cliptPrivacy Policy
Last updated: 30 October 2026
1. Controller
[OWNER NAME: operator legal name / ENK or AS], org. no. [ORG. NR.], [STREET ADDRESS], [POSTCODE] [CITY], Norway is the data controller under the GDPR (as incorporated in Norwegian law by the Personopplysningsloven). Contact: [OWNER EMAIL, e.g. privacy@joinclipt.com]. [Add a DPO if one is appointed.]
2. What we collect and why
| Data | Purpose | Legal basis (GDPR art. 6) | Kept for |
|---|---|---|---|
| Email, password hash, plan, usage counters | Your account and plan limits | Contract (6(1)(b)) | Until you delete your account |
| Uploaded videos, transcripts, exports | Providing the service | Contract | Deleted automatically after [7] days (configurable) |
| Payment records (via Stripe) | Billing and bookkeeping | Contract, and legal obligation (Bokføringsloven, 5 years) | As required by law |
| Device ID cookie, hashed IP and user-agent | Fraud prevention for free exports and referral rewards; rate limiting and security | Legitimate interest (6(1)(f)) in preventing abuse | [12 months]; IPs are stored only as keyed hashes |
| Referral links and flags | Running the referral programme and stopping abuse | Legitimate interest | [12 months] |
| Support and copyright messages | Answering you; handling takedown notices | Legitimate interest, and legal obligation | [3 years] |
3. Processing on our servers
Transcription (Whisper), translation (M2M100/Argos), face tracking and rendering run on our own servers. Your video is not sent to third-party AI services, unless an AI provider is configured. In that case only the transcript text (never the video) is sent to [PROVIDER] to pick keywords, write titles or translate. [List the provider and the transfer mechanism.]
4. Processors and transfers
- Hosting: [PROVIDER, region EEA].
- Payments: Stripe Payments Europe Ltd. (Ireland).
- Email: [SMTP PROVIDER].
- Publishing (only if you connect accounts): Google/YouTube, TikTok and Meta receive the video you choose to publish.
Where data leaves the EEA, we rely on EU Standard Contractual Clauses or an adequacy decision (e.g. the EU-US Data Privacy Framework). [Verify each one.]
5. Your rights
You can ask for access, correction, deletion, restriction, portability and objection (GDPR art. 15–21). Email [OWNER EMAIL, e.g. privacy@joinclipt.com]. We answer within one month. You can also complain to the Norwegian Data Protection Authority, Datatilsynet, or to your local EEA supervisory authority.
6. Children
Clipt is not for children under 13. If we learn that a child under 13 has an account, we delete it.
7. Security
Passwords are hashed with bcrypt, sessions use HttpOnly cookies, and IP addresses are stored only as keyed hashes. Access to production data is limited to the operator.
8. Cookies
See the Cookie notice.
9. Changes
If we change this policy in a material way, we will tell you by email or in the app.