Privacy Policy
Last updated: August 20, 2026
1. Who we are
Retensis is a service that analyses short-form video and gives creators and marketers feedback on it. For the purposes of the EU General Data Protection Regulation (GDPR), the data controller is:
Retensis is operated by Bohencia. Contact: privacy@retensis.com
This policy explains what we collect, why, who else sees it, and what you can do about it. If anything here is unclear, write to us and we will answer.
2. What we collect
Account information
Your email address and display name.
Content you give us
Videos you upload, links you paste, scripts and topics you enter, campaign briefs you write in Ads Studio, and messages you send to the Retensis Agent. We also store the analysis results generated from that content, including transcripts and scores.
Data from accounts you connect
If you choose to connect a YouTube, TikTok, or Google Ads account, we access data from it. Sections 5, 6 and 7 describe exactly what, for each one. Connecting is optional and you can disconnect at any time.
Usage information
How many analyses you have run, which features you use, and your subscription status.
Technical information
Your IP address and basic device information, used for security, rate limiting, and preventing abuse. When you sign up we store a one-way hash of your IP address, and a normalised form of your email address, so we can detect people creating multiple free accounts to bypass usage limits. We do not store the raw IP address for this purpose, and the hash cannot be reversed to recover it.
3. Why we process it, and our lawful basis
Under the GDPR we must tell you the legal ground for each use of your data:
- To provide the service (analysing your videos, storing your results, running your account and subscription). Lawful basis: performance of a contract with you.
- To send transactional emails such as account verification, password resets, and billing notices. Lawful basis: performance of a contract.
- To keep the service secure and prevent abuse, including rate limiting and detecting duplicate free accounts. Lawful basis: our legitimate interests in protecting the service and its paying users.
- To improve the accuracy of our analysis using anonymised, aggregated signals, as described in section 13. Lawful basis: our legitimate interests in improving the product.
- To send product and promotional emails such as feature updates and content tips. You can opt out at any time using the unsubscribe link in every such email or from your account settings. Lawful basis: consent, or our legitimate interests where permitted for existing customers.
- To access accounts you connect (YouTube, TikTok, Google Ads). Lawful basis: consent, given when you authorise the connection and withdrawable by disconnecting.
- Analytics cookies. Lawful basis: consent. See section 19.
- To meet legal and accounting obligations, such as retaining invoices. Lawful basis: legal obligation.
4. Your videos
Uploaded videos are stored securely on our infrastructure so you can review them alongside your analysis. We retain a video until you delete it or close your account. You can delete any video, or your entire account, at any time from your dashboard, which removes the file from our storage. We never sell your videos, and we never use them to train AI models. Section 13 explains precisely what we do use to improve the product.
Videos analysed from a link are read through the relevant platform's API and are not downloaded to our servers.
If you use the spoken coach memo feature, we generate an audio file from your analysis and store it alongside that analysis. It is deleted when the analysis or video is deleted.
5. Connected accounts: YouTube
Retensis uses YouTube API Services to provide certain features. By connecting your YouTube account or using features that access YouTube data, you agree to be bound by the YouTube Terms of Service.
Information we access from YouTube:
- Your channel name, subscriber count, and video count
- Your video library metadata (titles, descriptions, publish dates, view counts, like counts, and comment counts)
- Audience retention analytics for your videos (average percentage viewed and retention curves)
- Thumbnail URLs associated with your videos
How we use YouTube data:
- To analyze your content performance and identify patterns across your video library
- To generate personalized recommendations and insights based on your channel data
- To provide audience retention analysis for your videos
- To measure and improve how accurately we predict audience retention. We analyze published videos from your connected channel and compare our prediction against the real retention YouTube reports, so that future predictions for your channel are corrected using your own results. This uses only data you have already connected, does not use your account credits, and the resulting measurements are used solely to improve accuracy for your channel.
How we store YouTube data:
YouTube access credentials are encrypted at rest using industry-standard encryption. Your video library metadata and analytics are stored securely in our database for as long as your account is active and your YouTube channel remains connected. We do not sell, share, or transfer your YouTube data to any third party, except as necessary to operate the Service (for example, secure cloud infrastructure providers).
