Privacy
Effective May 2026
ControlCraft turns a brief into a finished motion graphic. The principles below describe how we handle the data you bring in.
What we collect
Sign-in is provided by your enterprise SSO (Okta, Azure AD, Google Workspace, Ping, or your own identity provider). We store your email + display name and the session tokens needed to sign you in. We do not track behaviour beyond the request logs needed to debug a failed render.
Uploads
Reference videos, images, and briefs you attach are written to a per-session workspace scoped by a random id, not addressable without it. We do not move uploads off your tenant or share them with third parties.
Generated assets
Animations and videos produced by ControlCraft live alongside their session workspace. You can export them locally; nothing is published or shared automatically.
Retention
Session workspaces follow your tenant's retention policy and may be cleared at any time. Long-term assets should live in your DAM, not ControlCraft.
Contact
Questions or deletion requests: hello@controlcraft.io.