Maesto LLC, 10620 Treena St Suite 230, San Diego, CA 92131, United States, runs MediaPlace and decides how the information described here is handled. Questions: support@mediaplace.io.
The short version
- Your files are yours. We store and process them to run the service for you, and nothing else.
- We never use your files to train AI models, ours or anyone else’s.
- We do not sell personal information, and we do not use your files for advertising.
- Share pages are visible to anyone who has the link, and we record basic access information so you can see when a link was opened.
- You can export or delete your data at any time.
1. What we hold
Your account: name, email address, password (stored hashed, never in readable form), workspace name, plan, and your settings. Card details never reach us (see section 3).
Your files: what you upload, plus what we generate from them: previews, thumbnails, converted versions, and search data. These exist to serve you, and are never used to train AI models. Files can contain personal information about other people, for example photographs of them or details inside the file, and you remain responsible for having the right to upload that.
Information already inside your files: camera model, dates, and any location the camera recorded. We read it so you can search and sort by it. You can remove it with the metadata tools.
Sharing activity: when a share link was opened, and what a guest picked, approved or uploaded through it, so the link’s owner can see it. Guests do not need an account.
Technical records: IP address, browser type, times of requests, and errors. We use these to keep the service running, to investigate abuse, and to meet legal obligations. For every file uploaded, by you or by a guest through one of your links, we record who uploaded it, from which IP address and browser, when, and a fingerprint of the file (its SHA-256), so we can answer a report or a lawful request about it.
Support messages you send us.
2. Why we hold it
| What | Why |
|---|---|
| Account details | To give you access and support, and to contact you about the service |
| Files and generated versions | To run the features you use: previews, search, sharing, conversion |
| Sharing activity | To show the link’s owner what happened to their share |
| Technical records | Security, abuse investigation, debugging, legal obligations |
| Billing details | To take payment and meet tax and accounting rules |
| Messages about your account always. Emails about activity on your files, a weekly summary, tips, and offers and news are sent unless you switch them off, each by itself, from the link at the bottom of any of them or in Settings |
For customers in Europe and the UK, our legal basis is: performing our contract with you (running the service and billing), our legitimate interests (security, preventing abuse, improving the product), your consent (marketing email), and legal obligations (tax, and reporting illegal content).
3. Who else is involved (subprocessors)
We use these companies to run the service. They act on our instructions, except where noted.
| Company | What they do | Where |
|---|---|---|
| Cloudflare | Stores your files, delivers them, protects the site | United States |
| Neon | Hosts the database | United States |
| Amazon Web Services | Runs the application, keeps the nightly backup of the database, and sends our email: messages about your account, activity on your files, the weekly summary, tips, and offers and news | United States |
| Backblaze | Keeps backup copies of your original files | United States |
| Stripe | Takes payments. Card details go to Stripe, never to us | United States and others |
| Neurall | Runs the AI tools (edit with AI, remove a background, upscale, animate, generate). It receives the picture or clip only when you run one of these tools on it, never your library | United States |
| Canadian Centre for Child Protection (Arachnid Shield) | Checks fingerprints of uploaded images against a database of known illegal material. Not a processor: they decide their own use of what they receive. We send fingerprints, not your images | Canada |
We keep this list current, and it is maintained alongside our retention decisions. Adding a company here is a change we make deliberately, not quietly.
4. Checking for illegal images
To keep MediaPlace from being used to store child sexual abuse material, we create a mathematical fingerprint of uploaded images and compare it against databases of known illegal material held by child protection organizations. The fingerprint cannot be turned back into your picture, and we do not send your pictures to do this. The check is automatic: no one looks at your files to run it.
A fingerprint can match a picture that only looks alike. So when there is a match, the file is hidden and a named member of our staff looks at that file, and only that file, to confirm it before anything else happens. If it is not what the check said, the file comes back and nothing else changes. If it is confirmed, we are required by law to preserve the material and report it, and we close the account. We do not check for anything else this way, and we do not look through private libraries.
5. How long we keep things
| What | How long |
|---|---|
| Your files | Until you delete them. A deleted file waits in your Trash, where you can restore it, until you empty the Trash. Files emptied from the Trash are deleted at once, and their backup copies within 15 days. The files of a closed account are deleted 14 days after closing. The files of a workspace that holds more than its plan for longer than 30 days are deleted as the Terms describe (section 6): its Trash, then the files beyond what its plan holds, except a file our checks identify as known child sexual abuse material, which we keep as the law requires |
| Account details | While your account exists, then 12 months |
| Sharing activity (views, picks, approvals) | 12 months after the link is deleted |
| Technical records | 12 months |
| Upload records (who uploaded each file, from where, when) | 12 months, or longer while a report or a legal matter about that file is open |
| Billing records | 7 years, because tax law requires it |
| Records about abuse reports and removals | 3 years, so we can show what we did |
6. Your choices and rights
You can:
- see and edit your account details in settings,
- download your files at any time,
- delete files or your whole account,
- turn off marketing email.
Depending on where you live, you also have the right to ask for a copy of your personal information, to correct it, to delete it, to limit or object to how we use it, and to complain to your data protection authority. In California, you can ask what we collect and ask us to delete it, and we do not sell or share personal information as those terms are used there.
Write to support@mediaplace.io and we answer within 30 days.
7. Where your data is
Our systems run in the United States. If you are in Europe or the UK, your information is transferred there. We do not currently offer storage inside Europe.
8. Security
Files are stored in private storage and delivered through short-lived signed links, so a file is never openly available on the internet. Passwords are hashed. Access to production systems is limited to people who need it. No system is perfectly secure, so keep your own copies of anything irreplaceable.
We keep backup copies of original files with Backblaze and a nightly backup of the database with Amazon Web Services, only to restore the service after a fault. A deleted file leaves the backups within 15 days, and a database backup is kept for 13 days.
If personal data is ever exposed, we will tell affected customers and the relevant authority as the law requires.
9. Children
MediaPlace is for professional use and is not intended for children under 18. We do not knowingly create accounts for them.
10. Changes
We will post changes here and, when they matter, tell you by email at least 30 days in advance. For an old version, write to support@mediaplace.io.