Skip to content
ClipAI
LEGALUPDATED 2026-10-16

Privacy Policy

ClipAI (“ClipAI”, “we”, “us”) provides an AI-powered service, on clipai.online and in the ClipAI iOS app, that analyses videos you upload, detects highlight clips, generates captions, and, at your direction, publishes those clips to your connected social media accounts. ClipAI is responsible (the “controller”) for the personal data described here. This policy explains what we collect, how we use it, who we share it with, and the choices you have.

Information We Collect

  • Account information: your name and email address, and authentication identifiers if you sign in with Google or Apple.
  • Content you provide: videos you upload or import (including from a link or a podcast feed you give us), and the transcripts, clips, captions, titles, scores, thumbnails and dubbed audio generated from them. Your videos may contain the voices and faces of you and other people; you are responsible for having the right to upload them.
  • Face positions (no face recognition): to reframe a clip to 9:16, our servers detect where faces appear in video frames so the crop can follow the speaker. This finds positions only. It does not identify who anyone is, and we do not create or keep face templates, faceprints or other biometric identifiers. The positions are used while the clip renders and are not saved to your account.
  • Social account connections: OAuth access and refresh tokens (or app passwords) for the social platforms you choose to connect, stored encrypted (AES-256-GCM) and used only to publish on your behalf and to read the public performance of posts you published through ClipAI (such as view counts).
  • Billing information: subscription status and customer identifiers. Card details are handled by Stripe or Apple and are never stored on our servers.
  • Usage and technical data: processing job status, logs, device and browser information, IP address, and request metadata needed to operate and secure the service. In the iOS app, a push notification token if you allow notifications.
  • Support conversations: messages you send us by email or in the support chat.
  • Score tool uploads: a clip you upload to the clip-scoring tool (clipai.online/score) is deleted after it is scored, and in any case automatically within 2 days.
  • Posts you add: if you paste the link of a post you made, we store the link, the platform, the account name shown on the post, and the post’s public numbers (views, likes, comments, shares), and keep a history of those numbers for 30 days. For YouTube and Bluesky we read them from the platform’s public API (Bluesky does not show views); for other platforms, or when that read is unavailable, you can type in the views yourself. Three days later we email you how the post did, unless you have unsubscribed from product email.
  • Invites: if you sign up through someone’s invite link or invite code, we record which account invited you so both of you can receive the referral bonus. The person who invited you sees, in their Settings, a shortened form of your email address (for example ma***@gmail.com), the date you signed up, and whether your first clip has finished. They do not see your name, full email address, videos or clips.
  • Clipper marketplace submissions: if you submit a post to a brand’s public campaign brief, we collect the post URL, an optional handle, and the platform you name. To verify the submission, we may look up publicly available information about that post URL (such as view counts or caption text) via that platform’s public API, where one exists.
  • Creators we contact: we sometimes make a private sample from a creator’s publicly available video to show them what ClipAI does, and email them a link to it. If that is you, email us and we will take the sample down and delete it.

How We Use Your Information, and Our Legal Bases

  • To provide the service you asked for (performance of our contract with you): to transcribe, analyse, score and detect clips in your videos; to render, caption, reframe and, if you choose, dub them; to store them; to publish clips to the accounts you connect and schedule; and to manage your account, subscription and usage limits.
  • To operate, secure, debug and improve the service (our legitimate interests in running a reliable, safe product), including fraud and abuse prevention.
  • For analytics, session replay and the support chat on our website and in the iOS app (your consent where the law requires it, otherwise our legitimate interests; see the cookie section below).
  • To email you: service email about your account, billing and processing (contract), and product email such as onboarding tips and trial reminders (legitimate interests or consent, depending on where you live). Every product email has an unsubscribe link.
  • To comply with law and keep records we are required to keep, such as tax and accounting records (legal obligation).

We do not use your videos, transcripts or clips to train AI models, and we do not use your content in our own marketing without your permission.

