Illusto Privacy Policy

Purpose of our policy

Toch Inc., (“illusto,” “we”, “us” or “our”) understands that protecting personal data is important. We have adopted this privacy policy (“Privacy Policy”) to notify you about the practices we have in place regarding the handling of your personal data when you use our Services (defined below).

In relation to all of illusto Services, we do not sell personal data.

Capitalized terms that are not defined in this Privacy Policy shall have the same meaning as ascribed to them in our Terms and Conditions. Any reference made to Privacy policy in this document shall mean and refer to the latest version of the Privacy Policy.

What is illusto?

illusto is an online video creation platform available at https://illusto.com (the “Platform”). Our Services allows you to upload, create, edit and export videos. We offer several account types that perform a number of functions. We use the term user for any person or Entity that holds an account with us. The terms relating to registration of account and such other related activities are described in detail in the Terms and Conditions:

illusto video editing services can be used by a number of different types of users including individuals and Entities. How we collect and process personal data from each user type varies. In some circumstances we handle personal data as a data controller, and in other instances we handle personal data as a data processor for and on behalf of our users. This Privacy Policy relates to our handling of data as a data controller.

Personal data we collect

Personal data is information that relates to an identified or identifiable person. The types of personal data we collect and process depends on our relationship with you. The types of personal data we collect is set out below:

Statistical data – We collect and use analytics and cookie data collected from your use of the illusto Services. We collect this data from Platform visitors and users.

Communication data – When you contact us or use live chat, we use your personal data to communicate with you and answer your enquiries.

Subscription data – We use your personal data to send you exclusive content, and video tips and tricks.

Registration data – We collect and process user personal data to register an illusto account.

Payment data – We collect and process user personal data to upgrade your account plan.

Video and content data – We collect and process videos, images, audio recordings and other content imported by a user, where a user chooses to save their files and sync their content to ‘the cloud’.

Support request data – We collect and process personal data to provide users with support as part of our Services.

Feedback data – We collect and process information you provide us about our Platform and Services.

Request for access and correction data – When you submit a request to access or correct your data, illusto uses this data to process your request and communicate with you.

Recruitment data – When you apply for a job with us, we collect and process your personal data as part of the application process.

When we collect your personal data

In the course of providing our Services we collect personal data about you. We collect personal data in a number of instances. The types of information we collect will depend on how you interact with us.

illusto uses third parties to provide services and functions on behalf of illusto. To provide these services, third parties may collect and process your personal data.

We collect your personal data in the following scenarios:

When you visit our website

illusto collects a range of information about you when you visit our websites, including illusto Platform. We collect statistical information about how you use and interact with our Platform and Services, whether you are visiting our websites as an account holder or you are simply checking us out.

Statistical information we collect when you visit our Platform includes:

  • Browser type and session
  • Operating system type
  • Internet service provider domain name
  • Approximate location
  • Device and network information
  • Webpages you visit
  • How you got to our webpage (for example, via a web search or social media)
  • Your searches while on our site, and

  • Your browsing behavior while on our site

    We generally collect this information through the use of cookies.

When you contact us

We may collect some personal data about you when you contact us via phone, email, post or live chat. Contact information we collect when you contact us includes:

  • Name (so we know what name to call you by)
  • Email (so we can reach you electronically, if that is your preference)
  • Phone number (so we can phone or SMS you, if that is your preference)
  • Address (if you’ve left a return postal address, or you want us to contact you that way), and
  • Your correspondence with us (for example, the details you gave us or the question you asked us to answer).

When we email you

Emails that we send to you contain pixel tags that enable us to email you in a format you can read. Pixel tags also tell us whether you have opened the email.

You may unsubscribe from receiving emails or communications from us at any time, using the unsubscribe link in emails we send you or by writing to us at privacy@illusto.com

When you sign up to receive exclusive content and video tips

We collect your first name and email when you sign up to receive access to exclusive content, and video tips and tricks.

When you register an account with us

When you choose to register an account with us, you have the option to sign up using:

  • A Social media platform, including Google,
  • Your email.

When you sign up using your preferred social media platform, they will provide us with some information about you, including your name and email address.

When you sign up using your email address, you have the option of setting a password, or using a magic link to verify your identity. A magic link (a web page link) is sent to your email address that allows you to log in to your account.

