Privacy Policy#

Effective date: June 15, 2026 Controller: Clipkit, Inc. ("Clipkit", "we", "us") Contact: support@clipkit.dev

This Privacy Policy explains what information we collect, how we use and share it, and your rights, when you use the Clipkit hosted Service at clipkit.dev.

1. Information we collect#

• Account information: name, email, password (hashed), organization, and authentication data when you register or sign in.
• Content & assets: the video sources (JSON), uploaded or generated assets (images, screenshots, audio, video), and renders you create with the Service.
• Payment information: processed by Stripe. We do not store full card numbers; we receive limited billing metadata (e.g., last four digits, plan, status).
• Usage & device data: log data, IP address, browser/device info, pages and features used, timestamps, and approximate location derived from IP.
• Cookies & similar technologies: see §8.
• Communications: messages you send us (support, abuse reports).

2. How we use information#

• Provide the Service: create accounts, host/render/store/display your content, deliver links and exports.
• Billing: process subscriptions and payments via our payment processor.
• Safety & moderation: detect and prevent abuse and enforce our Acceptable Use Policy. We are not obligated to monitor content, but may review it or use automated tools at our discretion (see §4).
• Improve the Service: we use aggregated and de-identified usage data to analyze and improve the Service. We do not use the content of paid/business users to train models or features without opt-in consent (see our Terms §4(c)).
• Marketing: for free/anonymous tiers, we may feature content per our Terms §4(b); you can opt out. We may send product communications you can unsubscribe from.
• Legal & security: comply with law, enforce our Terms and AUP, and protect rights and safety.

Legal bases (GDPR): performance of contract (providing the Service), legitimate interests (security, improvement, marketing), consent (where required), and legal obligation.

3. Anonymous use#

Content created without an account is ephemeral and retained only for a limited period before automatic deletion (see §5). We may log limited request data (e.g., IP, timestamps) for security and abuse prevention.

4. Content moderation & child-safety reporting#

We prohibit illegal and abusive content (see our Acceptable Use Policy). We are not obligated to monitor content, but may review it or use automated content-safety tools at our discretion. If we become aware of apparent child sexual abuse material (CSAM), we will remove it and report it to the National Center for Missing & Exploited Children (NCMEC) as required by law (18 U.S.C. § 2258A), and may preserve related information and disclose it to authorities.

5. Retention#

• Anonymous content & assets: deleted automatically after 7 days.
• Account content & assets: retained while your account is active and within your plan's storage quota; deleted or anonymized after account closure, subject to backups and legal-hold requirements.
• Logs & security data: retained for 12 months.

6. How we share information#

We do not sell your personal information. We share it with:

• Service providers / processors acting on our behalf, e.g.:
  • Supabase — database, storage, authentication
  • Stripe — payments
  • Vercel and Cloudflare
  • a content-safety provider, if and when we engage one
  • our analytics provider
• Legal & safety: to comply with law, respond to lawful requests, enforce our Terms/AUP, or protect rights and safety (including NCMEC reporting).
• Business transfers: in a merger, acquisition, or asset sale, subject to this Policy.

7. International transfers#

We may process information in the United States. Where required, we use appropriate safeguards (e.g., Standard Contractual Clauses) for cross-border transfers.

8. Cookies#

We use cookies and similar technologies for authentication, preferences, security, and analytics. You can control cookies through your browser; some features may not function without them.

9. Your rights#

Depending on your location, you may have rights to access, correct, delete, port, restrict, or object to processing of your personal information, and to withdraw consent or opt out of certain processing (including, for California residents, the right to know, delete, correct, and opt out of "sharing" for cross-context behavioral advertising). To exercise these rights, contact support@clipkit.dev. You may also lodge a complaint with your supervisory authority.

10. Children#

The Service is not directed to children. We do not knowingly collect personal information from anyone under 18 (and never from anyone under 13). If you believe a child has provided us information, contact support@clipkit.dev.

11. Security#

We use technical and organizational measures to protect information. No method of transmission or storage is fully secure; we cannot guarantee absolute security.

12. Changes#

We may update this Policy; material changes will be notified via the Service or email. The "Effective date" reflects the latest version.

13. Contact#

Clipkit, Inc. — support@clipkit.dev