Privacy Policy
Last updated: October 1, 2026
In short: we collect what we need to run your account and make your videos. Screenshots and page text of the apps you record are sent to AI providers to plan and perform your demo. We don't sell your data, don't use advertising trackers, and delete your data when you delete your account.
1. Who we are
Sundrylab.ai LLC ("we", "us") operates DemoReady and is responsible for the personal data described here. Contact: hello@sundrylab.ai.
2. What we collect
- Account data: your email, name (optional) and a hashed password. We never store your password itself. If you choose Continue with Google, Google shares your account's email address, name and an account identifier with us; we don't receive your Google password or access to anything else in your Google account.
- Billing data: your plan, credits and purchase history. Card details are collected and stored by Stripe, not by us.
- Demo content: the URLs, stories, scripts and narration you create, any logins and sample data you enter for a demo, and the screenshots, recordings and videos the Service produces. These may contain personal data if the app you record shows it, so we recommend recording with test accounts and sample data.
- API keys: stored only as secure hashes; the full key is shown to you once.
- Technical data: IP address, browser type, request logs and error logs, kept for security and troubleshooting.
- Usage and cost data: which demos you started, how they were paid for, and the AI processing cost of each.
3. How we use it
- To provide the Service: plan, record, narrate, store and share your demos (performance of our contract with you).
- To process payments and prevent fraud and abuse (contract and legitimate interests).
- To send service emails such as password resets and important account notices. We don't send marketing email without your consent.
- To keep the Service secure, fix problems and understand costs (legitimate interests).
- To comply with legal obligations.
We don't sell your personal data, and we don't use your demo content to train AI models.
4. Who we share it with
We use these service providers, only for the purposes above:
- OpenRouter and the AI model providers it routes to (for example Anthropic and Google): receive screenshots and page text of the apps you record, your story and demo context, to generate story ideas, scripts and on-screen actions. Demos you direct from your own AI agent over MCP are processed by that agent's provider under your agreement with them.
- Stripe: payments, subscriptions, invoices and receipts.
- Railway: hosting of the app, database and videos (United States).
- Resend: delivery of service emails.
- Google: only if you choose to sign in with Google, to confirm your identity.
Voice narration is generated on our own servers; your narration text isn't sent to a third-party voice service. We may disclose data if required by law or to protect our rights and users' safety.
5. Shared videos
When you turn on sharing for a video, anyone with the link can watch and download it. Turn sharing off or delete the demo to stop that.
6. Retention
We keep your account data and demos until you delete them or your account. Deleting a demo removes its video and data; deleting your account (Settings → Account) removes your demos, videos, API keys and account data. Payment records are kept as long as tax and accounting law requires. Server logs are kept for a limited period.
7. Security
Passwords are hashed with scrypt, sessions and API keys are stored as hashes, connections use HTTPS, and the recording browser is prevented from reaching private networks. No system is perfectly secure; please use test credentials for demos.
8. Cookies
We use a single essential cookie to keep you signed in, plus a short-lived one (10 minutes) while you sign in with Google, to protect that sign-in. We don't use advertising or third-party tracking cookies. Our pages load fonts from Google Fonts.
9. International transfers
We and our providers process data in the United States and other countries. Where required, transfers are protected by appropriate safeguards such as Standard Contractual Clauses.
10. Your rights
Depending on where you live (for example under the GDPR or CCPA), you may have rights to access, correct, delete or export your personal data, to object to or restrict processing, and to complain to a data protection authority. You can delete your account yourself in the app; for anything else email hello@sundrylab.ai. We don't sell or "share" personal data for cross-context advertising.
11. Children
DemoReady isn't intended for anyone under 18, and we don't knowingly collect their data.
12. Changes
We'll post updates here and change the date above. For material changes we'll notify you by email or in the app.