Information we may collect when you register an account with us includes:

  • Details about how you intend to use the account (i.e. for personal use, for use as a creator, or for business, corporate or educator use)
  • First and last name
  • Email
  • Password, where you choose to sign in using password verification
  • Details of what videos you would normally create, and
  • Your approximate location.

When you register an account as an Entity, personal data collected is often limited to personal data of the Entity’s contact person and any authorized users included in a team.

Registered account holders are called users. illusto has individual (private individual) and Entity users.

When users add team members to a team

When a user has registered an account, their plan may allow them to create a team and invite members to that team. illusto collects some personal data about invited team members in this instance, including name and email.

When you or someone else syncs videos and other content to ‘the cloud’

Users have the option to save and sync their files (i.e. videos, images and other content) to ‘the cloud’.

By default, videos, images and other content that you upload to your illusto account(s) is stored locally on your computer, phone or other device. Syncing your files to the cloud enables you to work on projects from any device.

When a user chooses to sync files to the cloud, illusto collects this information and stores it. User content may contain personal data where the content captures or is about a person.

When you upload videos to your illusto account

Users are able to import content files to their illusto account, including videos, audio recordings and images. You can import files to your illusto account(s) from:

  • Your files located on your computer or device
  • You device’s photo library
  • Webcam or screen recording
  • Recording from your device’s camera
  • Google Drive, and
  • Box

Where you have chosen to save and sync your content to the cloud, any videos, audio recordings, images and other content that you import will be collected and stored by illusto in the cloud. Content will contain personal data where it relates to a person and they can be identified. This includes videos, photos or audio recordings that contain an image or voice recording of a person that can be identified.

When someone else uploads videos and images

There may be instances when another user imports your personal data to their illsuto account. This may include where a friend or your Entity imports a video, photo or audio recording to their illusto account, that contains your image or a recording of your voice.

When someone else imports a video, image or audio recording that contains an image or voice recording of you (and stores that file in ‘the cloud’), illusto will collect and store your personal data.

In accordance with our Terms and Conditions, illusto Entity users must commit to fair and lawful personal data handling practices.

When you or someone else requests support from illusto

There may be instances when you or someone else requires support regarding a video or image that contains personal data about you (e.g. your image). This may happen, for example, where you are part of a team using illusto. In managing support requests, we may collect personal data including:

  • Details of the support request
  • Contact details of the user seeking support, and
  • Personal data contained in content where the user requires support, including video and images that contain an image of a person that can be identified.

When you go onto a paid plan

illusto has a number of plans to suit your video editing needs. To pay for these plans, you have the option of ‘checking out’ with either PayPal or using a credit card.

Information we collect when you make a payment to us includes:

  • Name
  • Email
  • Your payment preference, either PayPal or card payment
  • Payment currency
  • Purchase amount
  • Date of purchase
  • Transaction information (e.g. payment accepted/ declined), and

  • Subscription information (the type of plan you chose)

    We offer a secure payment gateway for you to supply any payment card details (where you choose to pay with a debit or credit card) or PayPal details (where you choose to pay using PayPal). We do not, however, retain your payment credentials.

When you provide reviews or feedback

We might ask you to provide a review or feedback about illusto or the Services we provide. If you wish to provide a review or feedback about illusto we will collect the feedback information that you provide.

When you apply for a job with us

If you choose to apply for a job with us, we collect a range of recruitment information about you.

Recruitment information we collect when you apply for a job with us includes:

  • First and last name
  • Email
  • Phone
  • Location (including city, state, country and postcode/ zip code)
  • LinkedIn profile, if you have one
  • Resume
  • Cover letter, and

  • Whether you are authorised to work in given location.

    We offer a secure payment gateway for you to supply any payment card details (where you choose to pay with a debit or credit card) or PayPal details (where you choose to pay using PayPal). We do not, however, retain your payment credentials.

How your personal data is used

illusto collects and processes your personal data to provide our video editing Services. Specifically we use personal data for the purposes and under the legal bases set out in the following table.

Legal Bases

  • Legitimate Interest - illusto does this in our interest to support and promote your use of the Platform.
  • Consent - illusto will ask you to agree to this. If you don’t agree, we won’t do this.

