Privacy Policy

1. Who's behind this policy

ClipCut is a brand and product operated by PostReach AI Limited ("PostReach", "we", "us"), a company registered in Hong Kong. We operate clipcut.pro and app.clipcut.pro under the ClipCut brand. PostReach AI Limited is the data controller for the personal data described in this policy. The legal entity responsible for it.

For data privacy questions, contact us at support@clipcut.prowith subject line "Privacy".

2. The short version

If any of this concerns you, read the full policy below or email us. We'll explain.

3. What we collect

We collect the following categories of personal data:

3.1 Information you give us directly

• Account information: name, email address, profile picture (if you set one), preferred language.
• Authentication data: password (stored hashed, not in plain text); or, if you sign in with Google or another OAuth provider, the basic profile fields they share with us (typically email, name, avatar URL).
• Payment information: when you subscribe, our PCI-compliant payment processor collects your card details directly. We never see, store, or process your full card number. We receive only a token and limited metadata (last 4 digits, card brand, expiry, billing country) for our records.
• Communication content: if you email us at support@clipcut.pro or message us on Discord, we keep a record of those messages so we can help you.
• Linked social accounts: when you connect TikTok, Instagram, YouTube, X, or Discord during the trial bonus flow, we receive limited profile metadata (username, follower count if public, account ID), never your password.

3.2 Information about how you use ClipCut

• Source videos and clips you create: uploaded video files, YouTube or other URLs you submit, and the clips, captions, and descriptions our AI generates from them. This is your content. We treat it confidentially.
• Project metadata: project titles, clip durations, virality scores, view-status flags.
• Usage events: which features you used, how often, when, captured by our product-analytics provider. This is event data, not video content.
• Device and connection information: IP address, browser type and version, operating system, device type, time zone, language, referrer URL.
• Performance and error logs: to diagnose bugs, track failed jobs, and improve reliability.

3.3 Information from third parties

• Payment status: our payment processor tells us whether your payment succeeded, failed, was refunded, or chargedback.
• Email engagement: our transactional-email provider tells us whether you opened, clicked, or bounced our emails so we can stop sending if you're not engaging.

We don't buy data from data brokers, scrape it from your social profiles, or collect it from sources you wouldn't expect.

4. Why we use your data and the legal basis for it

We use your data only for the purposes below, and we rely on the following legal bases (this matters under GDPR, UK GDPR, and Hong Kong PDPO):

5. Who we share data with

We share data only with the categories of recipients listed below. We never sell your data to advertisers or data brokers.

5.1 Categories of service providers (data processors acting on our instructions)

We work with reputable enterprise vendors in each of the categories below. We'll provide the specific provider name on request to anyone with a legitimate interest (for example, in response to a privacy request from an account holder, or under a B2B due-diligence review).

We have data-processing agreements with each of these providers requiring them to:

• Use your data only to perform the services we hire them for;
• Apply security measures appropriate to the data;
• Never use your data for their own marketing or training purposes;
• Notify us of security incidents.

5.2 Other recipients

• Legal authorities: if we're legally required to disclose data (e.g. court order, criminal investigation), we will. We push back on overbroad requests where appropriate.
• Acquirers: if ClipCut is acquired or merges, your data may be transferred to the acquirer, who will be bound by this policy or one giving you equivalent protection. We'll notify you if this happens.
• You: we share your own data back with you when you request it (Section 9).

5.3 What we never do

• We don't sell your personal data.
• We don't share your videos or clips with other ClipCut users.
• We don't post your content publicly.
• We don't use your videos to train AI models.
• We don't share your email address with marketing partners.

6. Cookies and similar tech

We use a minimal set of cookies and similar storage:

• Essential cookies: required to log you in, keep your session active, and remember preferences (e.g. dark mode). These can't be disabled because the Service won't work without them.
• Analytics cookies: our product-analytics provider helps us understand which features are used, where users get stuck, and what to fix next. We've configured analytics to anonymise IPs and avoid storing direct identifiers in events where possible.
• Local storage: we use browser local storage to cache UI state (e.g. your last-used caption style, sidebar collapsed state) so the app feels fast.

7. Where your data is stored and how it's protected

Your data is stored on enterprise cloud infrastructure operated by major hosting and database providers, with primary data centres in the United States and European Union. Some processing, such as GPU-based AI inference, happens on infrastructure in the US or EU depending on availability and load.

International transfers. When we transfer data outside your country (e.g. from the EU to the US), we rely on appropriate safeguards, including Standard Contractual Clauses (SCCs) approved by the European Commission, where applicable.

