Privacy Policy

1. Information we collect

• Account details: your email address. If you sign in with Google, we also receive your name and profile picture from Google.
• Content you process: the YouTube links you submit and the video files you upload, the video and audio we download from those links, the transcripts, highlights, titles and captions we generate, the clips we render and any edits you make.
• Connected accounts: when you connect a YouTube channel, TikTok account or Facebook Page, we store the access tokens the platform gives us (encrypted at rest) and basic profile details such as the channel, account or Page name and picture.
• Billing: your plan, credit balance and purchase history. Payments are handled by our payment provider; we never see or store your full card details.
• Technical data: a session cookie that keeps you signed in, and server logs (IP address, browser, request times and errors) that we use to run and secure the Service. We use advertising cookies only if you accept them (see Advertising data below).
• Usage data: which pages you visit, where you came from (such as a link or campaign), the buttons you use and recordings of how you move through the app, with anything you type hidden. A random ID in your browser's local storage (not a cookie) ties these together; once you sign in, they're linked to your account.
• Advertising data (only if you accept it): when you click Allow in our cookie banner, Meta's cookies identify your browser and the Facebook or Instagram ad you came from, and record the pages you visit and when you start a checkout. When you then sign up or pay, we tell Meta it happened, with a hashed (SHA-256) copy of your account ID, Meta's cookie IDs, your IP address and browser type, and the amount paid. We never send Meta your email address. If you decline, none of this is collected or sent. You can change your choice at any time with “Cookie settings” at the bottom of our pages.

2. How we use it

• To sign you in and run your account.
• To download, transcribe, analyse, reframe, caption and render your videos into clips.
• To publish clips to the YouTube, TikTok or Facebook accounts you connect, only when you ask us to.
• To charge credits, process payments and refund credits when processing fails.
• To send you sign-in links and important messages about your account.
• To keep the Service secure, prevent abuse and fix problems.
• To understand how people find and use the Service, so we can improve it.
• To measure and improve our ads on Facebook and Instagram, only if you accepted advertising cookies.

We do not sell your personal information and we do not use your videos to train AI models.

3. Google and YouTube data

When you connect a YouTube channel, we request the youtube.upload and youtube.readonly permissions. We use them only to show which channel you connected and to upload the clips you choose, with the title, description and privacy setting you choose. We never upload anything without your action.

ClipTaro's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not share Google user data with third parties except as needed to provide the features described here, and we do not use it for advertising.

By using YouTube features you also agree to the YouTube Terms of Service, and Google handles your data under the Google Privacy Policy. You can disconnect a channel in Settings → Connections at any time, which deletes its tokens from our database, or revoke access from your Google security settings.

4. TikTok and Facebook data

When you connect TikTok, we request basic profile access and permission to post videos or send them to your drafts. When you connect Facebook, we request access to list the Pages you manage and to publish videos and Reels to them. We use these permissions only to show your connected accounts and to publish the clips you choose. You can disconnect them in Settings → Connections, or revoke access from TikTok or Facebook directly.

5. Who we share it with

We share data only with the service providers that help us run the Service, and only what they need:

• Hosting: Vercel (website) and Tencent Cloud in Singapore (servers, database and media storage).
• AI processing: OpenRouter and the model providers it routes to, which receive your video's audio and transcript to produce transcripts, highlights, titles and translations.
• Payments: Creem, our merchant of record, which processes your payment and may collect billing and tax details.
• Email: our email delivery provider, to send sign-in links.
• Error monitoring: Sentry, which receives reports when something breaks (the error, the page or request it happened on, and your browser type) so we can fix it. These reports don't include your email, cookies, videos or transcripts.
• Product analytics: PostHog (United States), which receives the usage data above and events such as signing up, creating a project or buying a plan. It doesn't receive your email, videos or transcripts.
• Advertising: Meta Platforms (Facebook and Instagram), only if you accept advertising cookies, which receives the advertising data above and uses it to measure and deliver our ads under its own privacy policy.
• Avatars: DiceBear, which generates your default avatar from a random account ID (not your email).
• Publishing platforms: YouTube, TikTok and Facebook, when you publish a clip to them.

We may also disclose information if required by law, or to protect the rights and safety of our users and the Service.

6. Retention and deletion

We keep your account and projects until you delete them. Deleting a project removes it from your account. To delete your account and all associated data, email [email protected] from the address you signed up with and we will do so within 30 days, except for records we must keep for legal, tax or fraud-prevention reasons (such as payment records). We may delete source videos and rendered files sooner to manage storage.

7. Security

Connections to the Service use HTTPS, platform tokens are encrypted at rest, and media is only served to the account that owns it. No system is perfectly secure, so please tell us at [email protected] if you find a problem.

8. Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal data, or to object to how we use it. Email [email protected] and we will respond within 30 days.

9. International transfers

We operate from Singapore and our providers may process data in other countries, including the United States. By using the Service you understand that your data may be transferred to and processed in these countries.

10. Children

The Service is not intended for anyone under 13 (or the minimum age in your country), and we do not knowingly collect their data.

11. Changes

We may update this policy. If the changes are significant, we will let you know by email or in the app. The date at the top shows when it last changed.

12. Contact

Questions or requests about your data: [email protected].