Terms of Service & Privacy Policy

Last updated: July 31, 2026

Pepperly (the “Service”) is operated by YIoT LLC, a Delaware (USA) limited liability company doing business as “Pepperly” (“Pepperly”, “we”, “us”). The Service generates product walkthrough videos from websites and recordings, partly using artificial intelligence. By creating an account or using the Service you agree to these Terms and acknowledge the Privacy Policy below. If you are using the Service on behalf of a company, you represent that you are authorized to bind it. You must be at least 16 years old to use the Service. If you do not agree, do not use the Service.

1. The Service and AI-generated content

Pepperly uses AI models and automated browsers to explore websites, plan walkthroughs, and produce videos, captions, and related text. AI-generated output is produced automatically and without human review. It may be inaccurate, incomplete, out of date, or otherwise flawed.
We are not responsible for the content the AI generates. You are solely responsible for reviewing every video and caption before you use, publish, or share it, and for any consequences of doing so.
AI output may unintentionally resemble other content or contain errors about your product. Nothing the Service produces is advice of any kind.
Features labelled “Beta” or “experimental” are provided with reduced or no support commitments and may change or be withdrawn at any time.

2. Recordings and sensitive data

Recordings capture what is on screen. Walkthrough recordings capture the structure and content of the pages you interact with — including text, images, form values you type, and the addresses (URLs) of the pages visited during the recording. Screen recordings capture the screen, window, or tab you choose. Anything visible during a recording can end up in the recording.
Automatic masking is limited. During walkthrough recording, only password-type input fields are masked automatically. Other typed values and on-screen content are captured as-is. Do not record screens showing data you are not permitted to store or share.
Blur is an editing overlay, not redaction. The editor’s blur tool masks content in the rendered and shared video, but the original underlying recording remains stored in your account until you delete the video or your account. If a recording captured something it must not have, delete the video.
Credentials. If you provide login credentials or step scripts for a site, you confirm you are permitted to use them. Sensitive fields are masked on a best-effort basis only — do not submit credentials you cannot risk exposing, and rotate any credential you have shared with the Service if in doubt. Credentials included in free-text briefs may be stored with the project and processed by our AI provider like any other brief text.
For personal data of third parties that appears inside your recordings and videos, you are the data controller and Pepperly processes it on your behalf to provide the Service. You are responsible for having a lawful basis to record it and for honoring data-subject requests concerning it.

3. Your responsibilities and acceptable use

You confirm you own or are authorized to film every website, product, brand, and content you submit to the Service, and that generated videos of them do not infringe anyone’s rights.
You will not use the Service to film sites you don’t control without permission, to produce unlawful, deceptive, defamatory, or infringing content, to violate a target site’s terms of service, or to probe, overload, or attack any system.
You will not upload malware, content depicting or exploiting minors, or content you have no right to process; we may remove content and suspend accounts that create legal risk (see Section 10).
You are responsible for keeping your account credentials and API tokens safe and for all activity under your account. API tokens carry the full authority of your account — treat them like passwords and revoke tokens you no longer use.

4. No warranty

THE SERVICE AND EVERYTHING IT PRODUCES ARE PROVIDED “AS IS” AND “AS AVAILABLE”, WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED — INCLUDING, WITHOUT LIMITATION, WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, ACCURACY, OR AVAILABILITY. WE DO NOT WARRANT THAT THE SERVICE WILL BE UNINTERRUPTED, ERROR-FREE, OR SECURE, THAT DEFECTS WILL BE CORRECTED, OR THAT ANY VIDEO WILL MEET YOUR EXPECTATIONS OR ANY PARTICULAR STANDARD OF QUALITY. YOU USE THE SERVICE AT YOUR OWN RISK. SOME JURISDICTIONS DO NOT ALLOW CERTAIN WARRANTY EXCLUSIONS, SO PARTS OF THIS SECTION MAY NOT APPLY TO YOU; NOTHING IN THESE TERMS LIMITS RIGHTS CONSUMERS HAVE UNDER MANDATORY LAW.

5. Limitation of liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, PEPPERLY, ITS OWNERS, EMPLOYEES, AND SUPPLIERS SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR FOR ANY LOSS OF PROFITS, REVENUE, DATA, OR GOODWILL, ARISING FROM OR RELATED TO YOUR USE OF (OR INABILITY TO USE) THE SERVICE OR ANY CONTENT IT GENERATES — EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. OUR TOTAL AGGREGATE LIABILITY FOR ALL CLAIMS SHALL NOT EXCEED THE GREATER OF (A) THE AMOUNTS YOU PAID US IN THE THREE (3) MONTHS BEFORE THE CLAIM AROSE, OR (B) US $50. THIS SECTION DOES NOT EXCLUDE LIABILITY THAT CANNOT BE EXCLUDED BY LAW.

