Privacy Policy

Last revised on 26 September 2026, effective as 26 September 2026


We are committed to protecting our visitors' and members' privacy. This Privacy Policy explains what personal and other data of yours will be collected by Sycamore on its website (sycamore.to) and our web applications, how the information will be used, and how you can control the collection, use, correction and/or deletion of your information. We will not use or share your information with anyone except as described in this Privacy Policy.

The "Company", "Sycamore", "us", "we" or "our" refers to Sycamore Labs LTD, a company incorporated in the United Kingdom and the sole owner and operator of the website and web applications. Sycamore Labs LTD is not affiliated with Pendora LTD or any other Pendora-branded product.

This Privacy Policy is incorporated into and subject to our Terms of Service. BY USING OUR WEBSITE / WEB APPLICATIONS, YOU AGREE TO THE TERMS OF THIS PRIVACY POLICY.

Please review this Privacy Policy carefully so that you understand our privacy practices. If you do not agree to any of these practices, your remedy is not to use the website or web applications.

What Information We Collect

Information you provide to us – You provide us information about yourself, such as your name and email address, when you register with us, sign up for updates, or otherwise contact us. If you correspond with us by email or via the website, we may retain the content of your messages, your email address, and our responses.

Registration on our website– Individuals accessing our web application are asked to register (sign up for a paid account) via our website. You'll be asked to provide limited personal data: your name and email address, plus a unique password — or you may register through Google. Personal data you've provided to Google will be made available to us to set up your account. Signing up through Google means agreeing to this Privacy Policy and our Terms of Service.

Videos you upload for captioning– Sycamore's core service adds captions to videos you upload. To do this, we store your uploaded video in our cloud storage and send its audio to a speech-recognition provider, which returns a word-level transcript. We then store the transcript, the captions you create and edit, your style choices and presets, and the captioned videos you export. We keep these so you can come back to your projects, unless you delete them.

Your videos may contain personal data, such as the faces and voices of you or other people, and anything said in them. We process this content only to provide the service to you. We do not use voices or faces in your videos to identify anyone.

We do not intentionally collect special categories of personal data (e.g. health, biometric data). If your videos contain such data, you are responsible for having the right to upload it.

Information you provide automatically – When you access the website or web application, we automatically collect technical information: (1) browser type/version, (2) operating system, (3) referring website, (4) date and time of access, and (5) your IP address. We store this in server logs, along with usage information such as pages viewed, features used, and time spent.

This is used to (1) deliver our website and application correctly, (2) optimize service performance, (3) maintain system reliability, and (4) provide law enforcement with information necessary for investigation of a security incident.

Billing information – Subscription payments are processed by the third-party payment processor, Stripe. We do not store full card numbers on our own servers.

This personal data will not be passed to third parties for their own marketing. You can opt out of our newsletter anytime via "Unsubscribe" or by emailing privacy@sycamore.to.

Third-Party Infrastructure and Sub-processors

To provide Sycamore, we rely on:

These providers are contractually required to protect your data consistent with this Policy and use it only to provide services to us, or as required by law.

Data Security and Encryption

No method of transmission or storage is completely secure; we continuously work to improve our practices, but cannot guarantee absolute security.

How We Use Your Information

We use your data to provide the Sycamore service, transcribe and caption your videos, render your exports, maintain your account and projects, provide support, process billing, and communicate with you about your account or our products.

Content you post in any shared or public areas may become visible to other users; deleted content may persist in caches or archives outside our control.

We use your email to send account/billing notices and, if you opt in, product updates or marketing. Opt out anytime via account settings, "Unsubscribe," or privacy@sycamore.to.

We do not sell your personal data. We may share limited, anonymized, or aggregated data with service providers for advertising/product insight; this data does not identify you personally.

How We Share Your Information

We use independent contractors and service providers ("Outside Contractors") — hosting providers, speech-recognition providers, payment processors, support tools — to operate Sycamore. They must (1) protect your data consistent with this Policy and our Terms, and (2) use it only for the contracted purpose or as required by law.

We may disclose personal data where required by law or legal process; to investigate/prevent suspected illegal activity or Terms violations; to protect the rights, property, or safety of Sycamore, our users, or others; or in connection with a merger, acquisition, or asset sale.

We may perform statistical analysis of usage; any shared data is anonymized/aggregated and contains no personal data.

Sycamore does not rent or sell your personal data.

California Privacy Rights

Shine The Light– California residents may request info on third parties we've disclosed data to for direct marketing, by emailing privacy@sycamore.to with "California Privacy Rights Request" in the subject.

Do Not Track– We don't currently alter data practices based on browser DNT signals.

CCPA – California consumers can request to know, delete, or correct their personal data, without discrimination for exercising these rights. Categories we collect:

Email privacy@sycamore.to with proof of California residency to exercise these rights. We confirm receipt within 10 business days, respond within 45 days (extendable by 45 more with notice).

We do not "sell" or "share" personal data as defined under the CCPA.

Other US States

Several other US states have similar consumer privacy laws; we'll honor requests under those laws too. Email privacy@sycamore.to with proof of residency.

International Users

Sycamore's infrastructure operates across US cloud regions. If you access Sycamore from outside that jurisdiction, your data may be transferred to and processed in a jurisdiction offering different protections than your home country.

EEA and United Kingdom Privacy Rights

If you're an EEA/UK resident, our legal basis for processing is your consent, contract performance (providing the service), or legitimate interests not overridden by your rights. You may:

Contact privacy@sycamore.to to exercise these rights.

Data Retention

We retain account data, uploaded videos, transcripts, captions, and exported videos while your account is active, or as needed to provide the service. You can delete individual projects at any time. On account deletion, we delete or anonymize personal data within a reasonable period, except where retention is legally required.

Children's Privacy

Account registration requires users to be 18 or older. Users under 18 may only use Sycamore through a parent or guardian's account, with the parent or guardian consenting to this Privacy Policy and our Terms of Serviceon the minor's behalf and taking responsibility for that use.

Because Sycamore is marketed broadly (including on social media), we treat US users under 13 and EEA/UK users under 16 as within scope of COPPA and GDPR-K / the UK Age Appropriate Design Code, respectively, and only process their data where a parent or guardian has provided the applicable consent through their account. We do not knowingly collect data directly from a child without such consent, and will delete any such data promptly if discovered. Contact privacy@sycamore.to if you believe a child has provided us data without appropriate consent.

Your Choices and Rights

Update your account info anytime by logging in. Contact privacy@sycamore.toto (1) update/correct your data, (2) change communication preferences, or (3) delete your data by deleting your account. Deletion won't affect data already shared with third parties prior to your request.

We may not be able to remove every backup copy immediately; we'll delete/anonymize data in active systems as soon as reasonably practicable.

Changes to This Privacy Policy

Updates will be posted on our website with a revised effective date. Significant new uses/disclosures will be notified by email at least 14 days before taking effect. Continued use after non-significant changes constitutes acceptance.

Questions About This Privacy Policy

Email: privacy@sycamore.to