Privacy Policy

Who we are

Nice Touch Group Ltd is a company registered in England and Wales (Companies House number 16674872). We build Nice Touch, an AI-powered workflow and edit assistant for professional video post-production teams. When this policy refers to “Nice Touch”, “we”, “us”, or “our”, it means Nice Touch Group Ltd.

What data we collect

We collect and process the following categories of personal data:

• Account information: name, email address, and password (stored as a secure hash) when you register.
• Profile information: organisation name, team membership, and role within your account.
• Usage data: records of AI edit generations, asset analysis activity, project usage, and feature interactions.
• Project content: names of files you upload for analysis, transcripts generated from those files, project briefs, notes, and timeline data. This content is processed solely to deliver the service to you.
• Communications: if you contact us by email or through in-app reporting, we retain those communications.
• Technical data: app version, operating system, and diagnostic information collected for error reporting and service reliability. This includes application logs transmitted automatically from the desktop app to our monitoring infrastructure, containing session identifiers, error details, and performance data.

How we use your data

We process your data on the following lawful bases:

• Contract performance: to provide the Nice Touch service you have signed up to, including operating the AI assistant, processing your media, and managing your account.
• Legitimate interests: to improve the product, monitor service reliability, and understand usage patterns at an aggregated level. We do not use your project content to train AI models.
• Legal obligation: where we are required to retain or disclose data by law.
• Consent: where we have asked for your consent, for example for marketing communications.

Where your data is stored

All Nice Touch infrastructure is hosted within the United Kingdom. The third-party services we use to deliver the product predominantly process data in the European Union. Some AI services and Google authentication perform processing in the US.

• Where any third-party processor is located outside the UK, we ensure appropriate safeguards are in place — such as Standard Contractual Clauses — and that your data is not retained for any purpose beyond delivering the service. We take appropriate steps to ensure this remains the case as our infrastructure evolves.

Data retention

We retain your account and usage data for as long as your account is active. If you close your account, we will delete or anonymise your personal data within 90 days, except where we are required by law to retain it for longer. Project content — media files, transcripts, briefs — is retained for as long as it exists within your account. You can delete individual assets and projects at any time.

Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate or incomplete data
• Request erasure of your data (“right to be forgotten”)
• Restrict or object to certain processing
• Receive your data in a portable format
• Withdraw consent where processing is based on consent

Cookies

Our website and web application use essential cookies required for authentication and session management. We do not use advertising or tracking cookies. Where analytics are used, data is processed in aggregated, anonymised form only.

Security

We implement appropriate technical and organisational measures to protect your personal data.

Changes to this policy

We may update this Privacy Policy from time to time. Where changes are material, we will notify you by email or via an in-app notice. The “last updated” date at the top of this page will reflect the current version.