Privacy Policy

Effective date: 23 October 2026 Last updated: 23 October 2026 1. Clipzu and this notice Clipzu is a browser-based video editing service operated by an individual under the Clipzu brand. Clipzu is not a separately incorporated company. In this notice, “we” and “us” refer to the service operator. For privacy questions or requests, email support@clipzu.com. You do not need to sign in to send an email. This notice covers accounts, the editor, uploaded media, saved projects, transcription, Auto Clipper, exports, checkout and support. Media can contain information about other people. Only submit material you have authority to use and process. 2. Information we handle - Account information: email, display name, account ID, profile image where supplied, verification and authentication records. Password-based authentication stores a password hash. If you choose Google sign-in, we receive identity information such as your Google account identifier, verified email, name and profile image where provided. - Projects and media: video, audio and images; filenames, types, sizes and technical metadata; project structure, edits, text, captions and settings. - Processing information: transcripts and timings, job identifiers/status, results, exports and diagnostics used to deliver or troubleshoot a requested job. - Billing information: plan/subscription status, provider/customer identifiers, transaction references, amount, currency, status and transaction metadata. Details entered in a provider's checkout are also handled by that provider under its own privacy information. - Support and communications: ticket subjects, categories, messages, replies and email delivery records. - Activity and security information: account/resource IDs, timestamps, successful project saves, uploads and processing events, usage/quota information and error categories. Network information such as IP addresses may be used for security and rate limiting. - Browser storage, described below. Some information is necessary for a requested feature: an account identifier associates a project with its owner, and media input is needed for transcription or export. Without necessary information, the relevant feature may be unavailable. Do not send passwords, full card numbers or security codes to support. 3. Purposes and communications We process information to authenticate accounts, save projects/media, perform the features you request, administer plans and transactions, deliver account messages, answer requests, diagnose failures, measure service activity and quotas, protect against misuse, and meet applicable legal obligations or handle claims. The legal authority depends on the processing and applicable law. Requested services can involve contractual necessity; legal record keeping can involve a legal obligation; security can involve legitimate interests where that basis is available; and processing requiring consent must use the consent required by law. Using Clipzu is not blanket consent to unrelated processing. Ask support@clipzu.com about a particular use or its basis. Verification, password-reset and other account messages are distinct from optional broadcasts. Where an optional broadcast is sent, use its unsubscribe option or contact support. Unsubscribing does not stop messages necessary to administer or secure your account. 4. Media, transcription and external AI Editing uses both your browser and server-side services. Uploads, saved projects, transcription and exports should not be assumed to stay only on your device. Transcription processes audio from supplied media and produces text and timing information. External AI-provider integration is limited to Auto Clipper. Its workflow uses transcript text or excerpts, timing/structure and task instructions to generate clip suggestions. This is separate from transcription. Review automated results before relying on or sharing them. As of this notice's date, production Auto Clipper external-AI routing is not enabled and has no configured active route. Before enabling that processing, we will update the relevant provider disclosures, including the provider, data sent, and its retention or model-use terms. This notice does not promise that an unidentified AI provider never retains inputs or uses them for training. Do not submit confidential information to an AI feature without understanding its disclosed handling. 5. Recipients and locations The operator and providers supporting infrastructure, cloud/object storage, media processing, authentication, email, payments and support can handle information relevant to their functions. For example, an email delivery service receives recipient/message information; an authentication provider handles the sign-in you choose. Google sign-in is available and email delivery uses an SMTP service. Payment handling depends on the checkout offered for the transaction. A payment processor is not automatically the seller or merchant of record. The current configured payment route is Paddle in Sandbox mode; this is not evidence of a live paid transaction or seller agreement. Review the actual checkout and provider information before entering payment details. Information may also be disclosed when necessary for a lawful request, a security threat or misuse investigation, or a legal claim, subject to applicable law. Server/provider processing may occur outside your country. No single storage country or transfer mechanism is represented by this notice. Contact support before submitting information if you need provider-specific location or transfer information. Applicable transfer requirements must be addressed for the actual processing arrangement. 6. Cookies and browser storage The web application uses an account-session cookie for authentication. The current session implementation uses an HttpOnly cookie, with Secure in production and SameSite=Lax. Signing out asks the service to revoke the session. Closing a browser, clearing cookies and signing out can have different effects. Older cached builds may use a legacy sessionStorage credential during migration. The application also uses sessionStorage for the active project identifier, IndexedDB for a media cache, and localStorage for workspace preferences and custom presets. Cached media can contain your content. Preferences and cached files can remain until the application removes/replaces them or you clear site data. Local cache is not a guaranteed independent project backup. Browser controls can inspect, block or clear site data. Blocking session mechanisms can prevent sign-in; clearing local storage can remove cached files/preferences. Clearing browser data does not delete the server account or server-stored files. Server-side activity records are separate from browser cookies. This notice does not assert that every component of the deployment is free of other tracking technologies; ask support about a specific request or storage item. 7. Retention, backups and deletion Retention differs by purpose: account/project/media records support saved work; processing records support jobs and troubleshooting; transaction/support records support the relevant payment or request; security/audit records support protection and accountability. This notice does not state a universal deletion deadline or guaranteed recovery window. Export files are not permanent storage. The worker can prune older completed outputs according to a configured retention count. That does not establish a fixed lifetime for every export, and this notice does not promise that exactly the newest ten outputs are kept. Download outputs you need to retain. You can request account deletion in Settings using Request deletion. A request is not confirmation that every copy has been erased. Processing can wait for running work, billing checks or file cleanup. In the current implementation, payment-provider customer/subscription relationships or recorded payment history can keep deletion pending even when a local subscription is marked cancelled. Contact support@clipzu.com for review of a pending request or if you cannot sign in. Account deletion and subscription cancellation are separate: a deletion request does not itself cancel renewal. Review Billing and keep cancellation confirmation, or contact support. Export information you want to keep before deletion when the service permits. Storage cleanup can fail and need retry. Primary account cleanup does not prove immediate erasure from backups, independent provider records or legally retained records. Backup software supports tiered retention, but this notice does not promise a maximum for every backup copy; safety rules can keep some copies beyond a nominal window. Ask support about retained copies or a particular retention/deletion request. Audit records of an action may remain after account removal, with account references removed where implemented. 8. Choices and privacy rights You can update available profile information using account controls and manage projects in the editor. To request access, correction, a copy, deletion, restriction, objection or withdrawal of consent where applicable, email support@clipzu.com with “Privacy request” in the subject. Give the relevant account email and describe your request. We may need information reasonably necessary to locate the records and verify authority to act. Rights and exceptions depend on applicable law. Withdrawing consent does not invalidate earlier lawful processing or automatically terminate an unrelated subscription. If an account control does not resolve a request, email support. You may seek assistance or complain to the relevant privacy authority where applicable law provides that option. No non-waivable privacy or consumer right is removed by this notice. 9. Children and other people's information Use must satisfy applicable legal-capacity and permission requirements. Do not submit another person's information without the authority required for your use. A parent or guardian concerned about a child's account or submitted information can email support for review. This notice does not claim a specific age-verification or parental-consent system is implemented. 10. Security and changes The application includes authentication, password hashing, owner-scoped access checks and session controls. These do not guarantee that transmission, storage or recovery is always secure or error-free. Report suspected unauthorized access or privacy concerns to support@clipzu.com without including secrets. We will update this notice when the described handling materially changes and identify the revision date. Additional notice or consent will be used where applicable law requires it. Terms of Use: https://clipzu.com/terms-and-conditions. Refund Policy: https://clipzu.com/refund-policy.