Privacy Policy
Last updated 16 August 2026
What we collect, why, how long we keep it, and who else touches it. Clipsteady is operated from the United Kingdom and this policy is written to UK GDPR.
What we collect
- Account data — email address, hashed password, plan and credit balance.
- Billing data — handled by Stripe. We store a customer reference and subscription status. We never see or store your card number.
- Content you submit — uploaded video, or the URL of a video you ask us to fetch, plus everything derived from it: transcripts, clip boundaries, scores and the clips themselves.
- Usage data — job history, API key usage timestamps, and server logs including IP address, for security and debugging.
Why we can use it
Performance of our contract with you (running jobs, billing), our legitimate interests (security, fraud prevention, improving the service), and legal obligation (tax records). Where we rely on consent — for marketing email — you can withdraw it at any time.
How long we keep it
- Source video is deleted as soon as processing finishes. We do not keep the long video you gave us.
- Clips and their metadata are kept until you delete them, or for 90 days after account closure.
- Transcripts are kept alongside the job so clips can be re-styled without re-processing; deleting the job deletes them.
- Billing records are kept for six years as UK tax law requires.
- Server logs are kept for 30 days.
Who else processes it
We use a small number of sub-processors, and your content passes through some of them:
- Google (Gemini) — transcript text is sent for moment selection. Text only; we do not send your video.
- Stripe — payments.
- Cloudflare R2 — clip storage.
- Our hosting and render infrastructure — where video is transcoded.
- A residential proxy provider — used only to fetch videos you ask us to fetch by URL. Your account details are never sent to them.
Some of these operate outside the UK. Transfers rely on adequacy decisions or standard contractual clauses.
What we do not do
We do not sell your data. We do not use your video or transcripts to train our own models, and we do not licence them to anyone else for training.
Your rights
You can request access to your data, correction, deletion, restriction, portability, or object to processing based on legitimate interests. Email privacy@clipsteady.com and we will respond within one month. You can also complain to the Information Commissioner's Office (ico.org.uk).
Cookies
We set a session cookie to keep you logged in and a CSRF token cookie to protect forms. Both are strictly necessary. If we later add analytics, we will ask first.
Security
Passwords are hashed. API keys are stored hashed and shown to you exactly once, at creation. Traffic is encrypted in transit. Access to production data is limited to those who need it.