1. Acceptance of Terms

By accessing or using ShotMatch ("the Service"), operated by How Bad? Pretty Bad LLC. ("we", "us", "our"), you agree to be bound by these Terms of Service. If you do not agree, do not use the Service.

2. Description of the Service

ShotMatch is a web-based color grading platform. Depending on your plan, the Service includes:

• Color matching: transferring the color palette of a reference image onto your own images, using deterministic color science algorithms.
• Looks and film presets: a built-in catalog of cinematic looks and film-stock emulations, with an intensity control.
• Prompt-to-Look: describing a look in plain language and receiving a color grade and a .cube LUT. This feature sends your text prompt, and where applicable your image, to a third-party AI provider.
• AI Suggest and AI Refine: optional AI-assisted grading suggestions, which also involve a third-party AI provider.
• Manual grading: the in-browser grading tools, including the Adjust editor and film effects.
• LUT export: exporting a grade as a .cube file for use in third-party editing software.
• Video tools: video color grading, scene splitting, transcoding, and frame-rate conform.
• Library and history: storing references, presets, and past results in your account.
• Sharing: shared presets, public profiles, and grading codes, as described in section 8.
• Programmatic access: a REST API and a Model Context Protocol (MCP) connector.

Features vary by plan and may be added, changed, or removed. The pricing page reflects what is currently included in each plan.

3. Eligibility

You must be at least 16 years old to create an account. If you are under the age of majority where you live, you may only make purchases with the consent of a parent or legal guardian. If you create an account on behalf of a company or another organization, you confirm that you are authorized to accept these Terms on its behalf.

4. Accounts and Sign-In

You can sign in either with a Google account or with an email sign-in link ("magic link") sent to your address. Sign-in requests may be subject to automated anti-abuse checks, including a Cloudflare Turnstile challenge, rate limits, and restrictions on disposable email domains.

You are responsible for maintaining the security of your account, your API keys, and your MCP tokens. These are personal to you and must not be shared with third parties. Activity carried out with your credentials is treated as your activity, and the credits it consumes are drawn from your balance.

5. Credits, Plans and Billing

• Free accounts receive 15 credits upon registration.
• Paid plans (Pro, Business, Studio) include credit allocations as described on the pricing page. Each feature consumes a number of credits shown in the app and on the FAQ.
• Subscriptions are billed monthly or annually via Stripe. Annual plans grant the full annual credit allocation at the start of the term.
• At each renewal, unused subscription credits roll over, capped at twice the credits granted by that renewal. Credits above the cap are not carried forward.
• Credit packs are one-time purchases and do not expire.
• Prices are shown in USD and exclude any taxes that may apply in your jurisdiction. We may change prices for future billing periods. When we do, we notify you no less than 7 days and no more than 30 days before the new price takes effect, and that notice tells you how to cancel if you do not want to continue at the new price.
• If a payment fails, we may retry it and suspend paid features until the balance is settled.

6. Cancellation and Refunds

Automatic renewal. Subscriptions renew automatically at the end of each billing period, monthly or annually depending on the plan you chose, at the price then in effect, and they keep renewing until you cancel. For annual subscriptions we send you a reminder by email between 15 and 45 days before each renewal, stating the renewal date, the length of the new term, the amount that will be charged, and how to cancel. Cancelling is done online, in the same place you subscribed.

Cancellation. You may cancel your subscription at any time from your Account page. Access continues until the end of the current billing period, and the subscription is not prorated. When the period ends, your account returns to the Free plan. Credits you have already accumulated, whether from subscriptions or from credit packs, remain in your balance, but plan-gated features stop being available and stored graded video files are deleted immediately, because the Free plan has no video retention. The corresponding history entries, thumbnails, and LUTs are kept, but the rendered videos are gone. Download anything you want to keep before cancelling.

