to advertisers from our servers. If you agreed to the cookie question and then create an account, our servers tell Google, LinkedIn, Meta and OpenAI when you complete your details, start a trial, make your first edit and first pay (with the amount), so they can tell which adverts bring customers. Each is told once. We send the advert click reference, a scrambled (hashed) copy of your email address and account reference, and your browser’s description of itself (its “user agent”), never your name, the address itself or your network address. Nothing is sent for anyone who declined, and nothing for Nice Touch staff. Click references and the browser description are deleted 90 days after your click, and our record of what was reported after 13 months, or straight away if you delete your account.
• Changing your mind. Use Cookie settings at the foot of any page to change your answer. Declining after having agreed deletes the advertising cookies from your browser, and, if you are signed in, deletes the click references we hold and stops anything not yet reported being sent. Anything already reported to an advertiser cannot be recalled by us; you can ask the advertiser directly.
• Which company is visiting. If you agree to the cookie question above, we also load Apollo’s website tracker, which keeps a cookie in your browser and sends Apollo the pages you view and your network address, so we can tell which company a visit came from. It is not set up to identify you as a named person. If you decline, or do not answer, the tracker is not loaded.
• Session recording. We do not record what you do on screen unless you have agreed to the cookie question above. When we do, anything you type into a form is hidden in the recording, and so is personal text shown back to you, such as your email address.
• Emails we send. Our emails are sent through Resend. We record whether each one was delivered, and whether its links were clicked, using a tracked link on our own domain that takes you straight to the page. Some emails also contain a tracking image that tells us when the email was opened; many email apps block or pre-load these images, so we treat this as a rough guide only. If you have an account, these records are linked to it in our visit statistics so we can see which emails help people get started. Unsubscribing from marketing email stops those emails being sent at all.
• Campaign attribution. When you arrive from one of our emails or adverts, the campaign is recorded with the visit statistics above and, if you create an account, saved with it so we know how customers found us. This does not depend on your cookie choice and is never used to track you across other websites. If you do not sign up, it stays only in the visit statistics.
• Once you have an account, we record what you do in the product — such as sending media for analysis, generating an edit, or starting and ending a subscription — so we can see whether the product is working. This is linked to your account. It does not depend on your cookie choice above; this is a record of your use of a service you have signed up to.

Security

We implement appropriate technical and organisational measures to protect your personal data.

Changes to this policy

We may update this Privacy Policy from time to time. Where changes are material, we will notify you by email or via an in-app notice. The “last updated” date at the top of this page will reflect the current version.