Revoking access:
You can disconnect your YouTube account from the Creative DNA page at any time. You can also revoke Retensis's access to your YouTube data directly through Google's security settings. Upon disconnection or revocation, we delete your stored YouTube credentials and video library data.
Google's Privacy Policy applies to data collected by Google: https://policies.google.com/privacy.
6. Connected accounts: TikTok
If you connect a TikTok account, we access it only to bring your own content and its public performance into Retensis.
Information we access from TikTok:
- Your basic profile information, including your display name, username, and avatar
- Your account statistics, such as follower and video counts
- Your video list and its public metadata
We use this to analyse your content and generate insights about your own account. Your TikTok access credentials are encrypted at rest. You can disconnect at any time from your account settings, and you can also revoke access from within TikTok. On disconnection we delete the stored credentials and the TikTok data associated with them.
TikTok's own privacy policy applies to data collected by TikTok: https://www.tiktok.com/legal/privacy-policy.
7. Connected accounts: Google Ads
Ads Studio predicts how well a video advertisement will hold attention. If you want to see how that prediction compared with what actually happened, you can connect your own Google Ads account. This is optional, and Ads Studio works without it.
What we access, when you connect an account:
- Your own video campaigns and their names and identifiers
- Performance metrics for those campaigns: video views, view rate, engagement rate, cost, and the proportion of viewers who watched 25%, 50%, 75% and 100% of the video
What we never do:
- We have read-only access. We never create, change, pause or remove campaigns, ads, budgets or bids
- We never access an account you have not explicitly connected
- We never sell or share your advertising data
We read this data about once a day while your account is connected. Your access credentials are encrypted at rest. You can disconnect at any time from your account settings, or revoke access through Google's security settings. On disconnection we revoke the credentials and delete the advertising data we stored.
Google's Privacy Policy applies to data collected by Google: https://policies.google.com/privacy.
8. Ads Studio
Ads Studio is available on the Team plan. When you create a campaign you write a brief describing what you are selling, the offer, and the audience you are selling to. We store that brief and use it to judge the advertisements you analyse under it. Treat it as you would any business document: do not put personal data about other people in it.
Campaigns belong to the workspace rather than to one person, so everyone on your team can see them and the advertisements analysed under them. Advertisement analyses are kept separate from your creator video history and do not appear in it.
You can mark an advertisement as a competitor's, in which case we review it as research material. You are responsible for ensuring you have the right to upload any video you submit.
9. Retensis Agent
The Retensis Agent is an assistant that can answer questions about your workspace. We store your conversations so you can return to them, and the agent can read your own analyses and videos in order to answer. You can delete a conversation at any time. Conversations are private to you and are not shared with your teammates.
10. Sharing inside a team
If you are on a Team plan, or you accept an invitation to someone else's team, your analyses and videos become visible to the other members of that workspace. This is how team features are meant to work, but it is worth stating plainly: a colleague in your workspace can see the videos you analyse and the results you get. Your Retensis Agent conversations are not shared.
If you leave a team, or the team ends, you keep your own data and the sharing stops.
11. Third-party access you authorise
Retensis can connect to external AI assistants and other applications that support the Model Context Protocol. If you choose to connect one, you are shown exactly what it is asking for and you authorise it explicitly. Once authorised, that application can read the data covered by the permissions you granted, such as your past analyses.
We do not control what a third-party application does with data you allow it to read, and its own privacy policy governs that. You can revoke a connection at any time from your account settings, which immediately stops its access.
12. Integrations you configure
You can ask Retensis to send notifications to Slack, Discord, or a webhook address of your choosing, for example when an analysis finishes. When you set one up, the content of those notifications is sent to the destination you chose, and that destination is outside our control. You can remove an integration at any time.
13. How we improve the product
We want to be precise here, because this is the part people most want a straight answer on.
We do not train AI models on your videos. Your footage is not used as training material, and it is not shared with anyone for that purpose.
We do use anonymised, aggregated signals derived from analyses to make our predictions more accurate. For example, when we can compare a prediction we made against what actually happened, that comparison helps us calibrate future predictions across the whole service. These signals are aggregated and stripped of identifying information. Nothing derived this way is attributable to you, your account, or your business, and no customer ever sees another customer's data.
