Privacy Policy

TRANSFORMKIT Ltd (“TransformKit”, “we”, “our”, or “us”), a company registered in the United Kingdom, operates the website transform-kit.com and provides media transformation services accessible through our website, API, command-line interface (CLI), and the Model Context Protocol (MCP) for AI assistants and agents (collectively, the “Service”).

This Privacy Policy explains what information we collect, how we use it, and the choices you have. It applies to visitors of our website and to registered users of the Service.

1. Information We Collect

Account information

When you create an account, we collect your email address and authentication details needed to sign you in and secure your account.

Content you submit

When you use the Service, you may upload or send files, media, and related parameters so that we can perform the transformations you request. We process this content to provide the Service and to deliver your results back to you. We do not use the content you submit to train machine-learning models.

Usage and access data

We record information about how the Service is used — for example, the requests made to our API, which access credential or connected application made them, timestamps, and volume of usage. We use this to operate the Service, meter usage against your plan, enforce limits, and detect abuse.

Billing information

If you purchase a paid plan, payments are processed by our payment provider, Stripe. We receive limited billing details such as your subscription status and customer identifier. We do not store your full card details on our systems.

Waitlist information

If you join our waitlist, we collect the email address you submit so that we can contact you about availability of the Service.

Technical information

Our servers automatically log basic technical information — such as IP address, browser and device type, and the pages requested — solely to keep the Service secure and reliable and to prevent fraud and abuse.

We do not use third-party analytics or tracking services, we do not track your activity across other websites, and we do not build advertising or behavioral profiles of you.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Authenticate you and secure your account and credentials
• Process the transformations you request and deliver your results
• Measure usage against your plan and enforce usage limits
• Process payments and manage subscriptions
• Prevent fraud, abuse, and other prohibited activity
• Communicate with you about the Service, including important notices
• Improve and understand how the Service is used

We do not sell or rent your personal information. We share it only as described in this policy.

3. Programmatic Access and Connected Applications

The Service can be accessed programmatically in several ways: using API keys, through our command-line interface (CLI), and via the Model Context Protocol (MCP), which lets AI assistants and agents you use act on the Service on your behalf. Signing in through the CLI or authorizing an MCP client creates access credentials tied to your account.

When you authorize a third-party application — including an MCP client or other AI assistant — to access your account, you direct us to share the data necessary for that application to function on your behalf, within the scope you approve. You can review and revoke access to connected applications and credentials at any time from your account. Once you authorize a third-party application, its handling of your data is governed by that application’s own privacy policy, not this one.

4. How We Share Information

We share information with service providers who process data on our behalf so that we can operate the Service. These include:

• Cloud hosting and storage providers
• Authentication and database providers
• Payment processing (Stripe)
• Email delivery providers

These providers may only process data as necessary to provide their services to us. We may also disclose information if required by law, to enforce our terms, or to protect the rights, safety, and security of our users and the Service.

5. Data Retention

We retain account and usage information for as long as your account is active or as needed to provide the Service. Content you submit for processing, and the results we generate, are retained only as long as necessary to deliver your results and operate the Service, after which they may be deleted automatically.

We retain waitlist information only for as long as necessary to contact you about the Service. If you close your account or request deletion, we will delete your personal information, except where we are required to retain it to comply with legal obligations or resolve disputes.

6. Data Storage and Security

We take reasonable technical and organizational measures to protect your information against unauthorized access, disclosure, or loss. Access credentials such as API keys are stored only as a hashed value and cannot be retrieved after they are created; the full key is shown to you once at creation. Access to personal information is limited to authorized personnel who need it to operate the Service.

7. Cookies

We use only strictly necessary cookies — those that keep you signed in and protect your account, such as session and security cookies. These are essential to provide the Service and cannot be turned off through the Service.

We do not use advertising, marketing, tracking, or analytics cookies, and we do not track you across other websites. Because we set only strictly necessary cookies, no cookie-consent banner is required to use the Service.

8. Your Rights

Depending on your location, you may have rights regarding your personal data, including the right to:

• Access the personal data we hold about you
• Request correction or deletion of your data
• Object to or restrict certain processing
• Request a copy of your data in a portable format
• Withdraw consent where processing is based on consent

To exercise these rights, please contact us using the details below.

9. International Users

The Service is operated using infrastructure that may be located in countries other than your own. By using the Service, you understand that your information may be transferred to and processed in those countries, which may have different data protection laws than your jurisdiction.

10. Children’s Privacy

The Service is intended for businesses and developers and is not directed at children. We do not knowingly collect personal information from anyone under the age of 13. If you believe a child has provided us with personal information, please contact us and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time.

If changes are made, the updated policy will be published on this page with a revised “Last updated” date.

12. Contact

If you have questions about this Privacy Policy, please contact:

TRANSFORMKIT Ltd

Email: support@transform-kit.com

Website: https://transform-kit.com