Privacy Policy
Last updated May 6, 2026
SDR to HDR ("we", "us") converts standard-dynamic-range videos into HDR with AI. This policy explains what we collect, why, how long we keep it, and your rights. We process personal data under the EU/UK GDPR and equivalent laws (including KVKK in Türkiye and the CCPA in California).
1. Who we are
SDR to HDR is operated by an independent developer. Contact: hi@sdrtohdr.com. Polar.sh is our Merchant of Record and processes all payments.
2. What we collect
Account: email address and sign-in identifier. User content: the videos you upload and the converted output videos. Usage: conversion events, durations, error events, IP address, device and browser metadata, locale. Billing: Polar customer ID, subscription status, purchase history. We do not see or store full card numbers — Polar handles payments end-to-end.
3. Legal basis (GDPR/UK GDPR)
We process data to perform the contract you sign up for (Art. 6(1)(b)), to comply with legal obligations such as tax record-keeping (Art. 6(1)(c)), and on the basis of legitimate interests in keeping the service safe and abuse-free (Art. 6(1)(f)). Where required, we rely on your consent (Art. 6(1)(a)).
4. Your videos
Uploaded videos are used solely to produce the conversions you request. We do not train AI models on your content, do not sell it, and do not share it with advertisers. Uploads and outputs are auto-deleted within 7 days of creation.
5. How long we keep it
Uploaded and converted videos: up to 7 days, then auto-purged from object storage. Account and billing records: kept for the period required by tax law (typically up to 10 years for invoices).
6. Who processes it for us
Supabase (auth + database, EU region), Cloudflare R2 (object storage), a third-party AI inference provider (video conversion), Polar.sh (payments / Merchant of Record), Resend (transactional email), Google Analytics 4 (aggregated usage stats). Each is bound by a data processing agreement.
7. International transfers
Some processors are based in the United States. Transfers rely on the European Commission's Standard Contractual Clauses or, where applicable, an adequacy decision.
8. Your rights
You can access, correct, export, or delete your data at any time. EU/UK/Turkish residents may also object to processing, restrict it, or lodge a complaint with their data protection authority. Email hi@sdrtohdr.com — we respond within 30 days.
9. Children
SDR to HDR is not for users under 16. We delete accounts created by minors as soon as we become aware.
10. Cookies
We use a minimal set of strictly-necessary cookies (sign-in session, locale preference). See the Cookies page for the full list.
11. Changes
We may update this policy. Material changes are announced by email and on this page; the "last updated" date above always reflects the current version.
Questions? Email support@sdrtohdr.com.