Gumlet
Gumlet hosts, secures, and optimizes video and image delivery for websites and applications. The platform enables course creators, e-commerce brands, and video creators to upload, publish, and stream media globally with DRM protection, AI-powered marketing tools, and automatic optimization—reducing CDN costs and improving page performance without technical complexity.
Gumlet is a comprehensive video and image hosting platform designed for course creators, e-commerce brands, video creators, and streaming platforms that need to deliver media globally while maintaining security and controlling costs. The platform handles the full workflow—uploading, publishing, and streaming video and images with automatic optimization, DRM protection (Widevine & Fairplay), and a branded player—without requiring deep technical expertise. Core capabilities include AI-powered video compression, automatic image optimization (reducing CDN costs by up to 30%), enterprise-grade security features like password locks, geo-blocks, dynamic watermarks, and time-sensitive tokens, plus built-in marketing tools such as AI-generated subtitles, chapters, CTAs, and forms that drive engagement and conversions. Gumlet processes over 2.5 billion media files daily across 12,000+ apps and sites with a 99.95% uptime guarantee, and serves customers including Spinny, BookMyShow, PocketFM, and Snapdeal. The platform offers flexible deployment through an intuitive dashboard or REST APIs and MCP access for developers, with pricing starting at $15/month for creators and scaling to custom enterprise plans, plus separate pay-as-you-go image optimization pricing. SOC2 Type II, ISO 27001, and GDPR compliance ensure enterprise-grade security and data handling.
Gumlet explicitly states that customer data is not used to train generative AI models. They opt out of third-party train
No training on user data means no opt-out is necessary.
Moderate risk. Suitable for internal data but avoid confidential information.
Gumlet explicitly states that customer data is not used to train generative AI models. They opt out of third-party training and use only open-source models for their AI features.
“Customer data is not used to train generative AI models...no customer data or content is used in training generative AI models by Gumlet or by any third party.”
Users grant Gumlet permission to use Contributed Content for providing, developing and supporting the Service. This is moderately broad but limited to service-related purposes. Company name/logo usage requires explicit permission.
“you grant Gumlet permission to use your Contributed Content, for the purposes of providing, developing and supporting the Service.”
Gumlet shares data with third parties only as specifically required to provide the Service. Payment processors and GDPR-compliant third parties receive data. Disclosure occurs if required by law or Terms violation.
“Gumlet will not use, disclose or have your Confidential Information disclosed, directly or indirectly, to any third party, except as specifically required to provide you the Service, or subject to your prior permission.”
Upon termination, Gumlet will use commercially reasonable efforts to delete Confidential Information, but retains data for legitimate business purposes, tax requirements, account settling, record keeping, archiving and legal issues. Moderate retention with some deletion provisions.
“Upon termination of this agreement, Gumlet will use commercially reasonable efforts to delete all copies of your Confidential Information...except for retaining data for legitimate business purposes or as required under the applicable law.”
Gumlet explicitly does not claim ownership over Contributed Content. Users retain ownership of their content while granting Gumlet limited usage rights for service provision.
“Gumlet does not claim ownership over Contributed Content. However, you grant Gumlet permission to use your Contributed Content, for the purposes of providing, developing and supporting the Service.”
Privacy Policy mentions GDPR compliance for third parties and PCI-DSS for payment processing. However, no mention of SOC2, HIPAA, or ISO certifications. Partial compliance documentation.
“all of whom are GDPR-compliant and provide the necessary safeguards required if they are outside of the EU...PCI-DSS requirements help ensure the secure handling of credit card information.”
Track and measure your AI tools with Olakai's observability platform.
Explore Olakai