Privacy Policy

1. Information we collect

• Account and workspace data: name, email, profile image, authentication identifiers, plan and workspace membership, settings, and support messages. Clerk provides account authentication.
• Content and project data: submitted URLs, video and audio uploads, source metadata, transcripts, prompts, clip selections, edits, generated media, brand assets, saved projects, and public-share settings. Content may contain other people's personal information or voices.
• Connected account data: account identifiers, profile details, permissions, posting status, and available analytics from social and creator platforms you authorize. OAuth credentials may be held by a publishing partner or, for certain direct integrations, in our secured backend.
• Billing data: provider customer or subscription identifiers, plan, purchase status, credit use, and limited transaction information. Whop handles web payments; Apple App Store and Google Play handle mobile purchases, with RevenueCat managing mobile entitlements. We do not store full payment-card numbers.
• Device, usage, and diagnostics: IP address, browser or device type, pages and features used, events, approximate location inferred from IP, crash reports, performance data, and security logs. Depending on configuration and your choices, analytics or advertising tools may use cookies or similar identifiers.

2. Where information comes from

We receive information from you; your device and browser; Clerk and billing providers; connected social, creator, and publishing platforms with your authorization; and service providers that help us operate, secure, or measure the Service. A submitted public video URL may also provide metadata or content from its source platform. If someone adds you to a workspace or shares a project with you, we receive the information needed for that feature.

3. How and why we use information

• Provide accounts, workspaces, clip creation, editing, storage, export, and features you request.
• Process video, audio, prompts, and metadata with AI and media providers to produce transcripts, analysis, captions, effects, dubbing, or other requested outputs.
• Connect and manage authorized social accounts, schedule and publish posts, and display account or post performance.
• Administer subscriptions, credits, receipts, billing support, and account notices.
• Protect against fraud, abuse, rights violations, and security incidents; diagnose errors and maintain reliability.
• Measure use and improve the Service, and send marketing communications where permitted. You can opt out of marketing emails using the message link or by contacting us.

Where data-protection law requires a legal basis, these activities rely as appropriate on performance of our contract with you, our legitimate interests in operating and securing the Service, compliance with legal obligations, or your consent. You may withdraw consent where consent is the basis, without changing earlier lawful processing.

4. AI processing and voice features

The content and instructions you submit to an AI feature may be sent to the providers needed to run that feature, including transcription, analysis, image, speech, or voice providers. These providers process data under their service terms and our arrangements. Enrolling a voice clone requires a separate consent step and a voice sample; do not enroll someone else's voice without authority. We do not use TikTok-derived account data to train machine-learning models. For other content, this policy does not promise that every external AI provider offers the same retention or model-improvement controls. Contact us if you need details about a specific feature before submitting sensitive material.

5. Connected social accounts

We access only accounts you connect through an authorized flow and only within the permissions granted. Connection data supports identification of the account, posting, scheduling, management, and analytics. The separate connection consent and our Terms of Service explain that authorized posting may include automated and promotional content. Publishing partners may hold access tokens for accounts connected through them; direct integrations may hold tokens in our backend. Disconnect in AutoClip or revoke access at the platform to stop future access and posting. Previously published posts remain on the destination platform. We may retain limited records needed for security, accounting, or legal purposes.

6. Sharing and service providers

We share information with providers only for the functions they perform, with connected platforms when you direct us to post or retrieve data, within a workspace you join, when you make a clip public, for a business transfer, or when required to protect rights or comply with law. Providers we use or may use for relevant features include:

• Accounts and billing: Clerk, Whop, Apple, Google Play, and RevenueCat.
• Hosting and storage: Convex, Vercel, Cloudflare R2, and our video-processing infrastructure, including the AutoClip processing box and Modal fallback.
• Media and AI: Groq, Google Gemini, ElevenLabs, fal.ai, and other feature-specific processing providers shown by the product.
• Publishing and integrations: Google/YouTube, TikTok, PostForMe, Late, Outstand, and other platforms you connect.
• Operations and measurement: Resend, Sentry, PostHog, Vercel Analytics and Speed Insights, Whop Pixel, and, when configured, Microsoft Clarity and Meta Pixel.

