Private object storage
Media sits in private Cloudflare R2 buckets. No public URLs are ever created — files are unreachable without a live, authenticated capability token.
No public media endpointsYour files are private.
By architecture, not policy.
Media moves through the narrowest authenticated path needed to process and deliver it. No public links, no training, no retention.
Scoped, short-lived credentials
Upload and download tokens are single-purpose, restricted to one server-generated object path, and expire in minutes. Your browser never holds parent credentials.
Least-privilege accessServer-side file inspection
Client MIME types and filenames are ignored. The server reads actual file signatures, container metadata, codecs, and duration before accepting a file.
Tamper-proof meteringIsolated processing sandboxes
Each job runs in its own snapshot container with zero shared memory. Media is purged after output delivery and never cached or used for model training.
Zero AI training on your dataAppend-only credit ledger
Every credit grant, reservation, capture, and release is written atomically with a unique idempotency key. Ledger rows are never edited or deleted.
Transactional integritySafe error masking
Errors shown in the browser use stable, safe codes. Internal traces, infrastructure names, provider tokens, and model details never leave the server perimeter.
Zero internal leakageWhat happens to your data.
No ambiguity — here's how each data category is handled.
Media files
Stored in private R2 for the job duration only. Automatically purged after download or retention window expiry. Never used for training.
Identity
Google OIDC with PKCE, state tokens, and hashed session tokens in HttpOnly Secure cookies. No password storage.
Logs
Record opaque IDs, safe status codes, and execution timings. Raw media, emails, and tokens are never logged.
Billing
Payment handled by Dodo Payments. We never see or store card numbers. Webhooks verified via Standard Webhooks signature.
Try it in a private workspace.
Sign in with Google. 6 free credits. Your files are purged after download.