Security
What we do to keep your videos private, and what you control.
Where your data lives
Videos, thumbnails and transcripts are stored in Cloudflare R2 and served through Cloudflare. Account and workspace data live in Cloudflare D1. Data is encrypted in transit with TLS and at rest by Cloudflare.
Who can see a video
- Share links use random IDs that can’t be guessed or listed.
- Team-only videos require signing in to your workspace.
- Password-protected videos store only a salted hash of the password.
- Share pages ask search engines not to index them.
Accounts
- Sign in with a single-use email link or Google. We don’t store passwords for accounts.
- Sign-in links work once and expire quickly.
- Sessions are stored in secure, HTTP-only cookies.
- Requests that change data are checked against cross-site forgery.
Payments
Payments are handled by Paddle, our merchant of record. Card details never reach our servers.
AI processing
Transcription and summaries run on Cloudflare Workers AI. Your videos and transcripts are not used to train models.
Deleting data
Deleting a video removes its files. Deleting your account removes your videos and personal data. Recordings made without an account are deleted after 30 days.
Reporting a vulnerability
Email security@bujua.com with the details. We reply within two working days and credit researchers who report responsibly.
Your next explanation could be a two minute video.
The first one needs no account and no install, and the link is ready when recording stops.