Privacy Notice

What this notice covers

This notice covers everything Leumos runs at leumos.ai: the website and its waitlist form, optional website analytics, Leumos accounts and sign-in — including signing in with Google — and Leumos AI Studio, our colour-grading application, including the footage and grades you work on there. Leumos AI Studio is in closed beta and is not open to the public yet; the sections below describe how it handles your material when you use it.

The Video Color Check Chrome extension has a separate extension privacy policy; the extension itself collects no data and makes no network requests.

Waitlist information you submit

If you join the waitlist, the website sends the email address you enter, your optional role and feedback, and limited source details such as the referring page to the Leumos AI inbox through Resend, our email delivery provider. We use that information to manage early access and respond to what you send us. The form shows an error when the server does not confirm successful delivery.

Accounts and sign-in

A Leumos account is required to use Leumos AI Studio. You can sign in with an email address and a password, or with Google. Both routes are handled by Amazon Cognito, part of Amazon Web Services, and your account record is held in the AWS US East (N. Virginia) region.

For an account we hold your email address, whether that address has been verified, the name on your Google account if you sign in that way, and a normalised form of your email address that stops the same inbox being registered twice. When you sign up we check that the address is deliverable and is not from a disposable-inbox domain.

If you set a password, it is passed to Amazon Cognito, which stores it hashed. Leumos does not keep your password and cannot read it. Passwords must be at least 12 characters, and a new password is checked against the Have I Been Pwned breached-password corpus by a method that sends only the first five characters of its SHA-1 hash. Your password, and its full hash, never leave our systems.

While you are signed in, your session is held in cookies that page JavaScript cannot read. Sign-in tokens are never written to localStorage.

Signing in with Google

If you choose “Continue with Google,” we ask Google for three scopes and no others — openid, email and profile. From those, Google gives us:

• the email address on your Google account;
• basic profile information — the name on the account;
• whether Google has verified that email address;
• an identifier that lets us recognise you as the same person the next time you sign in.

We use that information for one purpose: creating your Leumos account and signing you in. We do not sell it, we do not share it with third parties for their own purposes, and we do not use it for advertising or ad personalization.

We never receive your Google password. We do not request access to Gmail, Google Drive, Contacts, Calendar, Photos, or any other Google service, and we cannot read them. You can disconnect Leumos from your Google account at any time in the security settings of your Google account; that stops future sign-ins but does not by itself delete your Leumos account, which is covered below.

Your footage and grades

Leumos AI Studio opens footage from your own computer. Importing a clip does not upload it: playback, scrubbing and grading read the file directly in your browser, and the colour work runs on your own machine. Three things do travel to our servers, and it is worth being exact about which.

• A small detection copy, sent automatically when you import. To find the scene cuts in your edit, the Studio builds a heavily reduced copy of the clip — 320 pixels wide, typically between about 250 KB and 2 MB — and sends it to our service. This happens without a separate click, because cut detection has to work as soon as you import. The full-resolution original is not sent at this point.
• Frames, if you use reference matching. When you match shots to a reference image, that reference is reduced to at most 512 pixels and sent, along with individual frames from the shots being matched. For a short clip, or a file your browser cannot read directly, the Studio sends the source for that shot instead, because the frames alone would be most of the file anyway. The Studio tells you, shot by shot, which of the two happened.
• The complete file, when you export. Exporting uploads the original from your browser to our cloud storage on Amazon S3, renders the graded result there, and gives you a time-limited link to download it.

Your footage is yours, and so are the grades and looks you create from it. We do not use either to train models, and we do not share your footage with anyone outside the service providers listed below who store and process it for us. The colour analysis itself runs on our own infrastructure — no third-party AI provider receives your material.

Optional Google Analytics

If you allow analytics, Google Analytics may process the page URL path and title, referral source, approximate location, device and browser information, and engagement information such as page views. After a successful waitlist submission, we may record a conversion event containing the selected role and whether feedback was supplied. The event does not contain your email address or the text of your feedback.

Read how Google uses information from sites that use its services and Google's privacy policy.

This GA4 property's event and user data retention setting is 14 months, so post-consent event and user-level Google Analytics data may be retained for up to 14 months.

Your analytics choice

Your choice is stored in this browser under a versioned localStorage key. If you decline, Google Analytics does not load. If you later withdraw consent through “Privacy choices” in the footer, analytics storage is denied and first-party Google Analytics cookies whose names begin with _ga are removed. If the browser blocks localStorage, your choice lasts only for the current page and the website asks again on a later visit.

How long we keep things

Your account and its email address are kept until the account is deleted. Working files that our rendering service creates while it prepares a grade are removed automatically within about 30 minutes, and the records that track an upload in progress expire within 24 hours.

We have not yet set a fixed retention period for the footage and rendered exports held in our cloud storage after an export, and we would rather say so than publish a schedule we do not keep. Until we set one and update this notice, that material stays until you or we delete it, and you can ask us to delete it at any time. If you are working with a client's material and need a defined retention period before you upload, email us and we will tell you exactly where things stand.

Deleting your account and your data

To delete your Leumos account, the information held with it, and any footage you have uploaded, email studio@leumos.ai from the address on the account and ask us to delete it. There is no self-service delete button in the product yet; the request is handled by a person, and we will confirm when it is done. You can also ask us for a copy of what we hold about you, or to correct it.

Service providers

We use a small number of providers to run the service, and they process information only to provide it to us:

• Amazon Web Services — accounts and sign-in (Amazon Cognito), storage of uploaded and rendered footage (Amazon S3), and the computing that runs the service.
• Google — sign-in with Google, and optional website analytics if you allow it.
• Resend — delivery of waitlist and account email.
• Have I Been Pwned — the breached-password check described above, which receives only the first five characters of a password hash.

Questions and requests

To ask about this notice or request access to, correction of, or deletion of waitlist information you submitted, email studio@leumos.ai.

Changes

If our data practices change, this notice will be updated and its “Last updated” date will change.