Immediate access and the right of withdrawal. The Service is digital content supplied immediately: credits are usable and features are unlocked as soon as your payment is confirmed. Where you are a consumer in the European Economic Area, the United Kingdom, or Switzerland and a statutory withdrawal period would otherwise apply, by completing a purchase you request immediate performance and acknowledge that you lose your right of withdrawal once the content has been supplied. This does not affect your statutory rights in case of a faulty or misdescribed service.

Refunds. Credits that have already been spent are not refundable, since the corresponding processing has been performed and paid for. Beyond that, we review refund requests individually and in good faith, including for accidental purchases, duplicate charges, and cases where the Service did not deliver what you paid for. Contact us at [email protected] and describe what happened. If a job fails for a reason on our side, tell us and we will restore the credits it consumed.

7. Your Content and Ownership

You retain all rights to the images and videos you upload, and to the graded results you produce. ShotMatch does not claim ownership of your content. We may temporarily process and store your content to deliver the Service, including through subprocessors such as Modal for image and video processing and OpenAI for optional AI features (AI Suggest, AI Refine, and Prompt-to-Look). We do not use your content to train models, and we do not make it available to other users except through the sharing features you choose to use, as described in section 8.

You are responsible for having the rights to the content you upload. You must not upload material you are not permitted to process, and you must not use the Service in a way that infringes someone else's rights.

8. Public Sharing

Some features publish content deliberately. Nothing is shared publicly unless you switch it on.

• Shared presets: when you share a preset, it becomes reachable by anyone holding its link, and it can be applied by them. What is published is the color grade itself, its name, any description you give it, and its attribution, not your source images.
• Public profile: if you claim a handle and make your profile public, your handle, public name, bio, website, social links, and the presets you have chosen to list become visible at a public address and may be indexed by search engines.
• Grading codes: a grading code is a short code that lets anyone who knows it apply the corresponding look. You can revoke a code at any time, after which it stops resolving.

License. For content you deliberately publish through these features, and for as long as you keep it published, you grant us a non-exclusive, worldwide, royalty-free license to host, store, reproduce, and display that content, and to let other users apply the shared grade. This license exists solely so the sharing features can work. It ends when you unshare the content, revoke the code, or delete your account, except for copies that other users have already applied to their own material, which we cannot recall.

Withdrawing. You can unshare a preset, revoke a grading code, or make your profile private at any time from your account. Handles are subject to a cooldown once released, so a handle you give up may not be immediately available to you or to anyone else.

Content published through these features must comply with section 9. We may unpublish shared content, and remove a handle or profile, if it does not.

9. Acceptable Use

You agree not to:

• Use the Service for any unlawful purpose.
• Upload content that infringes third-party intellectual property rights.
• Upload or publish content that is illegal, sexually exploitative of minors, or otherwise abusive.
• Impersonate another person or organization, including through your handle, public name, or profile.
• Attempt to reverse-engineer, decompile, or exploit the Service.
• Circumvent credit accounting, rate limits, plan restrictions, or anti-abuse measures, including by creating multiple accounts to obtain additional free credits.
• Abuse the API with excessive requests or automated scraping.
• Resell access to the Service without written authorization.

10. Reporting Content and Takedown

If you believe that content published through ShotMatch infringes your rights or breaches section 9, write to [email protected] with the address of the content, a description of the problem, and enough detail for us to identify the material and to contact you. We review reports and may unpublish content, revoke a grading code, or suspend an account while we do so. If your content is removed and you believe that was a mistake, you can appeal by replying to the notice we send you.

11. API and MCP Access

The REST API and the MCP connector are part of the Service and are subject to these Terms. Requests consume credits at the same rates as the web app.

• Access is authenticated with a personal key or token. Keep it secret, and revoke it from your account if it is exposed.
• Requests are rate limited. Current defaults are 60/minute for the API and 60/minute per MCP token, with a lower ceiling on heavy operations. These limits may change as capacity requires.
• Endpoints, parameters, and responses may evolve. We aim to avoid breaking changes without notice, but the API is not frozen.
• If you connect ShotMatch to a third-party AI assistant through MCP, your requests pass through that assistant's provider before reaching us. Their terms and privacy policy apply to that leg of the request.

