Privacy Policy
Privacy Policy — Pretty Cool Marketing & CULO Last updated: 22 June 2026
About Us
Pretty Cool Marketing is an Australian creative and content systems business helping founders, creators, and businesses build story-led content and publishing workflows.
CULO is a Canva-integrated publishing, content creation, and storytelling tool built by Pretty Cool Marketing. It helps users organise, generate, edit, and publish content directly inside Canva.
Pretty Cool Marketing is committed to protecting your privacy and handling your information responsibly in accordance with applicable privacy laws, including the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles.
Contact: support@prettycoolmarketing.com Website: prettycoolmarketing.com/culo
1. Information We Collect
Depending on how you use our services, we may collect:
Canva user ID (to identify your account and persist your media library between sessions)
Name and contact information
Email address
Business or brand information (name, industry, offers, voice style)
Uploaded media and creative assets (photos, videos, audio, voice recordings)
Usage and interaction data
Form submissions and onboarding responses
Content prompts and generated outputs
Device, browser, and diagnostic information
Transcripts generated from your video and audio content
Payment or transaction information (processed by third-party providers; we do not store card details directly)
2. Media & File Access
When you connect third-party services such as Google Drive, Google Photos, or Dropbox, CULO only accesses files and media you explicitly select.
We do not:
Scan your full cloud library
Index unrelated files
Access media you have not selected
Modify or delete files in your connected accounts
Imported content may include photos, videos, B-roll footage, talking head clips, voiceovers, vlog clips, long-form video files, and other creative media assets.
Imported media is used solely to support your requested workflows inside CULO and Canva.
3. How We Use Your Information
We use information to:
Provide, operate, and improve our services
Support media import and creative workflows
Generate story-led content outputs including captions, hooks, blogs, and structured posts
Process and render uploaded media
Transcribe audio and video content
Analyse long-form content where requested
Personalise user workflows and generation outputs
Respond to support enquiries
Deliver purchased products or services
Communicate service updates, launches, or offers (you may unsubscribe at any time)
Monitor service performance, security, and reliability
We do not sell personal information or user data.
4. AI & Content Generation
CULO uses artificial intelligence to generate hooks, captions, transcriptions, and other content outputs. This may include content structuring, caption generation, story shaping, blog generation, summarisation, transcript analysis, content repurposing, and media scripting.
Specifically, CULO uses:
OpenAI Whisper — transcribes speech from your video clips
OpenAI GPT — generates hooks, captions, and social media content based on your brand profile and transcript
Your video audio and brand profile are sent to OpenAI's API for processing. OpenAI's data handling is governed by their API Privacy Policy. OpenAI does not use API-submitted data to train models by default.
Information processed by AI services may include prompts, onboarding responses, user-written content, transcript text, uploaded content metadata, and generated outputs. This processing occurs solely to provide requested functionality.
We do not use your content to train our own AI models.
You remain responsible for reviewing and approving all AI-generated content before publishing.
5. Video Processing & Transcription
Certain features process uploaded media to generate creative outputs. This may include video rendering, audio extraction, media merging, format conversion, transcript generation, clip analysis, and automated media preparation.
Temporary processing files may be created during these workflows. These files are retained only as long as operationally necessary:
Rendered video outputs: automatically deleted within 1 hour of download
Extracted audio and temporary thumbnails: deleted immediately after processing
Transcript and analysis files: retained with your media library until you request deletion
6. Where Your Data Is Stored
Uploaded videos and photos are stored on secure cloud infrastructure hosted by Cloudflare R2 and Railway
Your brand profile and media library metadata are stored on our Railway server, backed up to Cloudflare R2
All infrastructure is located in the United States
Both Cloudflare and Railway maintain GDPR-compliant data processing agreements.