6. Ownership and open source

You keep all rights you have in the material you submit and, as between you and us, you own the videos generated for your account. You grant us the license needed to operate the Service (process your URLs and briefs, render, store, and deliver your videos, including via the sub-processors listed in the Privacy Policy).
The Pepperly brand, the hosted Service, and its infrastructure remain ours. Pepperly’s application source code is separately available as open source under the GNU AGPL-3.0 license at github.com/yapepperly. That license governs the code; these Terms govern your use of the hosted Service. No other rights are granted.

7. Billing, trials, and refunds

Auto-renewal. Paid plans renew monthly and are charged automatically until cancelled. Cancel any time via Billing → Manage subscription (the Stripe customer portal); cancellation takes effect at the end of the current billing period and stops future charges.
Free trial. New subscriptions may include a 7-day free trial. A payment method is required to start the trial, and the first charge occurs automatically when the trial ends unless you cancel before then. One trial per customer.
Founder pricing. Promotional “founder” pricing, where offered, remains in effect for as long as your subscription stays continuously active on that plan. If your subscription is cancelled or lapses, re-subscribing is at then-current pricing.
Credits and quotas. AI generation is metered in monthly credits that reset each calendar month and do not carry over. Credits have no cash value and are not redeemable or refundable. Plans also include monthly limits on walkthrough renders. Credits for AI videos are charged on successful generation.
Refunds. Except where required by law, fees already paid are non-refundable. If you are a consumer in the EU or UK: by starting your trial or subscription you request immediate performance of the service; if you exercise a statutory 14-day right of withdrawal, we may deduct a proportionate amount for service already provided. Your mandatory statutory rights are unaffected.
Price changes. We may change list prices or plans with at least 14 days’ notice, effective from your next billing period. Price changes do not affect an active founder-priced subscription as described above.

8. Copyright complaints (DMCA)

If you believe content hosted on Pepperly infringes your copyright, send a notice to yariv@pepperly.dev with: (1) identification of the copyrighted work; (2) the URL of the allegedly infringing material (e.g. the share link); (3) your contact information; (4) a statement that you have a good-faith belief the use is not authorized by the copyright owner, its agent, or the law; (5) a statement, under penalty of perjury, that the notice is accurate and that you are the owner or authorized to act for the owner; and (6) your physical or electronic signature. We will remove or disable access to content that is the subject of a valid notice and will terminate the accounts of repeat infringers. If your content was removed and you believe this was a mistake, you may send a counter-notice with equivalent identifying information to the same address.

9. Indemnification

You will defend and hold us harmless from claims, damages, and expenses (including reasonable legal fees) arising from content you submit, videos you publish, sites you film, viewer data you collect through the Service, or your breach of these terms.

10. Termination

You may stop using the Service and delete your account at any time. We may suspend or terminate accounts, or remove or disable access to specific content, where we reasonably believe these terms are violated, the Service is abused, or legal risk is created — with notice where practical. Sections 1–2, 4–6, 9, and 11–12 survive termination.

11. Governing law and disputes

These terms are governed by the laws of the State of Delaware, USA, excluding its conflict-of-law rules. Disputes will be resolved exclusively in the state or federal courts located in Delaware, and both parties consent to their jurisdiction. To the extent permitted by law, both parties waive the right to participate in class actions, and claims may only be brought in an individual capacity. If you are a consumer, you keep any protections and forum rights granted by the mandatory laws of your country of residence.

12. General

We may update these terms. For material changes we will give at least 14 days’ notice in the app or by email; continued use after the effective date is acceptance. The current version always lives at pepperly.dev/legal.
If any provision is unenforceable, the rest remains in effect. These terms are the entire agreement about the Service. We may assign these terms as part of a merger, acquisition, or sale of assets; you may not assign them without our consent.
Questions, notices, and legal requests: yariv@pepperly.dev

Privacy Policy

Last updated: July 31, 2026

13. Who we are

The data controller for account and service data is YIoT LLC (d/b/a Pepperly), Delaware, USA. Contact for all privacy matters: yariv@pepperly.dev. For personal data that appears inside our customers’ recordings and videos, and for viewer analytics on shared videos, the customer who owns the video is the controller and Pepperly acts as a processor on their behalf.

14. What we collect

Account data — name, email, and a hash of your password (never the password itself), or your Google account’s name, email, and avatar if you sign in with Google. Used to operate your account.
Content you submit — website URLs, briefs/prompts, step scripts, uploaded recordings (screen video or page-structure walkthrough captures, which may include personal data visible on screen), and the videos and artifacts generated from them. Stored so the Service can render, edit, and serve your videos.
Billing data — handled by Stripe; we store only subscription state and a customer reference, never card numbers.
Service data — logs and usage metadata (timestamps, job status, credit and quota counters, API token usage) used for operation, debugging, billing, and abuse prevention.