12. Data Retention and Deletion

Graded videos are stored for a period that depends on your plan, and are deleted automatically once that period has passed:

• Free: graded videos are not retained.
• Pro: 7 days.
• Business: 30 days.
• Studio: 90 days.

When a video expires, the video file itself is deleted. Its entry in your history, along with the thumbnail and the LUT that produced the grade, is kept, so you can re-apply the look to a fresh upload. Downgrading or cancelling a paid plan returns your account to the Free plan, and stored graded video files are deleted at that point. Images and other stored data follow the retention rules described in our Privacy Policy. Download what you need before you cancel.

Exporting your data and leaving. You can export your account data at any time from Data & Privacy, and download your results and your .cube LUTs from your history for as long as they are retained. LUTs are a portable, open format that other grading software reads, so the work you produce here is not locked to this Service. If you decide to leave, you can cancel without giving a reason and without any notice period beyond the billing term you are already in. We do not impose contractual or technical obstacles to moving to another provider, and we charge nothing for exporting your data or for leaving.

13. Service Availability and Beta Features

We strive to maintain high availability but do not guarantee uninterrupted access. Parts of the Service depend on third-party providers, and an outage on their side can degrade or interrupt features, particularly GPU-backed video processing. The Service is provided "as is" without warranties of any kind, express or implied. We may modify, suspend, or discontinue the Service at any time with reasonable notice.

Features marked as beta, experimental, or preview are offered for evaluation, may change or disappear, and may be less reliable than the rest of the Service.

14. Limitation of Liability

To the maximum extent permitted by applicable law, How Bad? Pretty Bad LLC. and its officers, employees, and agents shall not be liable for any indirect, incidental, special, or consequential damages arising from your use of the Service. Our total aggregate liability is limited to the amount you paid for the Service in the 12 months preceding the claim. Nothing in these Terms excludes liability that cannot be excluded under applicable law, including liability for intent, gross negligence, or personal injury.

15. Suspension and Termination

We reserve the right to suspend or terminate accounts that violate these terms. Where circumstances allow, we will tell you why and give you a chance to respond. You may delete your account at any time from the Account page or by contacting us at [email protected]. Deleting your account cancels any active subscription, unpublishes anything you had shared, and removes your stored data in accordance with our Privacy Policy. Deletion is permanent and does not by itself entitle you to a refund of unused credits.

16. Changes to These Terms

We may update these terms from time to time. Continued use of the Service after changes constitutes acceptance. We will notify users of material changes via email or in-app notice.

17. Governing Law and Dispute Resolution

These Terms are governed by and construed in accordance with the laws of Switzerland, without regard to conflict of law principles. If you use the Service as a consumer, this does not deprive you of the protection of mandatory provisions of the law of your country of residence.

Any dispute arising out of or in connection with these Terms shall first be attempted to be resolved amicably by contacting us at [email protected]. If a resolution cannot be reached within 30 days, the dispute shall be submitted to the exclusive jurisdiction of the courts of Switzerland.

18. AI Features and Transparency

Some features use artificial intelligence. This section sets out where, what it produces, and why we do not mark our output as AI-generated.

• Where AI is used. Prompt-to-Look turns a written description into a color grade and a .cube LUT. AI Suggest and AI Refine propose grading adjustments. These are labelled as AI in the interface, and they are the only places where your input reaches a third-party AI provider. Color matching, the look and film-preset catalog, the Adjust editor, and the video tools are deterministic color science with no AI involved.
• What the AI produces. These features output a color transformation, that is, a set of grading parameters and a LUT. They do not generate images, video, audio, or text for you to publish, and they do not add, remove, or invent anything in your footage. Applying a grade changes the color of your own material and leaves its content and its meaning intact.
• Marking of AI-generated content. Because of the above, we consider that our output falls within the exception in Article 50(2) of Regulation (EU) 2024/1689 (the AI Act) for systems that perform an assistive function for standard editing and do not substantially alter the input data or its semantics. We therefore do not embed AI-generation markers in your results. If we release a feature that generates image content or substantially alters it, we will mark that feature's output in a machine-readable format as that provision requires, and we will update this section before the feature ships, not after.
• Your side of it. You remain responsible for how you use, label, and distribute what you make with the Service. If the material you grade is itself AI-generated, or if you use the result in a context that requires disclosure, that disclosure is yours to make.

