Account access
Email verification, protected password records and expiring server sessions form the account boundary. Password-reset flows revoke existing sessions.
Your creative work
deserves care.
Clear account boundaries, private project files
and a workflow that preserves your changes.
Project ownership
Project and file requests check the signed-in account. A project ID by itself does not grant access to another person’s workspace.
Private files
When storage is connected, project media uses private object storage and short-lived authorized links. Ready uploads are sealed separately from their temporary upload location.
Preserved revisions
Timeline changes use version checks. A late generation does not silently replace a newer manual edit; its ready output remains in Files.
Bounded processing
Generation workers receive scoped job access, a time limit and a reserved output budget. Progress and cancellation are checked against the active job lease.
Payment boundaries
Stripe’s embedded form collects card details. The server checks payment ownership and state before granting subscription access.
Transparency over badges.
This preview does not claim an unverified security certification, availability percentage or completed independent audit. Production processing, storage and recovery qualification remain release requirements.