  • Contract - We will do this as part of our contract with you, as per our Terms and Conditions.

    illusto engages third parties to provide services (i.e. process your personal data) on behalf of illusto.

How your personal data is shared

Users can choose to share their videos and content within their illusto account(s). Content may contain personal data. Users may choose to share their content by:

  • Downloading a video, and sharing the video file
  • Directly uploading videos to YouTube
  • Saving videos to Box
  • Creating, sharing and/or publishing a web link of the video, or

  • A video can be directly embedded into external websites and social media platforms.

    While illusto makes the opportunity available for you to share your content with others, such as by uploading videos to YouTube or saving videos to Box – and while we have worked hard to refer our users only to those parties whom we believe take a responsible approach to personal data handling – it is up to you to determine whether you are comfortable with the privacy practices of those parties before doing so. We encourage illusto users to take a moment to review the privacy policies of sites or services that may be linked via our Platform.

    illusto does not sell or share your videos or other personal data, including with advertisers, sponsors, content providers, media outlets or law enforcement, unless:

  • We have your express permission (e.g. you have expressly chosen for your review of our platform to be published), or

  • There is a lawful ability or requirement for us to do so (e.g. we receive a court order to produce the information).

    We do not sell your personal data in the conventional sense (i.e., for money). However, like many companies, we use services that collect information from you (to deliver advertisements to you for example) and this may classify this use as a “sale” of your personal data, you can request to opt-out out of this “sale”, if you direct us not to sell your personal data, we will stop sharing your personal data if required by submitting a written request to us via email at privacy@illusto.com.. You must put the statement “Sale of Information- Opt-out) in your request and include your name, street address, city, state, and ZIP code. We are not responsible for notices that are not labeled or sent properly, or do not have complete information.

    illusto does not control, however, how your personal data is used and shared by private individuals (e.g. where you share your video to social media, or your image is contained in a friend’s video) or Entity users (e.g. where a video featuring your image has been created by the company you work for).

DO NOT TRACK

Our Service currently does not respond to “Do Not Track” (DNT) signals and operates as described in this Privacy Policy whether or not a DNT signal is received. To find out more about “Do Not Track,” please visit http://www.allaboutdnt.com.

Can you remain anonymous?

illusto may provide our video editing Services to you pseudonymously. When providing your name, you may use a nickname or other name. We do however, require an accurate email address to be able to contact you, send service emails and provide you with a magic link to verify your identity when accessing your account.

Can children use illusto?

illusto does not directly market to or provide our video editing services to children under the age of 13. As such, children under 13 may not register an account with us. It is a requirement of our Terms and Conditions that you are at least 13 years old, or are the minimum age required by the laws of your country, to sign up to an account with us or use our video editing Services.

If we discover that a child under 13 (or the minimum legal age depending on your country) has provided us with personal data or registered an account with us, we will immediately delete their data. If you are a parent or guardian and become aware that your child has provided us with personal data, please contact us so that we can securely destroy their data.

Children aged less than 18 years, but who are at least 13 years or the minimum legal age in their country, are able to create an account and use the Platform and Services provided that a parent or legal guardian agrees to supervise them in doing so. For more information see our Terms and Conditions.

How your personal data is stored

illusto uses a cloud storage provider, AWS Cloud Platform, to store personal data, including user registration data, payment information, communications data, and user video files (where the user chooses to sync their files to the cloud). This information is stored in the United States in accordance with our service contract with Google.

illusto also uses other service providers to store specific types of personal data (such as payment processing information, emails, analytics and communications data) on our behalf. The personal data stored by third party providers relates directly to their functions and services.

How long we keep your personal data

illusto will keep your personal data for different periods, depending on the purpose for which it was collected or as may be necessary to comply with our legal obligations or for resolving Disputes. Where we no longer require personal data for the purpose it was collected, we will securely destroy that data.

Where you have synced and stored your files in the cloud, and subsequently cancel your subscription, your files will be stored by us in the cloud for 30 days after your subscription ends. However, your projects will still be stored on your local device unless you have deleted them.

There may be times when you no longer need your account, but do not wish to go through the registration process again in the future. In this instance, a user may choose to de-activate their account. This will ensure your account is no longer active but can be reinstated by you at a later stage. Choose the ‘de-activate my account’ link in your account settings.

