Privacy policy
DRCTR is operated by Emery Enterprises in Australia. Contact jack@craitve.com for privacy questions, access/correction requests, deletion requests or complaints. Updated 21 October 2026.
Information handled
Account identifiers and sign-in details are handled through Clerk. DRCTR stores account-linked projects, briefs, cast and continuity records, references, generated asset URLs, review comments, OAuth tokens, encrypted provider credentials and operational usage/error records. Stripe handles payments; DRCTR stores subscription/customer identifiers and status rather than full card details.
How information is used and shared
Information is used to authenticate access, maintain projects, submit your requested work, return results, administer billing and investigate errors or support requests. Your host may send DRCTR the arguments of a tool call. Media generation sends relevant prompts/references to the provider selected for that job. DRCTR-funded reasoning is disabled by default; reasoning occurs in your chosen host under its policies.
Service providers and overseas processing
Hosting and storage use Vercel and Supabase; authentication uses Clerk, email delivery uses Resend, and billing is designed for Stripe. Your chosen host and connected creative providers also process information. Processing may occur outside Australia under those providers' arrangements; we do not promise Australia-only storage. Contact us for more specific processing-location information before submitting sensitive material.
Credentials and sharing links
Provider keys are encrypted at rest and decrypted server-side to call the selected provider. Do not paste credentials into chat. A project's owner view requires authentication, but anyone who has an enabled public review link can access the material shared there and submit comments. Do not put confidential material on a public review link.
Retention and deletion
Project records remain in the account until removed through supported controls or a reviewed deletion request; no automatic project-retention period is currently promised. Provider-hosted media may expire independently. Private audio download links last seven days; link expiry does not itself delete the underlying stored file. Deletion requests may require account verification and consideration of necessary legal/security records and backups. Disconnecting a provider removes its saved connection but does not erase information already sent to that provider.