1. About this policy
This policy explains how Clipto handles personal information across its marketing website, dashboard and related services, including Studio, Creator Launchpad and connected-channel features. Contact support@clipto.online with privacy questions or requests. This policy describes our practices; reading it does not replace consent where consent is legally required.
2. Information we handle
The information involved depends on the features you use. Do not submit sensitive personal information that is unnecessary for your task, or other people’s information without permission.
- Account and identity: name, email, profile image, linked sign-in identities and password hash when you use password sign-in.
- Connected channels: provider identifiers, channel names, permissions, authorization tokens and destination settings. Legacy session connections may also involve saved session credentials.
- Content and creation: source URLs, uploaded or retrieved videos, audio, transcripts, captions, scripts, prompts, generated images, thumbnail references, voice recordings, translations, editing recipes and render results.
- Automation and performance: source selections, templates, schedules, approvals, jobs, publication identifiers, status information and channel metrics used by the features you enable.
- Comments and assistant: comments retrieved for your connected channel, drafts, replies you authorize, assistant conversations and optional recorded voice questions.
- Billing: checkout references, purchase amounts, payment status, token balances and ledger entries, subscription records, wallet addresses and blockchain transactions.
- Operations and support: security and error logs, IP addresses and request timestamps, browser information where available, and messages you send to support.
3. Why we use information
We use this information to authenticate users, operate creation and publishing tools, process purchases, maintain balances, provide support, prevent abuse and comply with applicable obligations. Your settings determine which sources and destinations an automation uses and whether publication requires review.
Features such as best-time recommendations, trends and learning from results use the data needed for the requested analysis. AI-generated replies or publishing suggestions do not authorize a post unless you select a posting action or enable an automation that permits it.
4. AI processing and media
Requested AI features may send relevant prompts, transcript excerpts, scripts, images, audio or other task inputs to the configured AI provider. Providers can differ by feature and a fallback provider may receive the request if the first provider fails. Some transcription and media processing run on Clipto-operated workers instead of an external AI API.
Voice input uses your microphone only after you grant browser permission and choose to record. Image and voice references can contain personal information; upload them only when you have the necessary rights. Provider retention and processing terms differ. Contact support for information about the providers used for a particular request.
Do not assume that all processing is local, that every provider has identical retention rules, or that AI-generated content is anonymous.
5. Google sign-in and YouTube
Google sign-in uses Google/Firebase identity information to create or link your Clipto account. Connecting a YouTube channel is a separate authorization for YouTube API Services and does not grant access to unrelated Google products.
Depending on the permissions you grant and features you use, Clipto accesses channel and video identifiers, titles, descriptions, thumbnails, publication status, comments and available channel statistics; stores authorization tokens and linked-channel details; uploads videos or thumbnails; and updates metadata or comments when you instruct it. Data is used to provide the connected-channel features described in this policy and shared with service providers as needed to deliver them.
You can disconnect in Channels, remove all YouTube Direct connections and their stored API records from Settings, or revoke Google authorization using the link below. Revocation stops new authorized access but does not remove videos or comments already posted to YouTube. You can request deletion of stored YouTube data at support@clipto.online, including without deleting your whole Clipto account.
7. Cookies and browser storage
Authentication, security and preferences use cookies or similar browser storage. Google sign-in, embedded source-video players and hosted checkout can involve third-party technology governed by the provider’s own policies. Our Cookie Notice explains these categories and your choices.
8. Security
We use measures such as encrypted connections, password hashing, access controls and encryption for supported credential stores. Authorized staff and workers may access information needed to operate or support the service. Security measures vary by data type and integration; no system or transmission is completely secure. Protect your account, limit connected permissions and report suspected unauthorized access promptly.
9. Retention and deletion
Account data, saved work and configuration remain available while needed to provide the service. Processing also creates temporary source downloads, previews, render artifacts, transcripts, logs and caches. Deleting a clip or account and removing local processing files or remote copies are separate operations; backups and provider-held records may remain for their applicable retention periods.
You can delete supported items, disconnect channels, download an account-record export and submit a privacy request in Settings. Request responses appear there, and support@clipto.online remains available. Account deletion requires confirmation and verification of your password or recent Google sign-in. Cancel recurring subscriptions and finish active work first. Database removal queues retryable storage, provider-access and worker-local cleanup; an offline worker completes local cleanup when it can reconnect. Some records may need to be retained for payment reconciliation, security or legal obligations. Contact support to confirm the scope and completion of a deletion request. We do not promise a universal deletion deadline that every storage layer or provider can meet.
Temporary assistant speech objects are scheduled for cleanup after 7 days, source checkpoint objects after 3 days, and persistent transcript caches after 90 days without use. Cleanup runs in batches and retries outages. Saved clips and Studio results are handled separately from these temporary caches. Completed privacy-request and cloud-cleanup records are scheduled for removal after 30 days. Minimal payment reconciliation records have a separately reviewed retention purpose and end date.
Deleting an account or disconnecting a channel does not delete content already published on an external platform. Remove that content using the platform’s own controls.
10. Your privacy choices and rights
Depending on applicable law, you may request access, correction, deletion or a portable copy of your personal information; object to or restrict certain uses; or withdraw consent where processing relies on it. You may also have rights to opt out of sale, sharing or targeted advertising, and to appeal a request decision. We do not operate those advertising or sale activities as described above.
Send requests to support@clipto.online. Tell us which account and data your request concerns, without including passwords or payment secrets. We may need to verify your identity and will respond within the time required by applicable law. You may complain to your relevant privacy regulator. For optional browser permissions such as microphone access, you can revoke permission in your browser settings.
11. Legal bases and international processing
Where applicable law requires a legal basis, we rely on performing our agreement for requested services, legitimate interests such as security and service administration, applicable legal obligations, or consent where required. The basis depends on the purpose and data involved.
Clipto’s hosting, storage, workers and external providers can process data in different countries. The location can depend on the infrastructure region and provider chosen for a feature. Applicable transfer safeguards and contractual requirements need to be considered for the relevant route; contact support for information about your processing needs. We do not represent that every provider is located in one country.
12. Children and policy updates
Clipto is not intended for children under 16. Contact support if you believe a child has provided personal information so we can investigate and handle it appropriately. Local eligibility and consent requirements may differ.
We update this policy when practices change. We will give notice of material changes and obtain any new consent required for new processing purposes. The date above identifies this version.
For operator information or privacy requests, contact support@clipto.online.