Privacy Policy

We collect information you provide directly to us, including:

• Account information (email, display name, password)
• Profile information (bio, social links, preferences)
• Video content you upload or link to
• Subtitle and emoji customizations
• Usage data (videos processed, exports, storage)

What Technologies We Use:

• Cookies: Small text files stored in your browser to maintain session state and preferences
• Local Storage: Browser storage for editor state, draft projects, UI preferences, and upload progress
• Session Storage: Temporary data cleared when you close your browser tab
• IndexedDB: Client-side database for caching video thumbnails and processing data

What Data We Store & Why:

• Session/Authentication: Your logged-in status, user ID reference, and security tokens - to keep you signed in and secure your account
• Preferences: Language settings, theme choice, editor preferences - to remember your settings and improve user experience
• Technical Data: Device type, browser info, IP address, timestamps - to ensure compatibility and troubleshoot issues
• Usage Analytics: Pages visited, features used, upload/export counts - to measure usage and improve our service
• Upload Progress: Video upload queue state and progress - to track and resume uploads if interrupted
• OAuth State: Temporary tokens during YouTube/TikTok/Google Drive authentication - to securely connect your accounts

Third-Party Cookies & Tracking:

• Google/YouTube: When you connect your YouTube account, Google may set cookies for authentication and to remember your consent choices
• TikTok: When you connect your TikTok account, TikTok may set cookies during the OAuth authentication process
• Cloudflare: We use Cloudflare for security (Turnstile CAPTCHA), which may set cookies to verify you are human
• Supabase: Our authentication provider may set cookies for session management

How Long Data Persists:

• Session Cookies: Deleted when you close your browser
• Authentication Cookies: Persist for up to 7 days (or until you log out)
• Preference Cookies: Persist for up to 1 year unless you clear them
• Local Storage (upload progress): Cleared after 24 hours or on logout
• Local Storage (editor state): Cleared after 7 days or when you delete a project
• Third-party cookies: Duration varies by provider (see their respective privacy policies)

Your Control & Opt-Out Options:

• You can control or delete cookies in your browser settings at any time
• You can clear local storage and IndexedDB through your browser's developer tools
• We display a cookie consent banner when you first visit - you can update your preferences there
• To revoke third-party access, visit Google Security Settings
• Note: Blocking essential cookies may prevent you from logging in or using core features

What We Do NOT Do:

• We do NOT use tracking cookies for advertising purposes
• We do NOT sell your browsing data or cookie information to third parties
• We do NOT use cookies to track you across other websites

We use the information we collect to:

• Provide, maintain, and improve our services
• Process your video editing requests
• Enable posting edited videos to your connected social media accounts (TikTok, YouTube)
• Send you technical notices and support messages
• Track usage for billing and analytics
• Personalize your experience

We implement industry-standard security measures to protect your data:

• Encrypted data transmission (HTTPS/TLS)
• Data encrypted at rest and in transit
• Secure password hashing (bcrypt)
• Row-level security on all database tables
• Regular security audits and updates
• OAuth tokens are encrypted before storage
• Your TikTok/YouTube credentials are never stored on our servers in plain text

We maintain the same level of privacy protection as required by TikTok and YouTube.

What TikTok data we collect when you connect your account:

• Avatar/profile picture URL
• Display name and username
• Open ID (TikTok user identifier)
• OAuth access and refresh tokens

How we use your TikTok data:

• We access your TikTok account information to enable posting edited videos to your TikTok profile
• We display your TikTok username and avatar to confirm your connected account
• We use OAuth tokens solely for video publishing functionality
• We do NOT share your TikTok data with third parties without your consent
• We do NOT access your TikTok viewing history, followers list, or private messages
• We do NOT add watermarks or branding to your content

TikTok data storage:

• OAuth tokens are encrypted and stored securely
• We retain your TikTok access token only while you maintain an active connection
• Uploaded videos are stored temporarily for processing (maximum 7 days)
• You can disconnect your TikTok account and delete all associated data at any time from your Dashboard

API Security & Compliance:

• Our TikTok API client credentials (client_secret) are kept confidential and never exposed
• We maintain appropriate technical and administrative controls for API security
• We comply with TikTok's API rate limits and usage guidelines
• We will promptly update our integration when TikTok releases API updates

By using our TikTok integration, you agree to TikTok's Terms of Service and TikTok's Privacy Policy.

