Privacy Policy

Last updated: October 10, 2026

DataDriver (“DataDriver,” “we,” “us”) is a tool for creating data-driven designs in Adobe After Effects, together with an optional web companion. You sign in with Google in the panel, and a person approves each account. This policy explains what information we collect, how we use it, and the choices you have. Questions? Email chris@istoica.com.

Information we collect

  • Account information. When you sign in with Google, we receive your name, email address, profile picture and Google account ID (via the openid, email and profile scopes) to create and identify your account. A person approves each account by hand; until then the panel waits. We do not receive your Google password.
  • Your answer (optional). If you answer the one-line question after signing in, we store it with your account and email it to the person who reviews your request.
  • Downloads. You do not need an account to download a panel. From the Download button we record that a download happened (which panel, version and source), not who downloaded it. A download from a link we emailed you is recorded with your account. To limit abuse we count downloads per network address in memory for up to an hour; that count is not saved.
  • Google Sheets and Drive data (only if you connect a source). If you choose to connect a Google Sheets data source, we read the contents of the specific spreadsheets you select (using the read-only spreadsheets.readonly scope) and access only the individual files you explicitly pick (using the drive.file scope). We do not request or receive access to your entire Google Drive.
  • Service and security data. To operate the service we store records needed for authentication (such as the devices linked to your account) and an audit log of account actions.

Panel usage counts (optional)

The After Effects panels keep a small ledger on your computer of what you finished: a build, a batch, a camera bake, a recipe, an agent turn — with the product, the kind, the day, how long it took, whether it finished, and a count. Never a composition name, a file path, a row of your data, or a subject. The ledger is ~/Documents/ae-mcp-bridge/receipts.jsonl; it is yours to keep or delete.

  • Sharing is off until you turn on Share counts with DataDriver in Valet's settings. You can turn it off at any time.
  • When it is on, Valet sends once a day only the counts per day, product and kind, with your signed-in device. A sent line looks like: { "day": "2026-10-08", "product": "datadriver", "kind": "batch", "count": 2, "n": 14 }

How we use information

  • To authenticate you and grant access to the DataDriver panel and companion.
  • To provide the features you request — loading your data and generating design previews and renders.
  • To operate, secure, troubleshoot, and support the service.

We do not use your information for advertising, and we do not sell it.

Google user data — Limited Use

DataDriver’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Specifically, we use Google Sheets and Drive data only to provide the features you request; we do not transfer or sell this data; we do not use it for advertising; and no human reads your Google data except where necessary for security or support, to comply with applicable law, or with your explicit consent.

How we store and protect information

Your data is stored on our self-hosted server infrastructure. OAuth refresh tokens are encrypted at rest, and access is restricted to what is needed to run the service.

Service providers

We do not sell or rent your personal information. A small number of service providers process data on our behalf to run the service: Google (sign-in and the Sheets/Drive APIs), Fly.io (application hosting), Resend (transactional email such as your welcome message), and Vercel (marketing-site hosting and basic, privacy-friendly analytics).

Retention and deletion

We retain your account information while your account exists, including while a request is pending and after a request is declined. You can ask us to revoke your access or delete your data at any time by emailing chris@istoica.com. You can also revoke DataDriver’s access to your Google account at any time from your Google Account permissions.

Children

DataDriver is a professional design tool and is not directed to children under 13.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the “Last updated” date above and post the new version on this page.

Contact

For any questions about this policy or your data, email chris@istoica.com.