A user can also choose to delete their account. When a user chooses to delete their account all data held with the account will be deleted and cannot be recovered at a later stage. Users can delete their accounts by writing to us at privacy@illusto.com. The ability to delete your account is part of your personal data rights, i.e. the right of erasure.

How your personal data is secured

illusto securely manages and disposes of personal data, by implementing a range of data security practices. We ensure that personal data is appropriately secured both when it is stored onsite or in ‘the cloud’, and use SSL encryption to store and transfer personal data.

Protection of personal data from unauthorised access and disclosure is a priority for us. Any concerns about the security of your personal data held by illusto should be reported to us by email at privacy@illusto.com.

How we communicate with you

From time to time, illusto will email you information about our video editing Services.

There are certain emails that we send you as a necessary part of operating our Services. These emails are part of our agreement with you set out in our Terms and Conditions. These are:

Service Emails

illusto sends important emails to you as part of our video editing Services under our agreement with you set out in the Terms and Conditions.

We may send you Services emails, for example, when:

  • You cancel your plan
  • You redeem a coupon with us
  • You require technical support
  • Your cloud storage is due to be deleted (when you cancel subscription)
  • You request to receive a magic link to access your account
  • You request to reset your password
  • A payment is declined, or your credit card has expired

  • A user invites members to join their illusto team

    illusto also sends other types of emails which you can unsubscribe from at any time. You can unsubscribe using the ‘unsubscribe’ link included in emails we send to you. Where you choose to unsubscribe from a category of emails, you will no longer receive any such email from us. Other types of emails we send include:

    Promotions and offers

    From time to time, illusto will email you information about our video editing Services.

    Platform Hints and Helpful Info

    As you use our video editing Services, we may send you emails with suggestions about how to use our Platform, and details of additional features on upgraded plans.

    We may send you marketing messages, for example, when you register an account with us, when you first successfully export a video from our Platform, or in order to help you subscribe to an upgraded plan.

    Newsletter

    illusto sends out a newsletter to keep you up to date about the features of our Platform. The newsletter may include access to exclusive content, video editing tips and tricks, details about Platform updates, promotions for our other Services, upgrade offers and feedback requests.

    illusto is in the process of building a Preference Centre that will allow you to choose what types of emails we send to you via your account settings. We will update this Privacy Policy when we have this up and running!

    Social media

    illusto maintains a number of social media accounts for the purpose of marketing our Services and pushing out information about our Platform. illusto maintains accounts including Facebook, Twitter, Instagram, LinkedIn and Pinterest.

    Before you interact with us via social media, please be aware that personal data supplied to us through or posted on any social media outlet becomes captured by that social media platform’s privacy policy. You may instead choose to contact us directly.

    Inviting team members

    Users who have registered accounts with us under certain plans may be able to access a team function that allows teams to share videos. Under the team function a user can create a team (or working group) and invite other people (team members) to that team. This is not a ‘refer a friend’ function, but rather allows teams to work together using our video editing tools.

    When you invite a person to become a team member, we will send an invitation email to the person you are inviting on your behalf. When we do this, we apply the following rules:

    You select people you would like to invite to become team members. illusto will never select team members for you or access your contacts

    We will clearly display your name (or preferred nickname) and email address in the invitation email

    We show you what the invitation email will include before it is sent

    A person invited to become a team member can choose whether to accept the invitation. If you receive an email invitation to join a team, you can decline. Alternatively, if you do not wish to join at that time, you can go back to the invitation email at any time and accept the invitatio

    If you are invited to join a team and you accept the invitation, you are required to either (1) login as an existing user, or (2) register an account with us. Team members can choose to leave a team at any time by clicking the ‘delete’ link located in the team profile.

Your personal data rights

If illusto holds personal data about you, we are happy to tell you what it is, update it, delete it, or stop using it. We will not, however, tell someone else what personal data we hold about you (unless you permit us or there is a lawful ability or requirement for us to do so).

If you think the personal data we hold about you is incorrect or out of date you can:

  • Update your account details (including email and preferred payment method) in your online account settings
  • De-activate your illusto account(s) via the link included in your online account

  • Write to us at privacy@illusto.com. We are happy to assist you or answer your queries about exercising your rights. We will need you to provide us with an adequate form of identification, to ensure you are really you.