YouTube Data We Access:

• channels.list - To retrieve your channel name and profile picture for display
• videos.insert - To upload videos to your YouTube channel on your behalf

YouTube Data We Collect & Store:

• OAuth Access Token - Encrypted with AES-256-GCM, used for API authentication
• OAuth Refresh Token - Encrypted, used to refresh expired access tokens
• Channel ID - Your YouTube channel identifier
• Channel Title - Your channel name for display purposes
• Channel Thumbnail - Your channel profile picture URL
• Video Metadata - Title, description, tags, privacy setting of uploaded videos

Data Retention:

• OAuth tokens are retained while your YouTube account is connected
• Upon disconnection or revocation, all YouTube API data is deleted within 7 days
• Upload history is retained for your reference until you delete your account

How We Use Your YouTube Data:

• We use YouTube API Services solely to upload videos to your YouTube channel
• Videos are uploaded only when you explicitly click the upload button
• We display your channel name and thumbnail to confirm your connected account
• We do NOT access your YouTube viewing history, subscriptions, or playlists
• We do NOT download videos from YouTube
• We do NOT modify or delete your existing YouTube content

Data Sharing:

• Your YouTube data is shared only with YouTube/Google for the purpose of video uploads
• We do NOT share your YouTube data with any other third parties
• We do NOT sell your YouTube data

Revoking Access:

• You can disconnect your YouTube account at any time from your Dashboard
• You can also revoke access via Google Security Settings
• Upon revocation, all stored YouTube API data will be deleted within 7 days

When you connect your Google Drive account, we use Google Drive API Services. By using this feature, you agree to be bound by the Google Drive Terms of Service.

What Google Drive data we access:

• Read-only access to your video files (drive.readonly scope)
• File metadata (name, size, thumbnail, dates)
• OAuth access and refresh tokens for authentication

How we use your Google Drive data:

• We list your video files so you can select which to import
• We download selected videos to our servers for processing
• We do NOT modify, delete, or upload files to your Google Drive
• We do NOT access non-video files or other Drive content
• We do NOT share your Google Drive data with third parties

Google Drive data storage:

• OAuth tokens are encrypted and stored securely
• Downloaded videos are stored temporarily for processing (maximum 7 days)
• You can disconnect your Google Drive account at any time from the app
• You can also revoke access via Google Security Settings

Google's Privacy Policy: https://policies.google.com/privacy

We do NOT sell or share your personal information with third parties without your consent.

Your data is shared with:

• TikTok: Only to enable video posting functionality when you explicitly request it
• YouTube/Google: Only to enable video uploading functionality when you explicitly request it
• Google Drive: Only to import videos you explicitly select from your Drive
• Supabase: Our database provider (data encrypted at rest)
• OpenAI: For AI transcription and emoji generation (video content only, no personal data)

We do not share your data with advertisers, data brokers, or any other third parties.

• We retain your TikTok/YouTube access tokens only while you maintain an active connection
• Uploaded videos are stored temporarily for processing and auto-deleted after 7 days
• Exported videos are available for download for 7 days, then automatically deleted
• Account data is retained until you delete your account
• You can disconnect your social accounts and delete all associated data at any time

• Our service is intended for users 13 years of age and older
• We do not knowingly collect personal information from children under 13
• If we discover we have collected data from users under 13, we will delete it immediately
• For users in the EU/EEA: Users under 16 require parental consent to use our service
• Parents/guardians can contact us at privacy@aiclipy.com to request deletion of their child's data

• Our servers are located in the United States
• We comply with GDPR for users in the European Union
• Data transfers comply with applicable data protection laws
• We use industry-standard security measures for all data transfers

You have the right to:

• Access: Request a copy of your personal data
• Correct: Update or correct inaccurate data
• Delete: Delete your account and all associated data
• Disconnect: Revoke TikTok/YouTube access at any time
• Export: Download your data in a portable format
• Withdraw consent: Opt-out of data processing at any time

To exercise these rights:

• Use your Dashboard settings to disconnect accounts or delete data
• Contact us at privacy@aiclipy.com

• We will notify users of significant privacy policy changes via email or in-app notification
• Continued use of the service after changes constitutes acceptance of the updated policy
• The "Last updated" date at the top of this page indicates when the policy was last revised