Privacy policy

What we collect

Only what the product needs to work. There is no tracking, no advertising and no behavioural profiling anywhere on the site.

• Account: your email address, your name if you give one, and a hashed password. If you sign in with Google we store the Google account id and email instead of a password.
• Your Envato catalogue: the items we mirror from your connected account — titles, descriptions, tags, Content ID fields — plus the edits you make to them here.
• Envato access tokens, encrypted at rest. They are used only to read your own portfolio through Envato's API.
• A security and activity log of actions taken in your account (sign-ins, syncs, edits, pushes), including the IP address and browser user agent of the request.
• Billing identifiers from Stripe if you subscribe. Card details are handled by Stripe and never reach our servers.

The browser extension

The "epicukulele helper" extension automates the edits you have already prepared in the CRM. It is deliberately thin, and it is worth being precise about what it does and does not do.

It never sends anything to our servers. The epicukulele page you have open does that, using your normal logged-in session; the extension only receives a queue of edits from that page and reports back whether each one succeeded.

• It runs only on your own item pages on audiojungle.net and on epicukulele.com. It cannot see any other site you visit.
• It acts as you, in your own browser, using the Envato session you are already signed in to. It never sees, stores or transmits your Envato password.
• It stores nothing on your device — no local database, no cached catalogue, no settings.
• It sends no data to us or to any third party, and it contains no analytics, telemetry or advertising code.

Who else processes your data

We keep this list short on purpose, and we do not sell or rent your data to anyone.

• Envato — read access to your own portfolio, using tokens you granted.
• Stripe — subscription payments and card handling.
• Mailgun — transactional email such as confirmations and password resets.
• Brevo — the product newsletter, if you are on it. You can unsubscribe from any message.
• OpenAI — only when you ask for AI-generated titles, descriptions or tags. The track details needed for that request are sent; nothing is sent unless you press the button.

How long we keep it

Your catalogue and account data stay for as long as your account exists. Delete your account from Settings and it is removed, along with your Envato tokens and mirrored catalogue.

The activity log is kept for a limited period for security and debugging, then discarded.

Your choices

You can disconnect an Envato account at any time from Settings, which deletes its stored tokens. You can delete your whole account yourself, without asking us. You can unsubscribe from the newsletter without affecting your account.

If you are in the EU or UK, you have the right to access, correct, export or erase your personal data — write to us and we will action it.

Contact

Questions about this policy, or a data request: [email protected].