19. Contact

For questions about these terms, contact us at [email protected].

How Bad? Pretty Bad LLC.

1. Who We Are

ShotMatch ("the Service") is operated by How Bad? Pretty Bad LLC. ("we", "us", "our"), which is the controller of the personal data described in this policy. For any questions regarding this policy or your personal data, contact us at [email protected].

2. Information We Collect

When you use ShotMatch, we collect:

• Account information: your email address, and, if you sign in with Google, the name and profile picture associated with that Google account. If you sign in with an email link instead, we collect only your email address and the sign-in tokens needed to complete the login.
• Profile information: the handle, public name, bio, website, and social links you choose to add to a public profile. This is optional and only exists if you create one.
• Usage data: credit usage, feature usage statistics, job history, and the preferences you configure.
• Uploaded content: images and videos you upload for processing. These are stored temporarily during processing, and in your library or history if you save them.
• Prompts: the text you write for Prompt-to-Look and other AI features, and the resulting grades.
• Payment information: billing is handled by Stripe. We do not store credit card numbers. We receive transaction identifiers, plan details, and billing status from Stripe.
• Email engagement: delivery status of the emails we send you, and, for our own emails, whether a message was opened or a link was clicked. This is used to measure whether our communications are useful and to stop sending to addresses that bounce.
• Technical and anti-abuse data: IP address, browser type, and device information, used for security, rate limiting, fraud prevention, and diagnostics. Sign-in attempts additionally pass through Cloudflare Turnstile, which assesses whether the request comes from a human.

3. How We Use Your Information

• To provide and improve the Service, including color matching, video grading, AI features, and reference management.
• To manage your account, credits, and subscriptions.
• To operate the sharing features you switch on, such as shared presets, public profiles, and grading codes.
• To communicate service updates, respond to support requests, and send product or marketing emails where permitted, which you can opt out of at any time.
• To detect and prevent abuse or fraud.

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), the United Kingdom, and Switzerland, we process personal data on the following legal bases under the General Data Protection Regulation (GDPR) and, in Switzerland, the Federal Act on Data Protection (FADP):

• Performance of a contract (Art. 6(1)(b)): Account creation, credit management, image and video processing, subscription billing, sharing features you enable, and delivering the features you actively request, including optional AI features (AI Suggest, AI Refine, and Prompt-to-Look) that send your image and/or text prompt to OpenAI for processing.
• Legitimate interest (Art. 6(1)(f)): Security monitoring, anti-abuse checks including bot detection at sign-in, fraud prevention, error tracking (via Sentry), service improvement based on aggregated usage patterns, measuring engagement with the emails we send, and product communications to users who have not opted out where permitted by applicable law.
• Consent (Art. 6(1)(a)): Only where consent is specifically required by applicable law, such as certain optional communications or preference-related processing.
• Legal obligation (Art. 6(1)(c)): Compliance with applicable tax, accounting, and regulatory requirements related to billing and payments.

You may withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. To withdraw consent or for any GDPR-related inquiry, contact us at [email protected].

5. What We Do Not Do

• We do not sell your personal data to third parties.
• We do not use your uploaded images or videos to train AI models.
• We do not publish your content or your profile unless you switch on a sharing feature yourself. Aside from what you deliberately share, we do not make your content available to other users. We only transmit it to service providers required to operate the Service, such as Modal for processing and OpenAI when you explicitly use an AI feature (AI Suggest, AI Refine, or Prompt-to-Look).
• We do not use third-party advertising or cross-site tracking cookies.
• We honor marketing opt-outs, and every marketing email includes a one-click unsubscribe link.

