The short version: our software runs on your machine, your footage never reaches our servers, and we collect as little personal data as possible. Everything below is the detailed version — what we collect, why, the legal grounds, who we share it with, how long we keep it, and the rights you have.
Last updated: August 16, 2026 · Effective: August 16, 2026
This Privacy Policy explains how Creator Tools Lab ("Creator Tools Lab", "we", "us", "our") handles personal data in connection with the website ctlab.app (the "Site"), our desktop applications including SyncLab (the "Software"), and related services (together, the "Services"). For the purposes of the EU/UK General Data Protection Regulation (GDPR) and similar laws, Creator Tools Lab is the "controller" of the personal data described here.
This policy does not apply to third-party products, websites, or services that we do not own or control, even where we link to them.
Your media is processed on your own computer. When you use SyncLab, your video, audio, project files and timeline data are read and processed locally. We do not upload, transmit, copy, stream or store that content on any server, and there is no cloud-analysis step. That is a statement about the content of your media specifically — the Software is not offline-only. It requires a licence, so it contacts our server about that licence, and it sends a diagnostic log so we can fix problems: that log describes how the app behaved, but current versions of the Software do not include file names — clips are referred to by number — and it never includes file contents or where they sit on your disk. Both are set out in detail below.
Because of this design, the personal data we actually process is limited to what is described in the next section.
Where the GDPR applies, we rely on the following legal bases:
We do not sell your personal data. We share it only as needed to run the business, with service providers ("sub-processors") that act on our instructions under appropriate contractual safeguards. By category, these typically include:
We may also disclose information (a) to comply with law, legal process, or enforceable governmental requests; (b) to enforce our terms or protect the rights, property, or safety of Creator Tools Lab, our users, or others; and (c) in connection with a merger, acquisition, or sale of assets, in which case we will notify you of any material change to how your data is handled.
We and our sub-processors may process personal data in countries other than your own, including outside the EEA/UK. Where we transfer personal data internationally, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (and the UK equivalent) or an adequacy decision, as applicable.
The Site uses only a minimal set of cookies and similar technologies that are strictly necessary for it to function and stay secure (for example, to keep you signed in to your account). Our website analytics is cookieless — it sets no cookies and does not track you across other sites — so we do not display a cookie-consent banner for it. We do not use cross-site advertising trackers. You can control cookies through your browser settings; blocking strictly-necessary ones may affect how the Site works.
We keep personal data for as long as necessary for the purposes described in this policy. In general: contact and licence records are kept while your relationship with us is active and for a reasonable period afterwards; device records tied to a licence are kept until you release that computer from your account (or we remove it), and diagnostic logs and crash reports are kept until they are no longer useful for security and debugging and are then cleared. We do not currently run these on a fixed automatic schedule, so if you want your data removed sooner you can ask us and we will do it — see "Your rights" below. We may retain certain data longer where required by law.
One thing we keep indefinitely, and why. Where a product offers a reduced price to someone who has bought it before, that entitlement is not meant to run out — a gap of years should still count. It is counted per product — buying one thing again is cheaper, having bought one thing does not make a different one cheaper. The only way that can never run out is if we remember, without a time limit, that you bought: your account, which product, and the date. That narrow record is therefore kept indefinitely, for exactly that purpose and no other. It is the fact of the purchase only — payment details are not kept, because they are never ours to keep.
We use appropriate technical and organisational measures to protect personal data, including encryption in transit (HTTPS), restricted access, and storing licence keys in hashed form where feasible. No method of transmission or storage is completely secure, and we cannot guarantee absolute security; you use the Services at your own risk to the extent permitted by law.
Depending on where you live, you may have some or all of the following rights regarding your personal data:
What deletion actually does. On request we erase the personal profile tied to your email address — your account and contact details, your licence keys and the device records attached to them, and any pending verification codes. There is no self-service delete button; a person handles each request, so please email us (below). Two honest caveats about what is not fully erased. First, your purchase and billing records are anonymised rather than deleted: we remove the link to your identity from them — in both directions, whether you were the buyer or the person who referred one — while the bare financial record remains: which product, the date, the amount, and the payment provider's own transaction reference, but never any card details, which are never ours to hold. We keep that because it is a financial record we may be required to retain for tax. This removes the link to you in our systems; it does not promise that no one, anywhere, could ever reconnect a payment through the provider. One consequence worth knowing: a returning-buyer discount recognises you by exactly the link we have just removed, so once your profile is deleted we can no longer recognise you as a returning buyer — coming back later is at the first-time price. Second, records of a redeemed promotional code are anonymised the same way — the link to you is removed while the fact that a code was used remains, because otherwise deleting an account would reset every anti-abuse limit and the codes could be farmed indefinitely.
To exercise any right, email support@ctlab.app. We will respond within the timeframe required by applicable law. We may need to verify your identity before acting on a request.
We do not sell or share personal information, and we never have. There are no advertising pixels, no remarketing tags and no session-recording tools anywhere on this site — a deliberate choice, not an oversight.
Most consumer-privacy statutes set thresholds we are nowhere near, so rather than list which law reaches us where you live, we offer the same rights to everybody: ask what we hold about you, ask for a copy, ask us to correct it, ask us to delete it. Write to support@ctlab.app and we will act on it. Asking costs you nothing and changes nothing about your account or your price. Where a law in your country gives you more than this, that law applies on top — nothing here replaces it.
The Services are intended for professional and adult users and are not directed to children. We do not knowingly collect personal data from children under 16 (or the minimum age in your jurisdiction). If you believe a child has provided us personal data, contact us and we will delete it.
We do not make decisions that produce legal or similarly significant effects about you based solely on automated processing.
The Services may link to third-party websites or services. We are not responsible for their privacy practices; please review their policies before providing personal data.
Some browsers send a "Do Not Track" signal. Because there is no common industry standard for these signals, the Site does not currently respond to them, but we limit tracking as described above regardless.
This policy and any dispute relating to it are governed by the laws of the United States and the State of California, without regard to conflict-of-laws rules. If you are in the EU or UK, your mandatory data-protection rights under the GDPR still apply regardless.
We may update this policy from time to time. We will update the "last updated" date above and, for material changes, take additional steps such as notifying you by email or via the Site. Your continued use of the Services after an update means you accept the revised policy.
For any privacy question or request, contact us at support@ctlab.app or via our contact page.
Creator Tools Lab · ctlab.app · This document is provided for transparency and may be updated as our practices evolve.