Security measures. We protect your data with:

• TLS encryption in transit (HTTPS for all traffic);
• Encryption at rest for stored video files and database records;
• Access controls (only the engineers who need access have it);
• Hashed passwords (we couldn't read them even if we wanted to);
• Audit logs of administrative access;
• Regular dependency updates and security reviews;
• Bug-bounty-friendly responsible-disclosure process. If you find a security issue, email security@clipcut.pro.

No system is 100% secure. We can't guarantee absolute security, but we work hard to make a breach unlikely and to limit the damage if one happens.

8. How long we keep your data

We retain personal data only as long as we need to for the purpose we collected it.

When data reaches the end of its retention period, we delete it. Backups containing the data are deleted in the next backup cycle (typically within 30 days).

9. Your rights and how to exercise them

You have rights over your personal data. Depending on where you live, these include:

• Right to access the personal data we hold about you and receive a copy
• Right to correct inaccurate or incomplete data
• Right to delete your data (also called "right to erasure" or "right to be forgotten")
• Right to restrict how we process your data while we work out a dispute
• Right to data portability. Receive your data in a machine-readable format and transfer it to another service
• Right to object to processing based on legitimate interest, including direct marketing
• Right to withdraw consent for anything we do based on consent (e.g. marketing emails)
• Right not to be subject to fully automated decisions that significantly affect you (we don't make any such decisions, but you have this right)
• Right to lodge a complaint with your local data protection authority

9.1 The deletion zone in your account

We've built a dedicated account-deletion zone in your account settings (Account → Privacy → Delete account) where you can:

• Export all your data (account profile, project metadata, generated clips) before deletion;
• Delete your account and trigger removal of:
  • Your profile and authentication record
  • All source videos and generated clips
  • Your project metadata
  • Your linked social account tokens
  • Your stored payment method (your transaction history is retained for 7 years for tax compliance)
  • Your support conversation history (anonymised in our help system)

Deletion is permanent and can't be undone. We'll send you a confirmation email when it's complete.

If you'd prefer to email us instead of using the in-app tool, write to support@clipcut.prowith subject "Delete my account" from the email address on your account, and we'll process it within 30 days.

9.2 Other requests

For access, correction, portability, or any other rights request, email support@clipcut.prowith subject "Privacy request: [type]". We'll verify it's you, then respond within 30 days. If we need more time for a complex request, we'll tell you and explain why (max 60 additional days).

We won't charge for these requests except in the rare case of clearly excessive or repeated requests, where the law allows a reasonable fee.

9.3 If you live in the EU, UK, EEA, or Switzerland

You can lodge a complaint with your local Data Protection Authority. We'd appreciate the chance to address your concern first by emailing us, but it's your right to go straight to a regulator.

9.4 If you live in California (CCPA/CPRA)

You have the rights described above, plus the right to opt out of the "sale" or "sharing" of personal information. We do not sell or share personal informationas defined under CCPA/CPRA. We don't engage in cross-context behavioural advertising. There's nothing for you to opt out of.

To exercise your CCPA rights, email support@clipcut.pro with subject "California privacy request". An authorised agent may submit a request on your behalf, and we'll require proof of authorisation.

We won't discriminate against you for exercising your rights. You'll get the same Service at the same price.

9.5 If you live in Hong Kong (PDPO)

You have rights under the Personal Data (Privacy) Ordinance to access, correct, and (where applicable) request deletion of your personal data. The processes above apply equally.

10. Children

ClipCut is not intended for children under 16. We don't knowingly collect data from anyone under 16. If you believe a child under 16 has created an account, please email support@clipcut.proand we'll delete the account and associated data promptly.

11. AI-specific privacy notes

Because ClipCut uses AI heavily, here are specific things you should know:

• Your videos are processed by AI models we operate or contract with. These models extract transcripts, identify viral moments, generate captions, score virality, and reframe video. The output is stored in your account; the input goes to our processing infrastructure.
• AI providers we use are contractually prohibited from using your content for model training. This includes both our internal models and any third-party model APIs we may call.
• AI outputs are sometimes wrong. Captions can mistranscribe, scores can be miscalibrated, hook titles can be off-tone. You should always review before publishing.
• We retain processing artifacts (transcripts, embeddings, intermediate analysis files) only as long as needed to deliver the Service. They're deleted alongside your source video at the end of the storage window.

12. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, our service, or the law. When we make material changes, we'll notify you by email or in-app at least 14 days before they take effect, except where the change is required to be effective sooner by law. The "Last updated" date at the top will always show when the current version was published.

If you don't agree to the changes, you can close your account before they take effect.

13. Contact

For privacy questions, requests, or concerns, contact us at:

We aim to reply to all privacy enquiries within 5 business days, and to resolve formal rights requests within 30 days as required by law.

See also: Terms of Service.