Privacy Policy

Who we are

Nice Touch Group Ltd is a company registered in England and Wales (Companies House number 16674872). We build Nice Touch, an AI-powered workflow and edit assistant for professional video post-production teams. When this policy refers to “Nice Touch”, “we”, “us”, or “our”, it means Nice Touch Group Ltd.

What data we collect

We collect and process the following categories of personal data:

• Account information: name, email address, and password (stored as a secure hash) when you register.
• Profile information: organisation name, team membership, and role within your account.
• Usage data: records of AI edit generations, asset analysis activity, project usage, and feature interactions.
• Project content: names of files you upload for analysis, transcripts generated from those files, project briefs, notes, and timeline data. This content is processed solely to deliver the service to you.
• Communications: if you contact us by email or through in-app reporting, we retain those communications.
• Technical data: app version, operating system, and diagnostic information collected for error reporting and service reliability. This includes application logs transmitted automatically from the desktop app to our monitoring infrastructure, containing session identifiers, error details, and performance data.

How we use your data

We process your data on the following lawful bases:

• Contract performance: to provide the Nice Touch service you have signed up to, including operating the AI assistant, processing your media, and managing your account.
• Legitimate interests: to improve the product, monitor service reliability, and understand usage patterns at an aggregated level. We do not use your project content to train AI models.
• Legal obligation: where we are required to retain or disclose data by law.
• Consent: where we have asked for your consent, for example for marketing communications.

Where your data is stored

All Nice Touch infrastructure is hosted within the United Kingdom. The third-party services we use to deliver the product predominantly process data in the European Union. Some AI services and Google authentication perform processing in the US.

• Where any third-party processor is located outside the UK, we ensure appropriate safeguards are in place — such as Standard Contractual Clauses — and that your data is not retained for any purpose beyond delivering the service. We take appropriate steps to ensure this remains the case as our infrastructure evolves.

Data retention

We retain your account and usage data for as long as your account is active. If you close your account, we will delete or anonymise your personal data within 90 days, except where we are required by law to retain it for longer. Project content — media files, transcripts, briefs — is retained for as long as it exists within your account. You can delete individual assets and projects at any time.

Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request erasure of your data (“right to be forgotten”)
• Restrict or object to certain processing
• Receive your data in a portable format
• Withdraw consent where processing is based on consent

Cookies and analytics

Our website and web application use essential cookies required for authentication and session management. We do not sell your data.

• Anonymous visit counting. We count visits and record which pages are viewed, using PostHog, hosted in the EU. This runs for every visitor and stores nothing on your device: the identifier exists only in your browser’s memory for as long as the tab is open, and is gone when you reload or close it. Because nothing is stored on your device, we do not ask permission for this, and we cannot recognise you on a later visit.
• Remembering a return visit. We ask before we keep a cookie. If you agree, the same identifier is stored in your browser instead, so a repeat visit is recognised as the same person and we can tell that someone who read about us last week signed up today. If you decline, or simply ignore the question, nothing is stored and the anonymous counting above continues unchanged.
• LinkedIn ads. If you agree to the cookie question above, we also load LinkedIn’s Insight Tag so we can tell whether a LinkedIn advert led someone to the site. LinkedIn may recognise you as a member and use that to report conversions and to build audiences of people who visited. If you decline, or do not answer, the tag is not loaded.
• Which company is visiting. If you agree to the cookie question above, we also load Apollo’s website tracker, which keeps a cookie in your browser and sends Apollo the pages you view and your network address, so we can tell which company a visit came from. It is not set up to identify you as a named person. If you decline, or do not answer, the tracker is not loaded.
• Session recording. We do not record what you do on screen unless you have agreed to the cookie question above.
• Campaign attribution. When you arrive from one of our emails or adverts, the campaign is recorded for the length of that visit and, if you create an account, saved with it so we know how customers found us. This does not depend on your cookie choice, is never used to track you across other websites, and is discarded if you do not sign up.
• Once you have an account, we record what you do in the product — such as sending media for analysis, generating an edit, or starting and ending a subscription — so we can see whether the product is working. This is linked to your account. It does not depend on your cookie choice above; this is a record of your use of a service you have signed up to.

Security

We implement appropriate technical and organisational measures to protect your personal data.

Changes to this policy

We may update this Privacy Policy from time to time. Where changes are material, we will notify you by email or via an in-app notice. The “last updated” date at the top of this page will reflect the current version.