7. Data Retention
Data typeRetentionUploaded videos and photosUntil you delete them from your CULO media libraryRendered video outputsAutomatically deleted within 1 hourBrand profile and settingsUntil you request deletionCloud-imported temporary filesDeleted within 24 hours, often within the active sessionDiagnostic logsRetained for operational monitoring only
To request deletion of all your data, email: support@prettycoolmarketing.com
8. Google API Data & Permissions
CULO accesses user-selected files through Google APIs only with your explicit authorisation.
What we access
We request read-only access only, to allow you to browse and select your own files for import. This may include Google Drive and Google Photos (if enabled).
We do not read unrelated files, modify your files, delete your files, or manage your account content.
Current permissions
drive.readonly — Read-only access to files you explicitly select from Google Drive.
Pending permissions
photoslibrary.readonly — Read-only access to your Google Photos library, allowing you to browse and import selected photos or albums. If activated, Google Photos access is subject to the same privacy commitments described in this policy.
How we use Google data
Google API data is used only to complete workflows you initiate — such as importing media into CULO or Canva. It is not used for advertising, profiling, unrelated analytics, or resale.
Files temporarily processed through Google integrations are deleted from our servers within 24 hours and in most cases retained only for the active session.
Limited Use Disclosure
CULO's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Revoke access https://myaccount.google.com/permissions
Google Privacy Policy: https://policies.google.com/privacy
9. Dropbox
If you connect Dropbox, CULO accesses only files you explicitly select. We do not browse unrelated Dropbox content.
Dropbox Privacy Policy: https://www.dropbox.com/privacy
10. Canva Integration
When using CULO through Canva, CULO interacts with Canva APIs to create assets, upload generated content, insert media into designs, and support editing and publishing workflows. Content added to your Canva design is also subject to Canva's own privacy policies.
Canva Privacy Policy: https://www.canva.com/policies/privacy-policy/
11. Third-Party Services
We share data only with the service providers listed below, solely to operate the app:
ProviderPurposePrivacy PolicyOpenAISpeech-to-text, caption and hook generationopenai.com/policiesCloudflareVideo and media storagecloudflare.com/privacypolicyRailwayServer hostingrailway.app/legal/privacyGoogleMedia import (Drive, Photos)policies.google.com/privacyDropboxMedia importdropbox.com/privacyStripe / Systeme.io Payment processing (if applicable)Per provider
We do not share your data with advertisers, data brokers, or any third party for marketing purposes.
12. Payments
If paid subscriptions or services are offered, payments are processed by third-party providers such as Stripe or Systeme.io. We do not store payment card details directly.
13. Cookies & Analytics
Our website and services may use cookies, analytics tools, and diagnostic systems to improve performance and understand usage. This may include browser and device information, usage patterns, referral sources, interaction metrics, and crash/error diagnostics. You may manage cookie settings via your browser.
14. Data Storage & Security
We take reasonable technical and organisational steps to protect your information, including HTTPS encryption, access controls, credential protection, environment-based secrets management, secured storage infrastructure, authenticated API access, and controlled third-party integrations.
No system can guarantee absolute security.
15. International Data Transfers
Our servers and third-party infrastructure are located in Australia and the United States. By using our services, you consent to your data being processed in these locations where permitted by law.
Where required under applicable law (including GDPR), we process data based on legitimate interest in providing our services, your consent where required, and contractual necessity where services are purchased.
16. Your Rights
You may:
Access the data we hold about you
Request correction of inaccurate data
Request deletion of all your data
Withdraw consent at any time by uninstalling the CULO app from Canva
Disconnect Google or Dropbox integrations at any time
Unsubscribe from communications
To exercise any of these rights: support@prettycoolmarketing.com
17. Children's Privacy
Our services are not intended for children under the age of 13. We do not knowingly collect personal information from children.
18. Changes to This Policy
We may update this Privacy Policy from time to time. Updated versions will be published at prettycoolmarketing.com/privacypolicy with a revised effective date. Continued use of our services constitutes acceptance of updates. Material changes will be communicated via the CULO app where possible.
Contact Pretty Cool Marketing — Australia support@prettycoolmarketing.com prettycoolmarketing.com/culo