Privacy policy

ClipnClip is operated by [Company name] ("we", "us"). For the personal data of visitors, account holders and guests described in this policy, we are the controller.

When a workspace records and shares videos of its own people and customers, the workspace's organisation is the controller of that content and we act as its processor under our Data Processing Agreement.

Contact for anything in this policy: privacy@[domain].

Each workspace chooses where its videos live. What we hold depends on that choice:

Across all web modes we also process: your name, email and password hash; workspace memberships and roles; billing details handled by Stripe (we see the card brand and last four digits only); security logs (sign-in times, IP address for rate limiting); and support messages you send us.

Guests who watch a shared link need no account. If a guest comments, we store the name they enter. Named view records are kept only when the guest says yes to the workspace's viewer-insights prompt; otherwise the view is counted anonymously.

• Contract (Art. 6(1)(b) GDPR): running your account and workspace, recording, uploading, processing, sharing and billing.
• Legitimate interests (Art. 6(1)(f)): securing the service, preventing abuse, and aggregated product statistics that contain no video content.
• Consent (Art. 6(1)(a)): first-party website analytics and attribution (see the cookie policy), and named viewer insights for guests. You can withdraw consent at any time.
• Legal obligation (Art. 6(1)(c)): keeping invoices and tax records.

We do not sell personal data, do not show ads and do not use your videos, transcripts or comments to train AI models. AI features only run when the workspace has them switched on.

• Videos: until you delete them, or automatically when the workspace sets a retention period (90, 180 or 365 days; default never). Owners get an email 7 days before videos are removed.
• Deleted accounts: personal data is purged from the database within 30 days; backups roll off on their normal cycle. Comments remain as "Deleted user".
• Deleted workspaces: kept for a 30-day grace period so support can restore them, then deleted. Objects in your own bucket are deleted only if you tick "Also delete videos in my bucket".
• Product events: 13 months, then aggregated so they no longer identify anyone. Guest view records lose names after 13 months.
• Data exports: the download link works for 7 days.
• Invoices and payment records: as long as tax law requires (placeholder: 10 years).

You have the right to access, correct, export and delete your data, to object to or restrict processing, and to withdraw consent. Most of this is self-serve in Settings → Data & GDPR:

• Export all data (.zip): your account, comments, reactions, views and invoices; workspace admins can export the whole workspace.
• Delete account: confirm with your password. Workspaces you own must be transferred or deleted first.
• Activity: workspace admins see the audit log of exports, deletions, role and link changes.
• Cookie choices: the Cookie settings link in the site footer.

For anything else, or if you are a guest without an account, write to privacy@[domain]. We answer within one month. You may also complain to your local data protection authority.

Our hosting is in the EU (provider to be confirmed). Some sub-processors, such as Stripe, may process data outside the EEA. Where they do, we rely on an adequacy decision or the European Commission's Standard Contractual Clauses. The current list is on the sub-processors page.

In own-bucket mode, your videos stay in the region of the bucket you chose; that provider is your sub-processor, not ours.

Data is encrypted in transit and at rest, bucket keys are encrypted with a per-workspace key, and videos are served through short-lived signed URLs. Details are on the security page.

We will post any change on this page with a new date and version. If a change affects how we use your data in a significant way, we will tell account holders by email before it takes effect.