Privacy Policy

We collect as little as we can. This website sets no tracking cookies, shows no ads and builds no profiles of its visitors. The Hope Creative app works on your computer: your projects, footage and renders never leave it. This page explains, in the order you are likely to meet them, which data is processed, why, by whom and for how long.

1. Who is responsible

2. Visiting this website

The website is hosted and delivered by Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA. When you open a page, your browser sends technical data that is needed to deliver it and to protect the site from attacks: IP address, date and time, the page requested, browser and operating system. Cloudflare processes this on our behalf under a data processing agreement and keeps it only briefly in server logs.

Legal basis: our legitimate interest in a secure, working website (Art. 6 (1) (f) GDPR).

Fonts and pictures

All fonts, pictures and example clips are served from our own servers. No connection to font or image services of others is made.

Settings in your browser

If you switch between light and dark, the choice is kept in your browser's local storage so the next page opens the same way. It never leaves your device. This is necessary for the function you asked for (§ 25 (2) TDDDG).

Links from creators

If you come through a creator's link (hopecreative.app/r/…), we count the visit as one more for that day and show the creator's discount code on the pricing page. Nothing about you is stored: no IP address, no cookie, no profile.

YouTube and Vimeo videos

Tutorial videos from YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) or Vimeo (Vimeo.com, Inc., 330 West 34th Street, New York, NY 10001, USA) are only loaded when you press play. Until then nothing is sent to them. When you press play, the provider receives your IP address and technical data and may set cookies; its privacy policy applies. Legal basis: your consent by pressing play (Art. 6 (1) (a) GDPR), which you can withdraw at any time by not playing further videos and clearing the provider's cookies.

3. Contacting us

When you write to us by email or through the contact form, we receive your email address and your message, and use them only to answer you. Mail to our addresses is forwarded by Cloudflare (section 2) to our mailbox, which is provided by 1&1 Mail & Media GmbH (GMX), Germany. We delete the conversation once it is settled, unless the law requires us to keep it.

Legal basis: answering your request (Art. 6 (1) (b) GDPR where it concerns a purchase or a contract, otherwise Art. 6 (1) (f) GDPR).

4. Buying Hope Creative Studio

Orders are handled by our reseller Paddle.com Market Limited, Judd House, 18–29 Mora Street, London EC1V 8BT, United Kingdom, as merchant of record. Paddle collects and processes your payment, billing and tax details as an independent controller under its own privacy policy. We never see your payment details.

From Paddle we receive what we need to deliver your license: your name, email address, country and the order details, and, if you used one, the creator code. Legal basis: performing the contract (Art. 6 (1) (b) GDPR).

5. Your account

You sign in with your email address and a code we send to it; there are no passwords. Signing in sets two cookies that are needed for it (§ 25 (2) TDDDG): one keeps you signed in for 30 days and can't be read by scripts, the other only tells the website to show “Account” instead of “Sign in”. Both go when you sign out. Sign-in codes are valid for 10 minutes and stored only in a form that can't be turned back into the code.

In your account we keep your email address, your licenses and the computers they are activated on (see section 6). You can change your email address, sign out on all devices and delete your account yourself. Without purchases, the account and everything in it is deleted. With purchases or creator payouts, your sign-in goes, and we keep the purchase and payout records as long as tax law requires (up to 10 years); a license you bought keeps working.

Legal basis: performing the contract (Art. 6 (1) (b) GDPR).

6. The Hope Creative app

The app works on your computer. It contacts our servers only for these purposes:

• Studio license: to activate it, and each time Studio starts to check that the license is still valid. It sends the license key, a device identifier, the computer's name, the operating system and the app version. The device identifier is a one-way hash made by the app from an identifier of your system; the identifier itself never leaves your computer. We keep this with your license, so you can see and deactivate your computers in your account and we can limit how often a license moves between computers.
• Updates: to check whether a new version exists. Only the edition (free or Studio) and the operating system are part of the request; nothing is stored about it beyond the server logs (section 2).
• Studio downloads: a download link is made for your license and works for 15 minutes.

The AI features run on your own computer; your pictures, audio and text are not uploaded. Log files stay on your computer unless you send them to us yourself. If you connect Claude, the app talks to Claude only on your computer; the conversation itself goes to Anthropic under your own Claude account and its terms, not through us.

Legal basis: performing the contract (Art. 6 (1) (b) GDPR) and our legitimate interest in protecting licenses and offering updates (Art. 6 (1) (f) GDPR).

7. The creator program

If you apply, we receive your name, email address, the channels you name and your message, and use them only to decide on your application and answer you. Applications we decline are deleted within six months.

As a creator, we keep your code, the visits and sales it brought (date, country and amount only; buyers stay anonymous to you and to the program) and the details you enter for payouts: PayPal email address, name, address and tax status or tax number. Payouts are made through PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg, which receives the PayPal email address and the amount. Credit notes and payout records are kept as long as tax law requires (10 years).

Legal basis: performing the creator agreement (Art. 6 (1) (b) GDPR) and our legal duties to keep records (Art. 6 (1) (c) GDPR).

8. Emails we send

Sign-in codes, your license key and receipts for the program are sent through Resend, Inc., USA, which processes your email address and the message on our behalf under a data processing agreement. Receipts for purchases come from Paddle.

9. Where your data is processed

Our data is stored and processed by Cloudflare. Cloudflare and our email service are based in the USA and are certified under the EU–US Data Privacy Framework, which the EU Commission has recognised as an adequate level of protection (Art. 45 GDPR); where that does not apply, standard contractual clauses are agreed (Art. 46 GDPR). Paddle is based in the United Kingdom, for which an adequacy decision exists; PayPal is based in the EU.

10. How long we keep what

• Server logs: a few days.
• Sign-in codes: 10 minutes; a signed-in session: 30 days or until you sign out.
• Your account, licenses and computers: as long as the account exists; purchase records up to 10 years (tax law).
• Creator applications: until decided, declined ones at most six months; creator payout records 10 years (tax law).
• Messages to us: until the matter is settled, unless the law requires longer.

11. Security

All connections are encrypted (HTTPS). Sign-in codes and sessions are stored only as hashes, licenses are signed so they can't be forged, and we keep access to the data to what is needed to run the service.

12. Your rights

You have the right to:

• access the data we hold about you (Art. 15 GDPR);
• have it corrected (Art. 16) or deleted (Art. 17), and its processing restricted (Art. 18);
• receive it in a common format (Art. 20);
• object to processing based on our legitimate interests (Art. 21);
• withdraw a consent at any time, for the future (Art. 7 (3)).

Write to and we will answer within a month.

You can also complain to a data protection authority, for example the one responsible for us: Die Landesbeauftragte für den Datenschutz Niedersachsen, Prinzenstraße 5, 30159 Hannover, Germany.

13. Changes

When our services change, this policy changes with them. The date at the top shows the current version.