Privacy Policy

Last updated October 4, 2026

This policy explains what personal data Clipnova collects, why, and the choices you have.

What we collect

  • Account data: name, email, password hash or OAuth identifier, workspace settings.
  • Your Content: videos, transcripts, captions, clips and text you create in the Service.
  • Billing data: plan, invoices and payment status. Card details are processed by our Merchant of Record and never stored by us.
  • Usage data: pages visited, features used, device and browser information, error logs.

How we use it

To provide and improve the Service, process your videos, send transactional emails, prevent abuse, and comply with law. We do not sell personal data and do not use Your Content to train AI models.

Processors

We use trusted sub-processors to run the Service: cloud hosting and storage, speech-to-text and language model APIs (which process content only to return results to us), email delivery, error monitoring, product analytics and our payment Merchant of Record. A current list is available on request.

Retention

Uploaded source videos and exports are kept for the retention period of your plan (3–60 days) and then deleted automatically. Transcripts and project metadata are kept until you delete the project or your account.

Your rights

You can access, export, correct or delete your data from your account settings or by emailing [email protected]. If you are in the EEA, UK or California you have additional rights under GDPR / UK GDPR / CCPA, including the right to complain to your data protection authority.

Cookies

We use essential cookies for sign-in and security, and privacy-friendly analytics. You can opt out of analytics in your settings.

Google Sign-In & Google API Services User Data Policy (Data Access, Use & Sharing Disclosures)

1. Google User Data We Access: When you sign in with Google, we receive your basic Google profile information (name, email address, and profile picture URL via openid, email, and profile scopes) solely to authenticate your account and display your profile within Clipnova. If you optionally connect your YouTube account in Clipnova, we request the narrow https://www.googleapis.com/auth/youtube.upload scope solely so you can upload and publish video clips you create in Clipnova directly to your YouTube channel.

2. With Whom We Share, Transfer, or Disclose Google User Data: Clipnova does not sell, rent, license, trade, or share your Google user data (including your Google profile data, OAuth access/refresh tokens, or YouTube account data) with any third-party marketers, advertisers, data brokers, or external AI/LLM training providers. We only transfer or disclose Google user data in the following strictly limited circumstances:

  • Direct Transmission to Google / YouTube APIs: Your authorized YouTube OAuth token and the video file, title, description, tags, and privacy setting you select are transmitted directly from Clipnova's servers to Google LLC's official YouTube Data API v3 (https://www.googleapis.com/upload/youtube/v3/videos) solely when you click “Publish” to upload a video to your own YouTube channel.
  • Essential Cloud Infrastructure Sub-Processors: Encrypted OAuth tokens and basic account records are stored in our managed cloud database and application hosting infrastructure (Railway Corp. and Cloudflare R2 object storage) strictly as necessary to host and operate the Clipnova service on your behalf, under strict confidentiality and security obligations.
  • Legal Compliance: If strictly required by applicable law, subpoena, or binding court order.

3. Limited Use & AI Prohibition: Clipnova never uses Google user data to train, fine-tune, or improve any artificial intelligence or machine learning models. Clipnova's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

4. Revoking Access & Deleting Google User Data: You can disconnect your YouTube account and delete stored Google OAuth tokens at any time from your Social Accounts page (/social) or Settings page (/settings), by revoking access at myaccount.google.com/permissions, or by emailing [email protected].

Security

Data is encrypted in transit and at rest. Access to production systems is restricted and logged.