Each provider may receive different data for its role. We do not give every provider access to every account or project. Some providers act as independent controllers for payments or social-platform activity and publish their own privacy notices.

7. Cookies, analytics, and advertising

Authentication and preference cookies keep you signed in and remember choices such as language or theme. Analytics tools, including PostHog and Vercel Analytics, measure page visits, events, and performance. Whop Pixel supports checkout attribution. If enabled, Microsoft Clarity may record sessions and heatmaps, and Meta Pixel may measure advertising conversions. These tools may use cookies, local storage, device identifiers, or server-side events, so we cannot accurately describe all tracking as anonymous or cookie-free. We do not intentionally record payment-card fields in session replay. Browser settings can block or clear cookies, although essential features may then stop working. To object to nonessential tracking, contact us using the address below; we will handle your request under applicable law.

8. Sale, sharing, and public disclosure

We do not sell personal information for money. Some jurisdictions define "sale" or "sharing" broadly enough to include disclosures to advertising or analytics tools even without payment. If you have a right to opt out of such processing, send "Privacy opt out" to management@autoclip.dev. We do not knowingly sell or share personal information of children under 16. Content you deliberately publish or make public may be viewed, copied, or indexed by others; removing a public link cannot recall copies made elsewhere.

9. Retention and deletion

We keep information for as long as needed to provide the Service and for legitimate security, billing, dispute, and legal purposes. Retention differs by data type and plan. For completed, unsaved projects, heavy source and editing materials may be trimmed about three days after creation. Unsaved projects may stop appearing in the default project list after three days on the free plan or 14 days on paid plans. Under the current cleanup rules, underlying media from an expired, unsaved project may be reclaimed after a further three-day grace period. Saved projects are exempt from these routine project expiry rules while they remain saved. Other clip records, processing records, and analytics have separate cleanup schedules and exceptions. Storage limits, account lapse, or a deletion request may shorten retention. Account deletion removes account data and stored media through our deletion process, subject to provider processing, backups, legal records, and posts already published elsewhere. We cannot guarantee every copy disappears immediately from third-party systems or backups.

10. Security

We use measures such as encrypted network connections, authenticated access, and role-based controls to protect information. Access to data is limited to people and providers who need it for their work. No online system can guarantee absolute security. Please secure your own account and tell us promptly if you suspect unauthorized access.

11. International processing

We and our providers may process information in the United States and other countries where they operate. Privacy laws there may differ from those where you live. Where law requires a transfer mechanism or other safeguards, we use the safeguards applicable to the transfer. Contact us for information about a particular transfer.

12. Your privacy rights and choices

Depending on your location, you may request access to, correction, deletion, or a copy of personal information; object to or restrict certain processing; withdraw consent; opt out of certain sales, sharing, targeted advertising, or profiling; or appeal a denied request. You may also complain to your local data-protection authority. We will verify requests as needed and respond within the period required by law. Some requests are subject to legal exceptions.

Use account settings to export or delete your account, disconnect social accounts, and manage available preferences, or email management@autoclip.dev. You may use an authorized agent where law permits; we may ask for proof of authority. We will not discriminate against you for exercising a privacy right.

13. TikTok data

With your approval, a connected TikTok account may provide profile identifiers, username, avatar, profile URL, account statistics, authorized post and engagement metrics, and publishing permissions. We use these to show the connected account, publish or manage authorized posts, and display performance. We do not use TikTok-derived data for ad targeting, data-broker sharing, or AI model training. A publishing partner may hold TikTok access tokens. You can disconnect in AutoClip or revoke access in TikTok's security settings. We remove connection credentials through that process, subject to limited records retained for legal or security reasons. Existing TikTok posts remain on TikTok. See TikTok's Privacy Policy.

14. Children

The Service is not intended for children under 13, and we do not knowingly collect their personal information. If you believe a child under 13 has provided information, contact us and we will investigate and delete it as appropriate.

15. Changes and contact

We may update this policy as the Service changes. We will post the new date here and give additional notice of material changes where required. For privacy questions, rights requests, or appeals, contact Autoclip LLC at management@autoclip.dev.