Privacy Policy — ClipForge

ClipForge ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI Short-Form Video Generator service ("Service").

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

Name and email address
Password (stored in hashed form)
Profile information you choose to provide
Authentication data if you sign in via Google OAuth

1.2 Payment Information

When you make purchases or subscribe, we collect:

Billing address
Payment method details (processed and stored securely by Stripe; we do not store your full card number)
Transaction history and subscription status

1.3 Usage Data

We automatically collect information about how you interact with the Service:

Video generation inputs (niche selection, topics, customization preferences)
Generated video metadata (duration, format, timestamps)
Feature usage patterns and frequency
Credit consumption and subscription activity
Device information (browser type, operating system, screen resolution)
IP address and approximate geographic location
Pages visited, time spent, and navigation paths

1.4 Generated Content

We temporarily store the content generated through our Service, including video files, scripts, and voiceover audio, for the purposes of delivery and the storage period associated with your plan.

2. How We Use Your Information

2.1 Service Delivery

To create and maintain your account
To process your video generation requests
To manage your subscription and process payments
To store and deliver your generated videos
To provide customer support

2.2 Service Improvement

To analyze usage patterns and optimize the Service
To improve AI model quality and video generation accuracy
To develop new features and functionality
To monitor and prevent technical issues

2.3 Communication

To send account-related notifications (billing, security, feature updates)
To respond to your inquiries and support requests
To send marketing communications (with your consent, which you may withdraw at any time)

3. Third-Party Services

We integrate with the following third-party services to deliver our Service. Each third-party service has its own privacy policy governing the use of your information:

3.1 Stripe

We use Stripe for payment processing. Stripe collects and processes payment information in accordance with their Privacy Policy. We do not store your full credit card number on our servers.

3.2 Anthropic (Claude AI)

We use Anthropic's Claude AI for script generation and content analysis. Your niche selection and topic preferences may be sent to Anthropic's API for processing. Please review Anthropic's Privacy Policy.

3.3 OpenAI

We use OpenAI's text-to-speech services for voiceover generation. Script content is sent to OpenAI's API for audio synthesis. Please review OpenAI's Privacy Policy.

3.4 ElevenLabs

We use ElevenLabs for additional voice generation capabilities. Script content may be processed through ElevenLabs' API. Please review ElevenLabs' Privacy Policy.

3.5 Pexels

We source stock footage from Pexels for video assembly. Search queries based on your video content are sent to Pexels' API. Please review Pexels' Privacy Policy.

3.6 Google

We use Google services for OAuth authentication and YouTube integration (for Business plan users). Please review Google's Privacy Policy.

4. Cookies and Tracking

We use cookies and similar tracking technologies to operate and improve the Service. For detailed information about the cookies we use, please see our Cookie Policy.

You can control cookie preferences through the cookie consent banner displayed when you first visit our website, or by adjusting your browser settings.

5. Data Retention

Account data: Retained for as long as your account is active, plus 30 days after deletion to allow for account recovery
Generated videos: Stored according to your plan (30 days for Starter, 1 year for Business). Videos are permanently deleted after the retention period
Payment records: Retained for 7 years to comply with financial record-keeping requirements
Usage data: Aggregated and anonymized data may be retained indefinitely for analytics purposes. Identifiable usage data is retained for 2 years
Server logs: Retained for 90 days for security and debugging purposes

6. Your Rights (GDPR and Global Privacy)

Depending on your jurisdiction, you may have the following rights regarding your personal data:

6.1 Right of Access

You have the right to request a copy of the personal data we hold about you. We will provide this information in a commonly used, machine-readable format within 30 days of your request.

6.2 Right to Rectification

You have the right to request that we correct any inaccurate or incomplete personal data we hold about you. You can update most account information directly through your account settings.

6.3 Right to Deletion (Right to be Forgotten)

You have the right to request that we delete your personal data. Upon receiving a valid deletion request, we will delete your account and associated data within 30 days, except where retention is required by law or for legitimate business purposes.

6.4 Right to Data Portability

You have the right to request your personal data in a structured, commonly used, machine-readable format and to transmit that data to another service provider.

6.5 Right to Object

You have the right to object to the processing of your personal data for direct marketing purposes. You may also object to processing based on legitimate interests, and we will cease processing unless we have compelling legitimate grounds.

6.6 Right to Restrict Processing

You have the right to request that we restrict the processing of your personal data under certain circumstances, such as when you contest the accuracy of the data or object to processing.

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.

7. Security Measures

We implement appropriate technical and organizational measures to protect your personal data, including:

Encryption of data in transit using TLS/SSL
Encryption of sensitive data at rest
Secure password hashing using bcrypt
Regular security audits and vulnerability assessments
Access controls and authentication for internal systems
Regular backups with encrypted storage
Monitoring for unauthorized access or suspicious activity

While we strive to protect your personal data, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

8. Children's Privacy

The Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at [email protected]. If we discover that we have collected personal information from a child under 13, we will promptly delete that information.

9. International Data Transfers

Your information may be transferred to and maintained on servers located outside your country of residence, where data protection laws may differ. By using the Service, you consent to the transfer of your information to countries outside your country of residence. We take appropriate safeguards to ensure your data is treated securely and in accordance with this Privacy Policy.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. For significant changes, we will provide additional notice, such as an email notification or a prominent notice within the Service.

We encourage you to review this Privacy Policy periodically for any changes. Your continued use of the Service after changes are posted constitutes your acceptance of the revised Privacy Policy.

11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at:

Email: [email protected]