Privacy Policy

1. Who we are

GetClipFox is operated by [Legal entity name], [Registered postal address] ("we", "us"). We are the controller of the personal data described here. For anything about your data, email [email protected].

2. What we collect

• Account data: your email address, a hashed password (if you use one), your name and profile details, and your account settings such as time zone.
• Google Sign-In data: if you sign in with Google, see section 6.
• Your content: scripts, prompts, reference images, uploaded media, brand kit files, and the scenes, images, voice-overs and videos generated for you.
• Billing data: Paddle collects your payment details in its own checkout. We receive your plan, subscription status, invoices, country and the email used to pay. We never see your full card number.
• Support messages: what you send us through the contact form or by email.
• Usage and device data: IP address, browser and device type, sign-in times, which days you were active and which features you used, and error reports.
• Cookies and browser storage: see our Cookie Policy.

3. How we use it, and our legal bases (GDPR)

If you are in the European Economic Area, the UK or Switzerland, we rely on these legal bases:

We don't send marketing emails, sell your data, or use it for advertising.

4. Your scripts and prompts go to AI providers

To generate a video, we send what you submit to AI providers. Your scripts, prompts, reference images and edit instructions go to OpenRouter, which routes them to model providers such as Google (Gemini) and OpenAI. The text of your voice-overs goes to VBEE for text-to-speech. They process it to return the result to us.

We don't use your content to train our own models. Please don't put sensitive personal data (health, financial or government ID details, or other people's private information) in your scripts or prompts.

5. Who we share data with (sub-processors)

We share personal data only with the service providers below, only for the purpose shown, and under contracts that require them to protect it. We may also disclose data when the law requires it, to protect people's rights and safety, or as part of a merger or sale of the business (we'd tell you first).

6. Google Sign-In

If you choose "Sign in with Google", Google shares your Google account ID, email address and whether Google has verified that email. We use them only to create your account or sign you in, and to link Google to an existing account with the same verified email. We don't receive your Google password, and we don't access your contacts, Drive, Gmail or anything else in your Google account.

Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. You can remove GetClipFox's access at any time from your Google account's security settings.

7. International transfers

Our providers may process data in the United States and other countries outside your own. When data leaves the EEA, the UK or Switzerland, we rely on an adequacy decision (such as the EU-U.S. Data Privacy Framework, where the recipient is certified) or on the European Commission's Standard Contractual Clauses (with the UK addendum where needed).

8. How long we keep data

• Account data and your content: while your account is open. Rendered videos and generated files may be removed earlier under your plan's storage rules.
• After you ask us to delete your account: we delete or anonymise your data within 30 days. Copies in backups are overwritten in the normal backup cycle.
• Billing records: invoices and payment records are kept for 7 years, as tax law requires. Paddle keeps its own records as Merchant of Record.
• Support messages: for as long as needed to resolve your request and any follow-up.
• Logs, error reports and performance data: for a limited period, set by the retention of the monitoring provider.

9. Deleting your account

There is no self-serve delete button yet. To delete your account and its data, email [email protected] from your account's email address. We'll confirm the request and complete the deletion within 30 days. Cancel any paid plan first so it doesn't renew. Unused credits are lost when the account is deleted.

10. Your rights

Depending on where you live, you can ask us to:

• give you a copy of your personal data (access and portability);
• correct data that is wrong;
• delete your data;
• restrict or object to how we use it, including processing based on legitimate interests;
• withdraw consent you gave. For analytics, use Cookie settings.

Email [email protected]. We reply within 30 days and may ask you to confirm it's your account. In the EEA or UK you can also complain to your local data protection authority.

11. California residents (CCPA/CPRA)

In the last 12 months we collected these categories of personal information: identifiers (email, account ID, IP address), commercial information (plans and purchases), internet activity (usage and device data), and user content (scripts, media and videos). They come from you, your device, Paddle and Google Sign-In, and we use them for the purposes in section 3.

We do not sell your personal information and do not share it for cross-context behavioural advertising. We don't use sensitive personal information to infer characteristics about you.

You have the right to know what we collect, and to ask us to delete or correct it. You can use an authorised agent. We won't treat you differently for using these rights. To make a request, email [email protected]; we'll verify it by confirming control of your account's email address.

12. Security

We encrypt data in transit, limit who can access production systems, and keep sign-in tokens out of our logs and error reports. No system is perfectly secure, so we can't guarantee absolute security.

13. Children

The Service is not for children under 13, and we don't knowingly collect their data. If you think a child has given us personal data, email us and we'll delete it.

14. Changes to this policy

We'll update the "Last updated" date when this policy changes, and email you before a material change takes effect.