Privacy Policy

1. Information we collect

We only collect what we need to run the Service:

• Account info: email, display name, avatar (if you sign in via a social provider), and a securely hashed password (if you sign up with email).
• Content you upload: source videos, captions, thumbnails, and AI-generated voiceovers derived from your captions. Files are stored in your account's private namespace.
• Social-platform data: when you connect TikTok, YouTube, Instagram, or Facebook, we receive an OAuth access token plus your account id, username, and display name — exactly what we need to publish on your behalf. Tokens are encrypted at rest using AES-256.
• Scheduled posts: caption, hashtags, scheduled time, status (pending / published / failed) so the dashboard can render your posting history.
• Technical logs: basic access logs for abuse prevention and debugging. Never used for ad targeting.

We do not collect: home address, government ID numbers, biometrics, or your browsing history outside of Clipverse.

2. How we use your data

• Process videos, generate captions, and synthesise AI voiceover as you request.
• Publish or schedule posts to the social platforms you've connected, only when you explicitly trigger it.
• Send transactional email: email verification, password reset, security alerts. We don't send marketing email unless you opt in.
• Provide technical support when you contact us.
• Detect and prevent fraud, abuse, or terms violations.

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

3. Third parties and where data is processed

We rely on a few partners to operate the Service. Data shared is always limited to what each function actually needs.

• Cloud storage — videos, images, and audio you upload live in Clipverse's private buckets, never shared between user accounts.
• AI voice provider — when you press “Generate voice,” the caption text you selected is sent to a speech-synthesis partner to return audio. We send only that text at that moment, never your other personal data.
• Transactional email provider — sends system emails such as account verification, password reset, and important notices.
• TikTok, YouTube, Instagram, Facebook — when you click “Publish,” we publish content on your behalf within the scopes you approved on each platform.
• Hosting infrastructure — application servers and databases run on cloud infrastructure with industry- standard security. Data is encrypted both in transit and at rest.

We do not sell your personal data to advertisers or anyone else.

4. How we use platform data

When you connect a social account, the data we receive (username, display name, avatar, and an access token scoped to the permissions you approved) is used only to:

• Show your connected accounts on the dashboard.
• Upload videos and metadata that you explicitly publish.
• Read public engagement metrics (views, likes, comments) for videos you've published through Clipverse, so the dashboard can show how your content performs.

We do not use this data for any other purpose, do not transfer it to other apps or services, and do not allow humans to read it except for support cases you initiate.

5. Security and encryption

• Passwords are stored as one-way hashes; they cannot be recovered.
• Social-platform OAuth tokens are encrypted at rest using a server-side secret. Even our database backups don't expose them.
• All connections between your browser/app and our servers are encrypted in transit (HTTPS).
• Your files are accessed via short-lived signed URLs to limit accidental sharing.

6. Data retention

• Source videos and rendered shorts: kept until you delete them manually or delete your account.
• Social-platform connection data: kept until you disconnect or delete your account.
• Technical logs: up to 90 days, then auto-deleted.
• Transactional email logs: up to 1 year, for support and dispute handling.
• Contact-form messages: kept until the case is resolved, up to 2 years.

7. Your rights

You have the right to:

• Access — export all data you've uploaded from your dashboard at any time.
• Edit — change your display name, email, and password from the account settings page.
• Delete — delete individual shorts, individual clips, or your entire account. Account deletion removes personal data within 30 days, except records we are legally required to retain.
• Disconnect socials — at any time from the dashboard, or from each platform's app permissions page. See Data Deletion for the full process.
• Complain — send a question or complaint via our contact page.

8. Cookies and browser data

We use technical cookies to keep your session signed in and remember UI preferences (like light/dark mode). We don't run third-party advertising cookies, don't install tracking pixels, and don't sell browsing data. You can clear cookies from your browser at any time; you'll just need to sign back in.

9. Children

The Service is not intended for users under 13. If we discover an account created by a child under 13, we will delete the account and its associated data.

10. Changes to this policy

We may update this policy as the system or applicable law changes. New versions will be posted here with a fresh effective date. For changes that materially affect your rights, we will email registered users at least 14 days in advance.

11. Data contact

For any data-related request (access, deletion, complaint), reach us via the contact page or by email at support@clipverse.info. We respond within 15 business days.