6. Public Sharing and What Others Can See

Sharing is off by default. When you switch it on, the following becomes visible to people who are not signed in, and can be indexed by search engines:

• A shared preset: the color grade, its name, any description you give it, and its attribution, reachable by anyone holding the link. Your source images are not published.
• A public profile: your handle, public name, bio, website, social links, and the presets you listed. Your email address is never shown.
• A grading code: the look it carries, applicable by anyone who knows the code.

You can unshare a preset, revoke a code, or make your profile private at any time, after which the public address stops resolving. Copies that other people already applied to their own material remain with them. Search engines and third-party caches may keep a copy of a public page for a while after you take it down, which is outside our control.

7. Data Storage and Security

• Database: Account data is stored in Supabase (PostgreSQL) with row-level security.
• File storage: Saved references, presets, and graded results are stored in Cloudflare R2 (S3-compatible), encrypted at rest.
• Sessions and queues: Login sessions, job state, and rate-limit counters are held in Redis on our own server, not in your browser.
• Processing: Images and videos uploaded for one-time processing are not permanently stored; they are discarded after the result is returned.
• Encryption: All data in transit is encrypted via TLS/HTTPS.

8. Third-Party Services

We use the following third-party services that may process personal data on our behalf:

• Google OAuth: For authentication, when you choose to sign in with Google. Subject to Google's Privacy Policy.
• Stripe: For payment processing. Subject to Stripe's Privacy Policy.
• Supabase: For database hosting.
• Cloudflare: For file storage, CDN, DNS, and Turnstile, the bot check shown at sign-in. Subject to Cloudflare's Privacy Policy.
• Sentry: For error tracking. Sentry receives a pseudonymous user identifier and your plan type to help us diagnose errors. No email address or personal content is sent. send_default_pii is disabled on the server side. On-error session replays (DOM snapshots) may be captured at a low sample rate to help reproduce bugs.
• Resend: For email delivery, including transactional emails (subscription confirmations, payment receipts, account notifications) and product or marketing emails where permitted by applicable law and subject to your opt-out choices. Subject to Resend's Privacy Policy.
• OpenAI: For AI-powered color features (AI Suggest, AI Refine, and Prompt-to-Look). Your image and/or natural-language prompt are sent to OpenAI's API for processing. OpenAI acts as our processor: under its API terms, API inputs and outputs are not used to train its models, and may be retained for a limited period for abuse monitoring before deletion. Subject to OpenAI's Privacy Policy.
• Modal: For scalable image and video processing. Processing data is ephemeral and not retained after the task completes. Subject to Modal's Privacy Policy.
• Anthropic (claude.ai) and other MCP clients: If you choose to connect ShotMatch to an AI assistant through our optional MCP integration, your requests and any content you submit pass through that assistant's provider before reaching ShotMatch. When the assistant is Claude, this is Anthropic. Subject to Anthropic's Privacy Policy.

9. Data Retention

• Account data is retained while your account is active.
• Saved references and presets are retained until you delete them or your account is closed.
• Graded video files are retained according to your plan: not retained on Free, 7 days on Pro, 30 days on Business, and 90 days on Studio. A daily job deletes expired files, while the history entry, thumbnail, and LUT are kept. Cancelling or downgrading to Free deletes stored graded video files at that point.
• Processing data (one-time uploads) is discarded immediately after results are returned. Temporary working files are swept on a recurring schedule.
• Usage logs and operational records are pruned on a rolling basis once they are no longer needed for support, billing, or abuse investigation. You can clear your own usage history at any time from Data & Privacy.
• Upon account deletion, all associated data is removed immediately. In rare cases where individual file deletions fail, residual data may persist for up to 30 days. Records we are required to keep for tax and accounting purposes, such as invoices, are retained for the period the law requires.

