Effective August 31, 2026
RecordThen LLC, a Florida limited liability company (“RecordThen,” “we,” “us,” or “our”), operates RecordThen at http://recordthen.com and the related RecordThen and Crowbot product experiences (collectively, the “Service”). This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit or use the Service.
We act as a controller for account, billing, support, security, and business-operation information. For recordings, repository context, workspace documents, and other content a business customer submits to the Service, RecordThen generally acts as that customer's processor or service provider. The customer controls why the content is collected, who may access it, and which Service features process it.
Depending on the features you use, we collect the following categories of information:
Please do not intentionally capture passwords, private keys, access tokens, payment-card data, health information, or other highly sensitive information. You are responsible for having the rights and permissions needed to record or upload information about other people.
When an enabled feature needs transcription or AI generation, we send only the content and context needed for that feature to the selected provider. Hosted features may use Amazon Transcribe, OpenAI, or an approved model routed through our infrastructure. We configure supported hosted providers not to train general-purpose models on customer content and do not opt customer content into provider training programs. Outputs may be inaccurate and should be reviewed before use.
A workspace may instead choose to use its own OpenAI, Anthropic, or OpenRouter API key. In that case, RecordThen encrypts the credential at rest and sends requests under the customer's provider account. The customer's agreement and settings with that provider govern the provider's handling of those requests. We do not control a customer-selected provider account or its retention settings.
We disclose information only as needed for the following purposes:
We do not sell personal information, disclose customer content to data brokers, or use customer content for personalized, retargeted, or interest-based advertising. Because we do not sell or share personal information for cross-context behavioral advertising, there is no need to opt out of those practices. Where applicable, we honor legally recognized browser-based opt-out signals such as Global Privacy Control.
We use required cookies for sessions, authentication, security, billing flows, and cross-site request forgery protection. We also use local storage for preferences such as theme, media-player settings, and dismissed notices; first-party identifiers to deduplicate anonymous views of shared resources; and a first-party attribution cookie when a tagged campaign link is used. Campaign attribution may be retained for up to one year. We do not currently use third-party behavioral advertising or analytics scripts. If that changes, we will update this Policy and obtain consent where required before activating non-essential tracking.
The RecordThen Chrome extension inspects ordinary pages locally to provide privacy guards, capture controls, error detection, and the recording overlay. It does not upload browsing history or page content merely because a page is open. Collection begins only when you start a recording, screenshot, error report, Snap & Tell session, BugSquash capture window, or Loom import.
Depending on the action, extension-derived data may include the page URL and title; screenshots; tab or screen video; microphone audio; capture timestamps; selected error text; bounded request metadata during an active or explicitly armed capture window; and Loom video, creator, chapter, summary, transcript, and viewer metadata available to your signed-in Loom session. Supported request URLs, headers, and body previews are bounded and redacted before upload. Sensitive-site rules can block capture. Visible password fields do not block or pause capture.
Preferences, a connection token, pending recording chunks, recovery manifests, and token-free Loom import checkpoints may be kept in extension-controlled Chrome storage. Media may be staged locally until uploaded, saved, completed, or discarded. Loom authentication cookies, authorization headers, and signed media URLs are used only for the active session and are not retained in checkpoints.
When you trigger an upload, extension-derived data is sent over HTTPS to the connected RecordThen workspace. Access follows the workspace and recording visibility you select. You can delete captures and imports in RecordThen, discard local recovery items, remove the extension to clear its extension storage, or contact support@recordthen.com. See the Chrome extension support page for deletion instructions.
We do not sell extension-derived data, use it for behavioral advertising, or transfer it to advertising platforms or data brokers. Our use and transfer of information received from Chrome complies with the Chrome Web Store User Data Policy, including its Limited Use requirements. We use extension-derived data only to provide or improve the extension's prominent user-facing features, maintain security and reliability, provide support with your permission, comply with law, or complete a user-approved business transfer. Humans may not read extension-derived data except with your explicit consent for specific support, when necessary for security, when required by law, or when the data has been aggregated and anonymized for internal operations.
We keep account and customer content while the account or workspace needs it and for as long as necessary to provide the selected features. When an authorized user deletes content or requests account deletion, we remove or de-identify it from active systems subject to workspace ownership, legal obligations, fraud prevention, security, dispute resolution, and technical limitations. Residual copies may remain temporarily in protected backups, queue records, provider systems, and security or diagnostic logs until their normal retention cycles expire. Billing, transaction, and legal records may be kept for the periods required by law.
Deleting a public link does not remove copies that another person previously downloaded or sent to a customer-directed integration. Removing an integration stops future access but may not delete information already delivered to that provider.
We use safeguards appropriate to the nature of the information, including HTTPS in transit, private object storage for customer artifacts, workspace-scoped authorization, expiring signed URLs, encrypted integration and AI credentials, password hashing, supported capture redaction, access restrictions, and monitoring for abuse and reliability. No service can guarantee absolute security. If a security incident affects personal information, we will investigate and notify affected customers or authorities when required by law or contract.
RecordThen LLC is based in the United States, and information may be processed in the United States or other countries where our service providers operate. Those countries may have different privacy laws. Where required, we rely on provider contractual commitments and legally recognized transfer mechanisms and apply the protections described in this Policy.
Where laws such as the UK GDPR or EU GDPR apply, we process information as necessary to perform our contract with you, pursue legitimate interests in operating and securing the Service and conducting proportionate business communications, comply with legal obligations, and act with consent where consent is the appropriate basis. You may withdraw consent at any time without affecting earlier lawful processing.
Depending on where you live, you may have rights to access, correct, delete, restrict or object to processing, receive a portable copy, withdraw consent, or appeal a decision about a privacy request. You may also have the right to complain to your local data-protection authority.
The Service is for business use and is not directed to anyone under 18. We do not knowingly collect personal information from children. If you believe a child has provided information to the Service, contact us so we can investigate and take appropriate action.
We may update this Policy as the Service, providers, or legal requirements change. We will post the revised Policy with a new effective date. If a change materially reduces protections for existing customer content, we will provide reasonable advance notice through the Service or by email when required or appropriate.
RecordThen LLC
75 Coral Dr.
Safety Harbor, FL 34695
United States
Privacy and support requests: support@recordthen.com