Privacy policy: how ClipFlap handles your data

ClipFlap turns your videos into short captioned clips. This policy explains how ClipFlap handles a minimum of personal data to do that, described here without jargon. The data controller is Voltero LLC, publisher of the service (contact: support@clipflap.com).

What we collect

• Account — email address, name, encrypted password (or Google identifier if you use Google sign-in).
• Content — the videos you upload or link, their transcripts and the clips generated. That content may contain personal data (voices, images); you remain responsible for it towards the people who appear in it.
• Billing — subscription history, invoices, country and VAT number where applicable. Your card details are handled exclusively by Stripe and never pass through our servers.
• Usage — technical logs (jobs started, minutes consumed) and, only with your consent, analytics (Google Analytics, Microsoft Clarity). Nothing loads before you agree; the “Cookies” link in the footer lets you change your mind at any time.

Why we process them

• To provide the service: transcribe, analyse and render your clips (performance of the contract).
• To bill and meet our tax obligations — European VAT (legal obligation).
• To secure the service and prevent abuse (legitimate interest).
• To measure site audience (consent).

Our processors

Each provider receives only what its function requires:

• Neon (database, EU region — Frankfurt) · Cloudflare R2 (media storage) · Vercel (site hosting) · Contabo (processing servers, Germany).
• AssemblyAI (audio transcription, United States) · Alibaba Cloud Model Studio (highlight analysis from the transcribed text, Singapore).
• Stripe (payments and VAT) · Brevo (transactional email, France) · Inngest (job orchestration) · Google (OAuth sign-in and YouTube publishing if you connect it).

Some of these providers are established in the United States. Transfers rely on the European Commission’s standard contractual clauses and, where applicable, on the EU–US Data Privacy Framework.

Google data: who we share it with

This section concerns specifically Google user data — what we receive when you sign in with Google or link your YouTube channel: email address, name, profile picture, channel identifier and access tokens.

We do not sell, rent or transfer this data to anyone. We pass it to no advertiser, data broker, ad network, or any third party for marketing purposes. It is never used to train any artificial-intelligence model, ours or a third party’s.

It is shared only with the infrastructure providers that host or process it on our behalf, on our instructions, with no right of their own to use it:

• Neon (database, European Union — Frankfurt): account, channel identifier and access tokens, encrypted at rest.
• Contabo (processing server, European Union): access tokens are used for the time it takes to send a video to your channel, at your request.
• Vercel (site hosting): your session, for the duration of your visit.
• Google itself, to which we return your tokens in order to publish to your channel when you ask for it.

No other provider named above receives Google user data. In particular, AssemblyAI and Alibaba Cloud Model Studio receive only the audio and the text of your videos — never your Google account, your identity or your tokens.

We disclose this data to an authority only where the law requires it, and in the event of a sale of the business, any acquirer would be bound by this policy.

Limited use of Google data

ClipFlap’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

ClipFlap uses the YouTube API Services. By linking your channel, you accept the YouTube Terms of Service and the Google Privacy Policy. You can revoke our access at any time from your Google account permissions or from your ClipFlap settings; the corresponding tokens are then deleted.

For how long

• Media (source videos, clips): purged automatically about 90 days after processing. Download your clips before then.
• Account: kept for as long as it is active; deleted on request.
• Invoices: kept for the statutory accounting period.

Your rights

Under the GDPR, you have rights of access, rectification, erasure, portability, restriction and objection over your data. To exercise them: support@clipflap.com. You may also lodge a complaint with your supervisory authority (in France, the CNIL — cnil.fr).

Security

Encrypted connections (TLS) end to end, hashed passwords, key-only server access, payment data never stored with us.

This translation is provided for convenience. In case of any discrepancy, the French version prevails: read the French privacy policy.