1. Scope
This policy explains how aiclipper.video (“aiclipper”, “we”, “us”) handles personal information when you visit our website, use the web app, or connect an AI agent through our MCP server. It works alongside our Terms of Service.
2. Information we collect
Information you give us
- Account details: your name, email address, and password (stored only as a salted hash). If you sign in with Google, we receive your name, email address, and Google account identifier.
- Your content: source videos, audio, transcripts, translations, clips, captions, cover images, social descriptions, watermark text, and logos created or uploaded in your workspace.
- Connected accounts: if you connect YouTube, TikTok, or Instagram for publishing, we store encrypted OAuth tokens and basic account details such as the account name and identifier, plus publishing requests, status, and platform post identifiers.
- Support messages you send us.
Chrome extension: when you use the optional extension, it reads YouTube playback metadata and media streams for videos you choose to transfer. It uploads media directly to our storage using your signed-in account. This is not background browsing-history collection.
Information created as you use aiclipper
- Usage records: your AI credit balance and a ledger of AI requests (feature, model, credits, status, token counts).
- Purchase records: the credit packs you buy, amounts, order and customer references from Creem, and refund status.
- Rights confirmations: when you confirmed you own or may repurpose each video you submit.
- Agent tokens: a hash of each token, its name, and when it was last used. We never store the token itself.
- Technical data: IP address, browser or agent user agent, request logs, and error reports, used for security, rate limiting, and debugging.
3. How we use it
- To provide the service: receive uploaded media, transcribe, analyze, render, and deliver clips, and publish them where you ask.
- To run your account: sign-in, credits, limits, and support.
- To keep aiclipper secure and reliable: preventing abuse, investigating incidents, and fixing problems.
- To communicate about your account, changes to the service, or these policies.
We process data to perform our contract with you, for our legitimate interests in operating a secure service, to comply with law, and with your consent where required (for example, when you connect a publishing account). We do not sell personal information, share it for cross-context advertising, or use your content to train our own AI models.
4. Who processes your data
We share data only with providers that help us run the service, under contracts that limit their use of it:
- Google (Gemini API): receives audio, transcripts, and caption text to transcribe, select moments, translate, and generate speech. Google processes this under its API terms.
- xAI: when enabled, receives the audio of your videos to transcribe speech to text. xAI processes it under its API terms, and we send nothing else to it.
- Google (YouTube): when you ask, receives clips and metadata you publish to your channel.
- TikTok: when you connect an account and request publishing, receives your clip and publishing metadata, including its title, description, and privacy settings. TikTok returns account details and publishing status to us.
- Meta (Instagram): when you connect an account and request publishing, receives your clip and caption for Instagram Reels. Meta returns account details and publishing status to us.
- Creem (Merchant of Record): processes your purchases, payment details, billing address, and tax information as the seller of record. We never see or store your full card details.
- Google Fonts: serves the fonts on our website, and receives your IP address when your browser loads them.
- Cloudflare: stores uploaded media and database backups in private R2 storage, and runs Turnstile bot protection on the sign-up, sign-in, password reset, and confirmation forms, which receives technical data such as your IP address.
- Resend: delivers our account emails, such as sign-up confirmation and password reset, so it receives your email address and the message content.
- Sentry: receives error reports from the app for error monitoring. Personal data, such as IP addresses, cookies, and request headers, is not sent by default. Before a report leaves our servers we also mask email addresses, sensitive parameters, and API keys and tokens.
- Our hosting provider, which runs the application servers and stores the application database.
Frame-based covers use a frame from your own clip with your headline added by our renderer; they do not send a cover prompt or image to an AI image service or moderation service.
We may also disclose information if required by law, to protect rights and safety, or as part of a merger or acquisition, in which case this policy continues to apply.
5. Google user data and YouTube API Services
aiclipper uses YouTube API Services. By connecting YouTube you agree to the YouTube Terms of Service, and Google’s handling of your data is described in the Google Privacy Policy.
We request access only to read the channel you connect and upload videos you explicitly choose to publish. aiclipper’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, sell it, or let humans read it except with your permission, for security, or as required by law.
You can disconnect YouTube in Settings at any time, which deletes the stored tokens, and you can also revoke access from your Google account permissions.
For TikTok and Instagram, we request publishing access when you connect your account. Disconnect accounts in Settings to delete stored tokens; you can also revoke access in each platform’s account settings. Published posts remain on the platform until you remove them there. Their handling of posts and account data is covered by the TikTok Privacy Policy and Instagram Privacy Policy.
6. How long we keep data
- Clips, captions, covers, and transcripts stay until you delete the project or your account. Deleted media is queued for removal right away.
- The original video of a project is deleted 14 days after the project finishes. To add a format or retry after that, upload the video again.
- Source videos you upload but never turn into a project are removed after one day.
- Account data stays while your account is open. When you delete your account, we delete your projects, media, connected accounts, and agent tokens, and we remove your name and email from the account. We keep purchase, billing, and credit-usage records in that anonymized form so refunds, disputes, tax, and accounting still work.
- Usage records and logs may be kept for a limited period for security, fraud prevention, accounting, or legal obligations.
- Database backups: a snapshot of the application database, which holds account, project, credit, and billing records, is taken every hour and kept for 14 days in private Cloudflare R2 storage (the newest three are always kept). Uploaded media files are stored in R2 and are not part of these snapshots. Because snapshots are kept for 14 days, deleted records may persist in them for that long.
7. Your choices and rights
- Access and export: download source videos while retained (14 days after processing finishes), and download transcripts, clips, captions, and covers until you delete them. Download a JSON copy of your account data (profile, projects, clips, purchases, credit usage) from Settings.
- Correction: update your name, email, and password in your profile, and correct transcript text in your projects.
- Deletion: delete individual projects, or delete your account from your profile settings.
- Other requests: depending on where you live (for example under the GDPR or CCPA), you may have rights to object to or restrict processing, data portability, and to complain to your local data protection authority. Email support@aiclipper.video and we will respond within 30 days.
8. Cookies
We use only essential cookies: to keep you signed in, protect forms against cross-site request forgery, and remember short-lived messages. We do not use advertising or cross-site tracking cookies.
9. Security
We use encryption in transit, encrypted storage for connected-account tokens, hashed passwords and agent tokens, per-account access checks on every file, and rate limiting. No system is perfectly secure; if you find a vulnerability, please report it to support@aiclipper.video.
10. International transfers
Our providers may process data in countries other than yours, including the United States. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses.
11. Children
aiclipper is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has given us data, contact us and we will delete it.
12. Changes
We will post updates here and change the date above. For material changes, we will notify you by email or in the app before they take effect.
13. Contact
Privacy questions or requests: support@aiclipper.video.