15. Viewers of shared videos

When you watch a walkthrough that a Pepperly customer has shared (via link or embed), we collect for that customer: how much of the video was watched, clicks on its call-to-action, the referring page, whether it was viewed in an embed, and — only if the video owner enabled an email gate — the email address you enter to watch. This information is shown to the video owner as viewer analytics. The video owner is the controller of this data; Pepperly processes it on their behalf. We do not use viewer data for advertising and do not set advertising cookies on share pages. To exercise privacy rights over viewer data, contact the person who shared the video, or contact us and we will refer your request to them.

16. How we use data, and legal bases

To provide the Service (contract): operate accounts, render and serve videos, process payments, provide support.
For legitimate interests: securing the Service, preventing abuse and fraud, debugging, and measuring aggregate usage.
With consent, where required: analytics cookies on the marketing site (see Section 19).

17. Who we share data with (sub-processors)

We do not sell your personal data, and we do not share it for cross-context behavioral advertising (as those terms are defined in the CCPA/CPRA). We share data only with the service providers below, acting on our instructions, or where the law requires disclosure.

Anthropic (USA) — AI processing. Your URLs, briefs, page content, and frames/screenshots from your recordings are sent to Anthropic’s models to plan walkthroughs and generate captions.
Stripe (USA) — payment processing and subscription management.
Cloudflare (EU storage region) — object storage for videos and recording artifacts.
Railway (USA/EU) — application hosting, databases, and processing infrastructure.
Resend (USA) — transactional email (verification, invites).
Google — sign-in with Google (if you use it); Google Analytics and Google Fonts on the marketing site only.

18. International transfers

We are a US company and process data in the United States and the European Union. Where personal data of EU/UK residents is transferred internationally, we rely on appropriate safeguards offered by our providers, such as standard contractual clauses.

19. Cookies, localStorage, and analytics

The app (app.pepperly.dev) sets no advertising cookies and runs no third-party analytics. Signing in stores an access token and UI preferences in your browser’s localStorage.
The marketing site (pepperly.dev) uses Google Analytics to measure visits — only after you consent via the cookie banner — and loads fonts from Google Fonts (which involves your browser requesting files from Google).
The browser extension stores your recording buffer and Pepperly session token locally in the browser’s extension storage.

20. Retention and deletion

Your content stays until you delete it or your account. Deleting a video removes its stored content; deleting your account (Settings → Delete account) removes your account data and stored videos within 30 days, except minimal records we must keep (e.g. billing and tax records).
Residual copies in operational storage, logs, and backups may persist for up to 90 days after deletion before being purged on our regular cycles.
Signing in issues an access token valid for up to 30 days; signing out removes it from your browser.

The browser extension

The Pepperly browser extension records your product only when you explicitly start a recording — nothing is captured, read, or transmitted before you press Start.

What it captures — in Video mode, the screen, window, or tab you choose to share (including tab audio if you share it); in Walkthrough mode, the structure and content of the pages you interact with during the recording, including the addresses (URLs) of those pages, so a clean walkthrough can be reconstructed. Recordings can include whatever is on screen, including personal data — automatic masking covers password fields only, and the editor’s blur tool masks content in the shared video (the original recording remains stored in your account; see Section 2 of the Terms).
Where it goes — recording data is buffered locally in your browser and uploaded to your Pepperly account, over HTTPS, only when you press “Create walkthrough”. Discarding a recording deletes the local buffer without uploading anything.
Your session — the extension reads your Pepperly sign-in token from the Pepperly web app solely to attribute uploads to your account; it is sent only to the Pepperly API.
The extension does not track your browsing outside an active recording, does not inject ads or trackers, and shares nothing with third parties beyond the processors described above. Uploaded recordings follow the same retention and deletion rules as any other content in your account.

21. Your rights

Depending on where you live (e.g. GDPR in the EU/UK, CCPA/CPRA in California), you may have the right to access, correct, delete, or export your personal data, to object to or restrict processing, and to not be discriminated against for exercising these rights. You can delete videos and your entire account directly in the app; for anything else, email yariv@pepperly.dev and we will respond within the time the applicable law requires. EU/UK residents may also lodge a complaint with their supervisory authority.

22. Security and children

We protect data with industry practices: passwords hashed with scrypt, private storage buckets, transport encryption (HTTPS), and access scoped to your account. No method of transmission or storage is 100% secure — report security issues to yariv@pepperly.dev.
The Service is not directed at children and may not be used by anyone under 16. We do not knowingly collect data from children.

23. Changes and contact

We may update this policy; material changes will be announced in the app or by email. Questions, privacy requests, copyright notices, and legal notices: yariv@pepperly.dev · YIoT LLC (d/b/a Pepperly), Delaware, USA.