INSTILL VIDEO PRIVACY POLICY

Last Updated: April 28, 2026

1. Introduction and Scope

Good Tripper LLC, a California limited liability company doing business as Instill Video, together with its affiliates (“Instill,” “we,” “us,” or “our”), respects your privacy and is committed to handling Personal Information in a transparent, lawful, and responsible manner.

This Privacy Policy describes how we collect, use, disclose, store, and otherwise process Personal Information in connection with:

our creator-facing platform for hosting, distributing, marketing, and monetizing digital content, memberships, subscriptions, applications, and related services;
our websites, mobile applications, creator storefronts, and tools that link to this Privacy Policy;
professional services we provide, including onboarding, implementation, migration, branding support, consulting, customer success, and related services; and
any other products or services that reference this Privacy Policy

(collectively, the “Services”).

This Privacy Policy applies to:

Creators, meaning businesses or individuals that use the Services to host, distribute, market, or monetize offerings; and
End Users, meaning individuals who access, purchase, subscribe to, or interact with Creator offerings through the Services.

By accessing or using the Services, you acknowledge that you have read and understand this Privacy Policy.

2. Key Definitions

For purposes of this Privacy Policy:

“Creator” means a customer of Instill that uses the Services to publish, distribute, market, or monetize content, memberships, applications, or related offerings.

“End User” means any individual who views, purchases, subscribes to, communicates with, or otherwise interacts with a Creator through the Services.

“Personal Information” means information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked with an identified or identifiable individual or household, as defined under applicable law.

“Sensitive Personal Information” means Personal Information treated as sensitive under applicable law, such as precise geolocation, account credentials, financial account information, government identifiers, health information, or similar data categories.

“Processing” means any operation performed on Personal Information, including collection, storage, use, disclosure, analysis, transfer, deletion, or other handling.

“Service Providers” means vendors, contractors, subprocessors, and other third parties that process Personal Information on Instill’s behalf to support operation of the Services.

3. Role of the Parties

Instill provides a technology platform that enables Creators to offer content, subscriptions, communities, and digital services to End Users. The parties’ privacy roles depend on context.

3.1 Instill as Processor / Service Provider

Where Instill processes Personal Information on behalf of a Creator in connection with the Creator’s End Users, subscriptions, memberships, or audiences:

the Creator generally determines the purposes for processing that data;
Instill processes such data to provide, secure, maintain, host, and support the Services; and
Instill acts as a processor, service provider, or similar role under applicable law.

3.2 Instill as Independent Controller / Business

Instill acts as an independent controller, business, or equivalent role with respect to Personal Information we process for our own legitimate business purposes, including:

Creator account registration and administration;
billing and payment coordination;
support and communications;
fraud prevention and security;
product analytics and service improvement;
contractual administration, Order Forms, and Statements of Work; and
legal compliance and enforcement.

3.3 Creator Responsibilities

Creators are independently responsible for:

their own privacy notices and practices;
lawful collection and use of Personal Information;
responding to requests regarding Creator-controlled data where applicable; and
compliance with consumer protection, marketing, and data protection laws.

Instill is not responsible for the independent privacy or data handling practices of Creators.

4. Categories of Personal Information We Collect

The categories of Personal Information we collect depend on how the Services are used.

4.1 Information Provided by Creators

We may collect information directly from Creators, including:

name, username, email address, phone number, and login credentials;
business name, company details, tax or billing contact information;
payment and payout-related identifiers;
branding materials, media assets, content uploads, and configuration preferences;
imported customer lists or audience data submitted by the Creator;
credentials, tokens, or connection information for integrations authorized by the Creator;
communications, support requests, project materials, and feedback; and
information included in Order Forms, SOWs, proposals, or service requests.

4.2 Information About End Users

We may process Personal Information relating to End Users on behalf of Creators, including:

account registration and login details;
subscription, purchase, billing, and transaction information;
membership status and access entitlements;
content viewing, engagement, comments, messages, community participation, or preferences;
customer support interactions relating to Creator offerings; and
device or technical information associated with use of the Services.

Where this data is processed on behalf of a Creator, the Creator controls the underlying relationship.

4.3 Information Provided Directly to Instill

We may also collect Personal Information directly from any individual who contacts us, requests a demo, subscribes to updates, submits a job inquiry, or otherwise communicates with Instill.

5. Automatically Collected Information and Platform Data

When individuals access or use the Services, we may automatically collect certain information, including:

IP address and approximate geolocation derived from IP;
device identifiers and device characteristics;
browser type, operating system, network information, and app version;
pages viewed, content interactions, clicks, searches, navigation patterns, and feature usage;
timestamps, session data, engagement metrics, and referral sources;
crash logs, error reports, performance diagnostics, and system activity logs; and
fraud, abuse, risk, or security signals.