Third-Party Processors

We share data with the following service providers strictly to operate ClipAI. They process data on our behalf and are not permitted to use it for their own purposes:

  • Groq - receives the audio of speech videos to produce transcripts.
  • Anthropic (Claude) - receives transcript text and/or video frames to score and title clips, and caption text to translate it when you choose a caption language.
  • ElevenLabs - receives the rendered clip (picture and sound) to produce a dubbed soundtrack, only when you opt into AI dubbing. We ask ElevenLabs not to clone the speakers: it uses a similar voice from its voice library instead. We delete the dubbing job at ElevenLabs once the dubbed audio has been downloaded.
  • Cloud infrastructure: Vercel (web hosting), Fly.io (processing), Supabase (database), Tigris (video/clip storage), and Upstash (queue/cache).
  • Stripe - payment processing for web subscriptions.
  • Apple - Sign in with Apple, App Store purchases, and push notification delivery in the iOS app. Google - Sign in with Google.
  • Expo - relays push notifications to the iOS app; it receives your device’s push token and the notification text. The app also checks Expo for app updates, which sends technical details such as the app version and device platform.
  • PostHog - product analytics (usage and technical events), associated with your account identifier and email address. PostHog also records session replays (a reconstruction of pages you visit and interactions you make on our site) to help us find and fix usability problems. Everything you type is masked before it leaves your browser, and video and file-upload elements are blocked from capture. On the signed-in app pages (such as your dashboard and onboarding), all on-screen text is masked too, so recordings do not show your transcripts, clip titles or email address. Settings, billing and password-reset pages are not recorded at all.
  • Google - Google Analytics (GA4) receives page views and product events tied to a per-browser identifier. Our fonts are hosted by us, so loading a page does not send your IP address to Google Fonts.
  • DataFast - website analytics (page views, traffic source and how far a page is read) in its cookieless mode. It sets no cookies; it keeps a session identifier and a visitor identifier in your browser’s session storage, deleted when the tab closes, and groups visits by a one-way hash of IP address and browser that changes every day. When you are signed in and have accepted analytics, it also receives your account identifier (never your email). It also records visits by known AI and search crawlers to our server.
  • Intercom - the support chat and AI support agent on our website and in the iOS app. It receives the messages you send, and, when you are signed in, your account identifier, email and name so a conversation stays attached to your account.
  • Sentry - crash and error diagnostics on our website, servers and in the iOS app, which can include device, browser and app version alongside the error itself. Crash reports from the iOS app are not linked to your account and contain no request contents.
  • RevenueCat - subscription state for purchases made in the iOS app. It receives an account identifier and the purchase result; the payment itself is handled by Apple.
  • Resend - delivers our transactional and product email. Our own mailbox provider hosts the email you send to hello@clipai.online.
  • Social platforms you connect (TikTok, Instagram, YouTube, LinkedIn, X, Threads, Bluesky) - receive the clips, captions, and metadata you choose to publish.
  • A network proxy provider - relays the video links you import or score (such as YouTube links) to the site that hosts them. It sees the link, not your account.
  • YouTube and Bluesky’s public APIs - queried, read-only, for the public numbers of posts whose link you add, and to verify a clipper marketplace submission’s public view count and caption text against the post URL submitted.

PostHog, Google Analytics and Intercom run only with your consent where the law requires it: in the EU, EEA, UK and Switzerland they stay off until you accept in the cookie banner. Elsewhere they run unless you decline, and a browser that sends a Global Privacy Control signal is treated as a decline. DataFast sets no cookies but keeps session identifiers in your browser’s session storage, so it follows the same rule: off until you accept in the EU, EEA, UK and Switzerland, and elsewhere on unless you decline or your browser sends Global Privacy Control. You can change your choice at any time on our Cookie Policy page.

