Privacy Policy
Last updated: August 24, 2026
1. What we collect
- Account data: email address, full name (if provided), authentication tokens via Supabase.
- Usage data: projects created, renders started, style extractions, chat messages, credit ledger entries.
- Uploaded content: video, image, and audio files you upload, plus any reference URLs you paste.
- Billing data: payment method details are collected and stored by Stripe; we only retain a customer ID, subscription status, and invoice history.
- Technical and interaction data: IP address, user agent, device fingerprint (for fraud prevention on signup), timestamps, page visits, clicks, navigation, product events, errors, and performance timing.
- Session replay data: a visual reconstruction of interactions with the website and Studio may be collected to help us understand usability problems. Form inputs, Director prompts and messages, attachment names, project titles, uploaded media, video/audio, preview canvases, and payment details are excluded or masked from replay.
2. Why we process it
- Deliver the video-editing service (core functionality).
- Manage subscriptions and usage-based limits.
- Prevent abuse (rate-limits, fraud scoring at signup).
- Understand acquisition, conversion, feature adoption, reliability, and usability so we can improve the offer, funnel, website, and Studio.
- Legal obligation (tax records retained 7 years).
We do not train foundation models on your content. We do not sell your data. We do not share it with advertisers.
3. Sub-processors
Your data passes through:
- Supabase, authentication, account records, and database storage (Postgres + RLS).
- Vercel, hosting for the web app and browser-facing API routes.
- AWS, encrypted media storage, API and worker compute, rendering, and operational logs.
- Stripe, payment processing + subscription state.
- PostHog, product analytics, heatmaps, error and performance signals, and privacy-filtered session replay.
- ElevenLabs, speech-to-text for your audio. Audio and transcripts are processed and may be retained by ElevenLabs according to our workspace settings and their retention terms.
- OpenAI, AutoCut and clip analysis on bounded source evidence.
- Moonshot AI, Director editing, style work, and analysis of reference and b-roll evidence.
- Alibaba Cloud Model Studio, the configured Qwen fallback for Director and style work when that rail is used.
- fal.ai, optional image generation, background removal, and tracked media isolation when you request those tools.
- Pexels, licensed stock footage source. We read their catalog; they don't receive your content.
4. Retention
Finished renders, uploaded source material, and chat messages are retained for the lifetime of your account. Deleted when you delete your account (see §6) or when you remove individual items from the cockpit. Billing records are retained for 7 years per tax regulations. Analytics events and session replays are retained according to our configured analytics retention window and may be deleted earlier when no longer needed.
5. Security
Data at rest is encrypted by our sub-processors. Traffic is HTTPS-only. Supabase Row-Level Security enforces per-user data isolation. Payment card numbers never touch our servers, Stripe Checkout handles that end-to-end.
6. Your rights (GDPR / CCPA)
- Right of access: email us and we'll provide a copy of your data.
- Right to deletion: use the "Delete account" control on your Plan & billing page, or email us. All data is deleted (some billing records retained per §4).
- Right to correction: edit your profile in-app or email us.
- Right to portability: we can export your data as JSON + your videos as MP4s.
- Right to opt out of sale: we do not sell data, so there's nothing to opt out of.
- Analytics preference: Clypmint honors a browser Do Not Track signal by disabling product analytics and session replay for that browser.
7. Children
Clypmint is not intended for users under 18. If you believe a minor has created an account, email us and we will delete it.