We may collect this information directly or through cookies, pixels, software development kits (SDKs), APIs, log files, analytics tools, or similar technologies used to operate, secure, and improve the Services.

6. Mobile Application Data

If you access the Services through a mobile application, connected TV application, or similar device-based experience, we may collect additional information, including:

mobile device identifiers;
device model and operating system details;
push notification tokens;
in-app activity and engagement data;
crash logs and performance diagnostics;
language, region, and device settings; and
authentication or session tokens.

Certain features may request access to device capabilities such as camera, microphone, photo library, notifications, or storage. Such permissions are requested through your device operating system and may generally be managed through device settings.

Locally stored application data may remain on your device until deleted through uninstall, device settings, or cache-clearing tools.

7. Purposes of Processing

We process Personal Information for the following purposes:

7.1 Providing and Maintaining the Services

to operate, host, secure, and maintain the Services;
to enable Creators to publish, distribute, and monetize offerings;
to manage subscriptions, memberships, entitlements, and content delivery;
to authenticate users and manage accounts; and
to process transactions or coordinate with payment providers.

7.2 Professional Services and Customer Success

to onboard Creators and configure accounts;
to provide implementation, migration, branding, advisory, or launch services;
to administer Order Forms, Statements of Work, and project milestones;
to communicate regarding timelines, approvals, deliverables, and support; and
to provide account management and customer success services.

7.3 Support and Communications

to respond to inquiries, support requests, and feedback;
to provide technical troubleshooting;
to send billing notices, operational messages, product updates, or service alerts; and
to communicate regarding security, legal, or account matters.

7.4 Security, Fraud Prevention, and Integrity

to detect, investigate, prevent, and respond to fraud, abuse, payment risk, unauthorized access, and security incidents;
to protect users, Creators, End Users, and the Services; and
to enforce our Terms, agreements, and policies.

7.5 Analytics and Improvement

to understand usage trends and engagement;
to evaluate product performance;
to debug errors and improve reliability;
to develop new features and functionality; and
to measure effectiveness of communications or product changes.

7.6 Personalization and Community Features

to remember preferences and settings;
to personalize content experiences where applicable;
to enable comments, messaging, communities, or interactions selected by Creators; and
to support Creator-defined user experiences.

7.7 Legal and Compliance Purposes

to comply with legal, regulatory, tax, accounting, and contractual obligations;
to respond to lawful requests and legal process;
to establish, exercise, or defend legal claims; and
to maintain records required by law.

Instill does not sell Personal Information and does not use Personal Information for cross-context behavioral advertising.

8. Legal Bases for Processing (EEA / UK)

Where required under applicable law, including the GDPR and UK GDPR, we rely on one or more of the following legal bases:

Performance of a Contract

Where processing is necessary to provide the Services, fulfill subscriptions, maintain accounts, or perform contractual obligations.

Legitimate Interests

Where processing is necessary for our legitimate interests, such as operating, securing, improving, supporting, and growing the Services, provided those interests are not overridden by applicable rights and freedoms.

Legal Obligation

Where processing is necessary to comply with legal, regulatory, tax, accounting, law enforcement, or court-related obligations.

Consent

Where required by law, we rely on consent for specific activities such as certain cookies, optional marketing communications, or specific device permissions. Consent may generally be withdrawn at any time.

9. How We Disclose Personal Information

We may disclose Personal Information in the following circumstances:

9.1 Service Providers and Vendors

We disclose Personal Information to Service Providers that support our operations, including providers of:

cloud hosting and infrastructure;
payment processing;
analytics and product measurement;
customer support and CRM tools;
project management and collaboration tools;
messaging, notifications, and email delivery;
security, fraud prevention, logging, and monitoring;
video hosting or content delivery;
development and productivity tools; and
professional advisory services.

Such parties are generally authorized to process Personal Information only as necessary to provide services to Instill, subject to contractual restrictions where appropriate.

9.2 Creators

Where you are an End User interacting with a Creator, we may disclose relevant Personal Information to that Creator so the Creator can manage subscriptions, provide content, communicate with you, deliver services, and administer the relationship.

Creators are independently responsible for their handling of Personal Information.

9.3 Corporate Transactions

We may disclose Personal Information in connection with a merger, acquisition, financing, reorganization, bankruptcy, sale of assets, or similar transaction, subject to appropriate safeguards where required.

9.4 Legal and Protection Purposes

We may disclose Personal Information:

to comply with law, legal process, or governmental request;
to enforce contracts or policies;
to detect or prevent fraud or security incidents; or
to protect the rights, safety, or property of Instill, users, Creators, End Users, or others.

