Privacy Policy

Effective Date:

Introduction

Welcome to clipin.ai. Your privacy is of utmost importance to us. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website [clipin.ai], use our services, or otherwise interact with us. By accessing or using our website, you agree to this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access the site.

Information We Collect

We may collect and process the following types of information:

Personal Information

  1. Contact Information: Name, email address, phone number.
  2. Account Information: Username, password, and other registration details.
  3. Payment Information: Payment card details and billing information if you make purchases.
  4. Communication Information: Information you provide in your communications with us, including customer support inquiries.

Usage Data

  1. Device Information: Information about your device such as IP address, browser type, operating system, and device identifiers.
  2. Usage Information: Information on how you use our website, such as pages viewed, the time spent on each page, and click-throughs.
  3. Cookies and Tracking Technologies: We use cookies, web beacons, and similar tracking technologies to collect and store information about your interactions with our site.

How We Use Your Information

We use your information for various purposes, including:

  1. To Provide Services: To operate and maintain our website, create and manage your account, process your transactions, and provide customer support.
  2. To Communicate with You: To send you administrative information, such as updates to our policies, and marketing communications if you have opted in to receive them.
  3. To Improve Our Services: To analyze how you use our website, monitor and improve our site’s performance, and develop new features and services.
  4. To Ensure Security: To protect the security and integrity of our website and services, prevent fraud, and ensure compliance with legal obligations.
  5. To Comply with Legal Requirements: To respond to legal requests and prevent harm, and to fulfill any other purpose for which you provide the information.

Signed-Out Generation and Abuse Prevention

You may try certain image and video generation features without creating an account. To provide these limited signed-out uses and prevent repeated abuse, Clipin stores a random anonymous identifier in a secure cookie and random device identifiers in browser local and session storage. Our server also derives keyed, one-way hashes from the anonymous identifier, device identifier, and request IP address. We use these hashes to enforce per-feature usage and credit limits; we do not store the raw IP address or raw browser device identifier in the anonymous entitlement records.

Clearing cookies or browser storage removes the identifiers from that browser, but it may not restore signed-out usage because the server also checks the one-way IP-derived signal. Shared networks may therefore share a signed-out limit. Signed-out limits and any credits granted after registration are separate: anonymous activity is not converted into an account balance or attached to a later account.

Signed-out image results include a visible Clipin watermark. Video exports currently do not add a Clipin watermark for either signed-in or signed-out users. Signed-out result preview and download access expires after 24 hours by default, or after the shorter or longer period displayed when the feature is used. We retain anonymous entitlement claims and their one-way abuse-prevention signals for the configured entitlement window, which is lifetime by default unless we configure an expiry. Temporary result records and files are marked expired after their access period and are deleted through access-time cleanup and storage lifecycle processes.

Sharing Your Information

We may share your information with:

  1. Service Providers: Third-party vendors that help us operate our website and provide our services, such as payment processors, hosting providers, and customer service tools.
  2. Business Transfers: In connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business by another company.
  3. Legal Compliance: To comply with legal obligations, respond to lawful requests, and enforce our legal rights.
  4. Your Consent: With your consent or at your direction, we may share your information for other purposes not covered by this policy.

Security of Your Information

We implement appropriate technical and organizational measures to protect your personal information against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. However, please be aware that no method of transmission over the Internet or method of electronic storage is 100% secure.

Google and YouTube API Services User Data

When you choose to connect a YouTube channel, Clipin requests only the Google OAuth permissions needed to identify the connected channel and publish videos that you explicitly select. This section applies to raw and derived data received from Google and YouTube API Services.

Data We Access

  1. YouTube channel identity: Channel ID, channel display name, and channel avatar, accessed through the youtube.readonly scope so you can verify which channel is connected.
  2. Publishing authorization: OAuth access and refresh tokens and the granted scope list. Tokens authorize Clipin to upload only when you publish or schedule a completed Clipin video.
  3. Upload result: The YouTube video ID returned after a successful upload so Clipin can show publication status.