10. Your Rights

You have the right to:

• Access your personal data stored on the Service.
• Delete your account and all associated data.
• Export your account data, including reference and history metadata (file contents are not included in the export).
• Correct inaccurate information by contacting us.
• Object to or restrict processing of your personal data.
• Withdraw consent at any time where processing is based on consent.
• Complain to your local supervisory authority if you believe we have mishandled your data. In Switzerland, this is the Federal Data Protection and Information Commissioner.

Export, usage-history clearing, and account deletion are available directly from Data & Privacy and the Account page. For anything else, contact us at [email protected]. We aim to respond within 30 days.

11. Cookies and Local Storage

ShotMatch uses a minimal set of cookies and browser storage, strictly necessary for the Service to function. We do not use third-party tracking or advertising cookies.

• Session cookie: A server-side session cookie is set upon login to authenticate your requests. It is HttpOnly, Secure, and SameSite=Lax. It expires after 24 hours of inactivity.
• Cookie consent: A localStorage entry records whether you have acknowledged the cookie notice.
• Theme preference: Your light/dark mode preference is stored in localStorage.
• Interface state: Panel and editor preferences, and dismissed notices, are stored in localStorage.
• Library cache: Reference library thumbnails may be cached in sessionStorage (per-tab, cleared on close) for performance.

For full details, see our Cookie Policy.

12. International Data Transfers

Our third-party service providers may process data outside of Switzerland, including in the United States. Where this occurs, we ensure that appropriate safeguards are in place in accordance with applicable data protection laws, such as standard contractual clauses in our agreements with those providers.

13. Children

The Service is not intended for children under 16, and we do not knowingly collect their personal data. If you believe a child has created an account, write to us at [email protected] and we will delete it.

14. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page with an updated date. Continued use of the Service after changes constitutes acceptance of the revised policy.

15. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of Switzerland. Any disputes arising from this policy shall be subject to the exclusive jurisdiction of the courts of Switzerland.

16. Contact

For any questions about this Privacy Policy or your personal data, contact us at [email protected].

How Bad? Pretty Bad LLC.

1. What Are Cookies

Cookies are small text files stored on your device by your web browser when you visit a website. They are used to remember information about your visit, such as your login status and preferences. Local storage and session storage are similar browser technologies that serve comparable purposes.

2. How ShotMatch Uses Cookies

ShotMatch uses only strictly necessary cookies and browser storage. We do not use any third-party advertising, tracking, or analytics cookies.

3. Session Cookie Details

Our session cookie has the following security properties:

• HttpOnly: The cookie cannot be accessed by JavaScript, preventing cross-site scripting (XSS) attacks.
• Secure: The cookie is only transmitted over encrypted HTTPS connections.
• SameSite=Lax: The cookie is not sent with cross-site requests, providing protection against cross-site request forgery (CSRF).
• Server-side: The cookie contains only a session identifier. All session data is stored on our servers (Redis), not in your browser.

4. Third-Party Cookies

ShotMatch does not set third-party tracking or advertising cookies. However, the following third-party services may set their own cookies when you interact with their elements:

• Cloudflare Turnstile (sign-in): The bot check on the sign-in page may set a Cloudflare cookie to validate the challenge. It is used for security, not for advertising or cross-site tracking. See Cloudflare's cookie reference.
• Google (authentication): When you sign in with Google, Google may set cookies on your device as part of the OAuth flow. See Google's Cookie Policy.
• Stripe (payment): When you access the payment or checkout interface, Stripe may set cookies for fraud prevention. See Stripe's Cookie Policy.

5. Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to:

• View and delete existing cookies.
• Block cookies from specific or all websites.
• Set preferences for certain types of cookies.

Please note that disabling the session cookie will prevent you from logging into ShotMatch, as it is required for authentication.

6. Changes to This Policy

We may update this Cookie Policy from time to time. Changes will be posted on this page with an updated date.

7. Contact

For questions about this Cookie Policy, contact us at [email protected].

How Bad? Pretty Bad LLC.