Separately from the cookie banner, our servers record a small set of account events (sign-up, subscription and billing, referral, render, download and processing events) in PostHog against your account identifier, for our legitimate interest in running and improving the service. In the iOS app, PostHog analytics and the Intercom support chat run while you are signed in, unless you turn off Share usage analytics in the app’s Settings (available in versions after 1.0.8). With it off, the app sends no usage analytics to PostHog and connects to Intercom only when you open the support chat, which shares your account identifier, email and name so we can reply to you.

We do not sell your personal data or your content, and we do not share it for cross-context behavioural advertising. We do not run advertising pixels.

YouTube

ClipAI uses YouTube API Services to publish clips to a YouTube channel you connect and to read the public statistics of videos published through ClipAI and of YouTube videos whose link you add. By using ClipAI’s YouTube features (connecting a YouTube channel or adding a YouTube post link) you agree to the YouTube Terms of Service, and Google’s handling of your data is described in the Google Privacy Policy. We store your YouTube tokens (encrypted), channel identifier, and the statistics of posts we published for you or whose link you added, and use them only for those purposes. You can revoke ClipAI’s access at any time by disconnecting YouTube in ClipAI or from your Google security settings. Disconnecting in ClipAI deletes the stored tokens straight away; after revoking from Google, the tokens stop working, and you can disconnect in ClipAI or email us to have the rest deleted.

International Transfers

Our providers are located mainly in the United States, and your data may be processed there and in other countries whose data protection laws differ from yours. Where the law requires it, we rely on safeguards such as the European Commission’s Standard Contractual Clauses or an adequacy decision for these transfers.

Data Retention

  • Account data, videos and clips are kept for as long as your account is active.
  • When you delete a video, its file, clips and thumbnails are removed from storage straight away (if storage is briefly unavailable we retry automatically, and they are gone within 30 days at most).
  • Score tool uploads are deleted after scoring and within 2 days at most.
  • Temporary processing copies (such as the dubbed soundtrack of a clip) expire automatically within 7 days, including after the video or account they belong to is deleted.
  • Disconnecting a social account deletes its stored tokens.
  • The history of a post’s numbers is deleted after 30 days. The post link and its latest numbers stay on your account until the account is deleted.
  • When your account is deleted, we delete your account data, content and connected-account tokens. We also delete the records our providers hold about your account: your analytics profile, events and session recordings at PostHog, your support contact and conversations at Intercom, and your subscription record at RevenueCat. Billing records (invoices, payments and the customer record) are kept at Stripe, and App Store purchase records at Apple, for as long as tax and accounting law requires.
  • Our database is backed up daily and each backup is kept for 7 days, so deleted data is gone from those backups within 7 days. Backups are used only to recover from an outage or data loss.
  • Logs, error reports and analytics data are kept for a limited period by the providers listed above.

You can delete your entire account yourself in Settings on clipai.online or in the ClipAI iOS app, or by emailing us; see our Data Deletion page.

Security

Social credentials are encrypted at rest. Access to the service is authenticated, and traffic is served over HTTPS. No system is perfectly secure, but we take reasonable measures to protect your data.

Your Rights

You can download a copy of your data yourself (a JSON file) with “Download my data” in Settings on clipai.online, and delete your account there too. You can also ask us by email for a copy of your personal data, to correct it, or to delete it. Depending on where you live (for example under the GDPR, UK GDPR or California law), you may also have the right to object to or restrict certain processing, to withdraw consent at any time (without affecting processing before you withdrew it), and to complain to your local data protection authority. You can revoke ClipAI’s access to a connected social account at any time, both within ClipAI and from that platform’s own settings. We answer requests within one month, will not treat you differently for using your rights, and may need to verify your identity first.

Children

ClipAI is not directed to children. You must be at least 13 years old to use it, or older where the law of your country requires (for example 16 in some EU countries). We do not knowingly collect data from children under that age; if you believe a child has given us data, email us and we will delete it.

Changes

We may update this policy. The “Updated” date above shows the latest version, and we will tell you by email or in the app before a material change takes effect.

Contact

For privacy questions or data requests, contact us at hello@clipai.online. You can also manage or delete your data as described under Data Retention above.