    You have certain rights available to you when it comes to your Personal Information. Subject to any exemptions provided by the applicable laws, you have the following rights:

  • Rectifying, correcting, updating and removing Your information:

    You can access, edit, modify and/or update your Personal Information by logging into your user profile or you can write to us via email in case you wish to exercise this right.

  • Accessing and updating or deleting Your information:

    Our Services and related documentation on our Platform provide you with the ability to access, update and delete certain Personal Information from your Account, if any. We will provide you with information about whether we hold any of your Personal Information upon request. We will respond to such requests within a reasonable timeframe. Please note, however, that we may need to retain certain information for record keeping purposes, to complete our Services and related obligations to you or to comply with our legal obligations.

  • Object or restrict processing of Your information:

    You have the right to: (i) object to our processing of your Personal Information; and/or (ii) request that we restrict the processing of your Personal Information.

  • Portability:

    You shall have the right to request us to transfer Your Personal Information to another controller, or directly to you, in a structured, commonly used and machine-readable format.

  • In order to exercise these rights, please contact us on privacy@illusto.com.

    We will generally not charge you to exercise your rights in respect of your personal data, and will respond to your request within a reasonable timeframe.

MISCELLANEOUS

ENFORCEABILITY OF THE REMAINDER OF THIS PRIVACY POLICY. THIS PRIVACY POLICY DOES NOT APPLY TO ANY INFORMATION OTHER THAN THE INFORMATION COLLECTED BY US THROUGH THE PLATFORM. THIS PRIVACY POLICY SHALL BE INAPPLICABLE TO ANY UNSOLICITED INFORMATION YOU PROVIDE US THROUGH THE PLATFORM OR THROUGH ANY OTHER MEANS. ALL UNSOLICITED INFORMATION SHALL BE DEEMED TO BE NON-CONFIDENTIAL AND WE SHALL BE FREE TO USE AND/ OR DISCLOSE SUCH UNSOLICITED INFORMATION WITHOUT ANY LIMITATIONS. THE RIGHTS AND REMEDIES AVAILABLE UNDER THIS POLICY MAY BE EXERCISED AS OFTEN AS NECESSARY AND ARE CUMULATIVE AND NOT EXCLUSIVE OF RIGHTS OR REMEDIES PROVIDED BY LAW. RIGHTS UNDER THIS POLICY MAY BE WAIVED ONLY IN WRITING. DELAY IN EXERCISING OR NON-EXERCISE OF ANY SUCH RIGHT OR REMEDY DOES NOT CONSTITUTE A WAIVER OF THAT RIGHT OR REMEDY, OR ANY OTHER RIGHT OR REMEDY.

THE FOLLOWING SECTION IS APPLICABLE TO RESIDENTS OF CALIFORNIA

“Personal Information” has the meaning given in the California Consumer Privacy Act of 2018 (“CCPA”) but does not include information exempted from the scope of the CCPA.

California’s “Shine the Light” law (Civil Code section 1798.83) also permits California residents once per calendar year to request and receive information about a business’ disclosure of certain categories of Personal Information to other companies for direct marketing purposes. If you are a California resident and would like a copy of this notice, please submit a written request to us via email at privacy@illusto.com. You must put the statement “Your California Privacy Rights” in your request and include your name, street address, city, state, and ZIP code. We are not responsible for notices that are not labeled or sent properly, or do not have complete information.

Your questions and concerns

If you have a question about our Privacy Policy or a concern or complaint about our personal data handling practices, please get in touch with us! You can contact us at:

Mail

Data Protection Officer
Toch Inc.
251 Little Falls Drive
Wilmington, Delaware 19808
United States

Email

privacy@illusto.com

Will we update our Privacy Policy?

We may update this Privacy Policy from time to time to ensure that our personal data handling practices are correctly reflected. We will notify individuals if we make changes to our Privacy Policy, by providing notice when you next access the Platform or Services or by otherwise contacting you through details you have provided to us. We will also post the new Privacy Policy on our webpage. We suggest that you regularly check this Privacy Policy to apprise yourself of any updates. Your continued use of Platform and Services or provision of personal data thereafter will imply your unconditional acceptance of such updates to this Privacy Policy.