Clipin does not read your YouTube viewing history, subscriptions, comments, playlists, private videos, analytics, contacts, or Gmail data. Clipin does not collect aggregated or anonymized Google user data for advertising, profiling, or model training.

How We Use Google User Data

We use YouTube channel identity only to display the connected channel inside your Clipin account. We use the youtube.upload permission only to upload a completed video chosen by you, with the title, description, tags, visibility, and schedule that you provide. We do not publish automatically unless you create or schedule a publishing job.

Sharing and Transfer

We do not sell Google user data, use it for targeted advertising, or share it with data brokers. Data is sent to Google only to perform the YouTube actions you request. Our infrastructure providers may process encrypted data solely to host and operate Clipin under confidentiality and security obligations. We may disclose data when legally required or at your direction.

Data Protection Mechanisms

  1. Encryption in transit: Clipin transmits OAuth authorization codes, access tokens, refresh tokens, channel data, and upload requests only over HTTPS/TLS connections between your browser, Clipin, and Google APIs.
  2. Encryption at rest: YouTube access tokens, refresh tokens, and OAuth PKCE verifiers are encrypted before database storage using versioned AES-GCM authenticated encryption with a unique random initialization vector. Encryption keys are stored in restricted Cloudflare secret bindings separately from the database; plaintext credentials are not stored in database rows.
  3. Least-privilege access controls: Encrypted tokens are decrypted only on demand inside Clipin's server-side OAuth and publishing services. They are not returned to browser JavaScript after the OAuth callback. Account-management and publishing endpoints require an authenticated Clipin session and verify that the connected channel and publishing job belong to that user.
  4. OAuth request protection: Connection requests use a hashed, single-use OAuth state that expires after ten minutes and Proof Key for Code Exchange (PKCE). Refresh-token rotation is protected by an account lease so concurrent workers cannot overwrite credentials or reuse stale tokens.
  5. Data minimization: Clipin stores only the connected channel identity, granted scopes, encrypted credentials, token expiry, and upload result needed to provide the publishing feature. Google user data is excluded from application logs, advertising, profiling, and generalized AI/ML training workflows.

Retention and Deletion

We retain active encrypted tokens only while your YouTube channel remains connected. When you disconnect the channel, Clipin attempts to revoke the Google token and deletes the locally stored access token, refresh token, granted scopes, expiry, avatar, and channel metadata even if Google's revocation endpoint is temporarily unavailable. A minimal disconnected-account record and publishing history may be retained for security, fraud prevention, legal compliance, and transaction integrity, but it contains no reusable Google OAuth credential. You may also revoke Clipin at any time from your Google Account permissions page or email us to request deletion, subject to legal retention requirements.

Limited Use and AI/ML

Clipin's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data to develop, improve, or train generalized AI or machine-learning models, and we do not transfer Google user data to third-party AI services for model training.

Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal information:

  1. Access: You have the right to access the personal information we hold about you.
  2. Correction: You can request that we correct any inaccuracies in your personal information.
  3. Deletion: You can request that we delete your personal information, subject to certain exceptions.
  4. Opt-Out: You can opt out of receiving marketing communications from us.

To exercise any of these rights, please contact us using the information provided below. We will respond to your request in accordance with applicable laws.

Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience on our website. Cookies help us understand how you interact with our site, personalize your experience, and improve our services. You can set your browser to refuse all or some cookies or to alert you when cookies are being sent. However, if you disable or refuse cookies, some parts of our site may become inaccessible or not function properly.

Microsoft Clarity

We use Microsoft Clarity to understand how visitors use and interact with our website through behavioral metrics, heatmaps, and session replay. This information helps us diagnose usability issues and improve our website and services. Microsoft Clarity may collect website usage data through cookies and similar tracking technologies. For more information about how Microsoft collects and uses data, see the Microsoft Privacy Statement.

Third-Party Links

Our website may contain links to third-party websites or services that are not operated by us. We are not responsible for the privacy practices or content of these third-party sites. We encourage you to review the privacy policies of any third-party sites you visit.

Updates to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other reasons. We will post the updated Privacy Policy on this page and indicate the effective date. We encourage you to review this Privacy Policy periodically.

Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

Email: support@clipin.ai