Privacy Policy
How theRec collects, uses, and safeguards your information on our screen recording and video collaboration platform.
Last updated: June 2026
Data controller
theRec.site (operated from Alexandria, Egypt) is the data controller for personal information processed to provide the service. Contact: [email protected]. Legal business name: [Your registered company name — update before launch].
1. Information We Collect
We collect information needed to provide theRec.site, including: name and email; authentication credentials (hashed passwords; we do not store plain-text passwords); Google account identifier if you use Google sign-in; workspace and team membership data; video metadata and uploaded content; subscription and billing contact details; technical data such as IP address, browser type, device information, and usage analytics; and communications you send to support.
2. How we use your information
We use personal information to operate screen recording, hosting, sharing, and collaboration; manage accounts and workspaces; process subscriptions; send service emails; provide support; improve performance; prevent fraud and abuse; and meet legal obligations. We do not sell your personal information or video content.
Legal bases (GDPR)
Where the GDPR applies, we process personal data on the following bases:
- Contract — to provide the service you signed up for (account, recordings, workspaces, subscriptions).
- Legitimate interests — to secure the platform, prevent abuse, improve reliability, and support our business (balanced against your rights).
- Consent — where required, such as non-essential analytics cookies or optional communications.
- Legal obligation — to comply with tax, accounting, fraud prevention, and lawful requests.
3. Sharing with service providers
We operate under a strict baseline: we do not sell your personal files or telemetry. We share data only with trusted processors that help us run theRec.site:
- Cloud hosting and infrastructure providers
- Cloudflare R2 (or equivalent) for video and file storage
- Email providers for transactional messages
- Google OAuth for optional sign-in
- Analytics and monitoring providers
- Paddle.com for payment processing (see Section 5)
4. Data retention
We keep personal data only as long as needed for the purposes described in this policy.
- Active accounts: data is retained while your account is open and as needed to provide the service.
- Deleted videos: items in trash may be kept up to 30 days before permanent deletion from our systems and storage.
- Deleted accounts: we delete or anonymize personal data within a reasonable period, except where retention is required for security, billing disputes, or legal compliance.
- Backups: residual copies in encrypted backups may persist for a limited time before being overwritten.
- Logs: security and operational logs are kept for a limited period (typically up to 12 months unless needed for an investigation).
- Billing records: transaction and invoice data may be retained for several years as required by tax and accounting law.
5. Payments — Paddle as Merchant of Record
Paid subscriptions are sold by Paddle.com (including Paddle.com Market Limited or an affiliated Paddle entity), which acts as Merchant of Record. Paddle is an independent data controller for payment, billing, tax, fraud prevention, and transaction compliance data. Paddle may collect name, email, billing address, payment method details, and transaction history. theRec.site receives limited subscription status from Paddle and does not store full card numbers. See Paddle's policies at paddle.com/legal.
6. Data protection and security
theRec.site uses administrative, technical, and organizational measures to protect data, including:
- HTTPS/TLS encryption in transit
- Access controls and permission restrictions
- Authentication and account security controls
- Monitoring for unusual or abusive activity
- Ongoing security improvements
No method of transmission or storage is completely secure. We cannot guarantee absolute security.
If we become aware of a personal data breach likely to affect your rights, we will take appropriate steps, including notification where required by law.
7. International data transfers
theRec.site is operated from Egypt and uses providers that may process data in Egypt and other countries. Where required, we rely on appropriate safeguards such as standard contractual clauses offered by our providers.
8. Cookies and similar technologies
We use cookies and local storage for sign-in, security, language preferences, and analytics. See our Cookie Policy for details. You can manage cookies in your browser; disabling essential cookies may affect core features. Cookie Policy
9. Your privacy rights
Depending on your location (including the EU/UK), you may have the right to:
- Access your personal data
- Correct inaccurate data
- Delete your data (subject to legal exceptions)
- Export/portability of certain data
- Restrict or object to certain processing
- Withdraw consent where processing is consent-based
- Lodge a complaint with your local data protection authority
Email [email protected] with subject "Privacy Request". We aim to respond within 30 days. You can export data from account settings where available, or request deletion via support.
10. Privacy requests and contact
For access, correction, deletion, export, or other privacy requests, contact us via ourContact Page or email [email protected].
11. Sensitive information in recordings
theRec.site is designed for screen recording, video hosting, sharing, and team collaboration. You are responsible for what you record, upload, or share.
Do not upload or share highly sensitive information unless legally authorized. Examples include:
- Government identification documents
- Financial records or payment card information
- Medical records
- Confidential business information
- Personal information about third parties without a lawful basis
We may remove or restrict access to content that creates privacy, security, legal, or compliance concerns.
12. Content review and moderation
We are not obligated to monitor all content but may review, investigate, restrict, remove, or disable access to content that violates laws, our policies, or platform security requirements.
13. Legal requests
We may comply with valid legal requests, court orders, and regulatory obligations when legally required, including disclosure of account or content information where permitted by law.
14. Subscriptions and refunds
Paid subscription terms, refund eligibility, and cancellation rules are in ourRefund Policy and Terms & Conditions.