If you would rather your data was not used even in this anonymised form, contact us and we will exclude your account.
14. Service providers
We rely on trusted providers to run Retensis. Each processes data only as needed to deliver its part of the service, under contract, and none of them may use your data for their own purposes. We do not sell your data to anyone.
The categories are:
- Cloud hosting and database providers, which store your account and analysis data
- Object storage providers, which store your uploaded videos and generated audio
- AI processing providers, which perform the analysis of your content
- Email delivery providers, which send transactional and product emails
- Error monitoring providers, which help us detect and fix faults
- Payment providers: Stripe for web subscriptions, and RevenueCat for subscriptions purchased through a mobile app store. Payment card details are handled entirely by the payment provider and never reach our servers
- Analytics providers, only with your consent. See section 19
15. International transfers
Your data is not all stored inside the European Economic Area, and we would rather say so plainly than leave you to assume otherwise.
- Our primary database, which holds your account, your analyses, and the credentials for any accounts you connect, is hosted in the United States.
- Uploaded videos and generated audio are held by a storage provider that places them in Eastern Europe. That placement is made on a best-effort basis for performance and is not a contractual guarantee of where the files remain.
- Payment, email, error monitoring and analytics providers may process data in the United States or elsewhere.
Where personal data leaves the European Economic Area, the transfer is protected by an appropriate safeguard recognised under the GDPR, such as the European Commission's Standard Contractual Clauses or an adequacy decision covering the recipient. You can ask us for details of the safeguards that apply to any particular provider.
16. Security
We implement industry-standard security measures, including encryption in transit (TLS), encryption of access credentials at rest, secure authentication, and row-level security in our database so that one account cannot read another's data. No system is perfectly secure, but if a breach affects your personal data and is likely to result in a risk to your rights, we will notify you and the relevant supervisory authority as required by law.
17. Data retention
- Videos, analyses and generated audio: until you delete them, or until you close your account
- Account information: for as long as your account is open
- Connected account data and credentials: until you disconnect that account, or close your Retensis account
- Agent conversations: until you delete them, or close your account
- Anti-abuse records (hashed IP and normalised email): retained while the account exists, because they exist to stop the same person creating repeat free accounts
- Invoices and billing records: retained for as long as accounting and tax law requires, even after you close your account
- Anonymised aggregate signals (section 13): retained indefinitely, because they are no longer linked to you
When you delete something, we remove it from our database and queue the underlying file for deletion from storage. Deletion is not always instantaneous, but it is durable: a file that fails to delete first time is retried until it is gone.
18. Your rights
Under the GDPR you have the right to:
- Access the personal data we hold about you
- Have inaccurate data corrected
- Have your data deleted
- Restrict how we process your data
- Object to processing we carry out on the basis of our legitimate interests
- Receive your data in a portable format, and export your analysis data from your dashboard at any time
- Withdraw consent at any time, where we rely on consent. Withdrawing does not affect processing already carried out
You can exercise most of these directly from your dashboard, or by writing to privacy@retensis.com. We will respond within one month.
You also have the right to lodge a complaint with a data protection supervisory authority. You can raise it with the authority in the country where you live, where you work, or where you believe the issue occurred. The European Data Protection Board publishes a directory of national authorities at edpb.europa.eu. We would rather you came to us first, but you are not required to.
Automated analysis
Retensis scores and comments on your videos automatically. These are predictions and opinions intended to help you make your own decisions. They produce no legal or similarly significant effect, and nothing stops you from disregarding them.
20. Children
Retensis is a tool for creators and businesses and is not directed at children. You must be at least 16 years old to create an account. We do not knowingly collect personal data from anyone under that age, and if we learn that we have, we will delete it. If you believe a child has given us their data, contact us at privacy@retensis.com.
21. Changes to this policy
We may update this privacy policy from time to time. We will post the new policy on this page with an updated revision date, and where a change materially affects how we handle your data, we will tell you directly by email before it takes effect.
22. Contact
If you have questions about this privacy policy, or want to exercise any of the rights in section 18, contact us at privacy@retensis.com.