9.5 No Sale / No Cross-Context Behavioral Advertising

Instill does not sell Personal Information and does not share Personal Information for cross-context behavioral advertising as defined under applicable law.

10. Data Retention

We retain Personal Information for as long as reasonably necessary for the purposes described in this Privacy Policy, including:

while an account remains active;
while providing Services to Creators or End Users;
as needed for support, billing, audits, or contractual obligations;
to resolve disputes or enforce agreements;
to maintain fraud prevention and security records; and
to comply with legal, regulatory, tax, or accounting obligations.

Retention periods may vary depending on the nature of the information, the relationship involved, legal requirements, and operational necessity.

When Personal Information is no longer reasonably required, we will take reasonable steps to delete, anonymize, or de-identify it, subject to backups, archives, legal holds, and lawful retention needs.

11. Data Security

We implement reasonable administrative, technical, and physical safeguards designed to protect Personal Information against unauthorized access, use, loss, alteration, or disclosure.

These safeguards may include:

access controls and authentication measures;
encryption in transit and, where appropriate, at rest;
network monitoring and logging;
role-based internal access restrictions;
vendor diligence and contractual controls where appropriate;
backup and recovery processes; and
incident response procedures.

No method of transmission over the internet or electronic storage is completely secure. Accordingly, we cannot guarantee absolute security.

12. Cookies and Tracking Technologies

We use cookies, pixels, local storage, SDKs, and similar technologies to operate, secure, analyze, and improve the Services.

These technologies may help us:

enable core functionality and authentication;
remember preferences and settings;
understand usage patterns and performance;
measure effectiveness of communications or product changes;
detect fraud or abuse; and
support messaging or notification features.

We may use categories of technologies such as:

Essential Technologies, necessary for operation of the Services;
Analytics Technologies, used to understand usage and performance;
Functional Technologies, used to remember settings or enhance experience; and
Communication Technologies, used to support notices, alerts, or user messaging.

You may be able to control certain technologies through browser settings, device settings, or a consent manager where available.

Disabling certain technologies may impact functionality.

Where required by law, we will obtain consent before using non-essential technologies.

13. International Data Transfers

Instill is based in the United States, and Personal Information may be transferred to and processed in the United States and other countries where we or our Service Providers operate.

Those jurisdictions may have data protection laws different from those in your location.

Where required by applicable law, we implement appropriate safeguards for international transfers, which may include:

Standard Contractual Clauses or equivalent approved mechanisms;
contractual commitments with Service Providers; or
other lawful transfer tools recognized by applicable regulators.

14. Your Privacy Rights

Depending on your location and applicable law, you may have certain rights regarding your Personal Information.

14.1 U.S. State Privacy Rights

Residents of certain U.S. states may have rights to:

know or access Personal Information we process about them;
request correction of inaccurate information;
request deletion of Personal Information;
obtain a portable copy of certain data;
opt out of certain processing where applicable; and
limit use of Sensitive Personal Information where applicable.

We will not unlawfully discriminate against individuals for exercising applicable privacy rights.

14.2 EEA / UK Rights

Individuals in the EEA or UK may have rights to:

access Personal Information;
request correction or completion;
request deletion;
request restriction of processing;
object to certain processing;
request portability of certain data; and
lodge a complaint with a supervisory authority.

14.3 Exercising Rights

To submit a privacy request, contact:

privacy@instillvideo.com

We may need to verify identity and authority before processing a request.

14.4 Creator Relationship Requests

If you are an End User interacting with a Creator, requests concerning Creator-controlled accounts, memberships, subscriptions, or Creator relationship data may need to be directed to or coordinated with the relevant Creator, because the Creator controls that relationship.

15. Children’s Privacy

The Services are generally not directed to children under thirteen (13), unless expressly permitted through Creator-specific experiences that comply with applicable law.

Certain Creator offerings may be intended only for adults or users above a specified age.

Instill or Creators may implement age-gating, age verification, parental consent, or access restrictions where required by law, platform policy, or risk considerations.

We do not knowingly collect Personal Information from children where prohibited by law without appropriate authorization.

If you believe a child has provided Personal Information unlawfully, please contact us so we can investigate and take appropriate action.

Access to certain Services may be restricted in some jurisdictions due to child-safety or age-related legal requirements.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our Services, operations, legal obligations, or privacy practices.

If we make material changes, we may provide notice through the Services, email, posting, or other reasonable means.

The “Last Updated” date at the top of this Privacy Policy indicates when this Privacy Policy was last revised.

Your continued use of the Services after changes become effective may constitute acknowledgment of the updated Privacy Policy where permitted by law.

17. Contact Information

If you have questions about this Privacy Policy or our privacy practices, contact us at:

privacy@instillvideo.com