Privacy Policy

1. Notice

Whenever we collect information that could personally identify you, we explicitly request your provision and permission. Examples include the cookie consent banner and the payment-data request when you sign up.

2. Your consent

You may grant or withhold permission for us to process your information at any time. Non-essential data (marketing cookies, company name) can be declined without affecting your access. Without essential data (essential cookies, email, payment info) some features will be unavailable. By accepting this Policy you consent to the processing described herein.

3. Usage

3.1 Data we collect

• Personal identifiers: name, email, phone, billing data.
• Anonymous usage analytics via optional cookies.
• Google account data when you sign in with Google.

Partner policies: YouTube ToS, Google Privacy, Google API User Data Policy, TikTok ToS.

3.2 Google API Limited Use Disclosure

SPACEFOX UNIPESSOAL LDA uses Google APIs when you sign in with Google and when you allow us to post to your YouTube channel. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

3.3 YouTube API Services

The application uses YouTube API Services to upload videos, search YouTube, and manage YouTube content.

Data we access: channel ID and name, video metadata (titles, descriptions, tags, thumbnails), upload status and IDs, public search results.

How we use it: upload to your channel, display upload status, search for references. We do not store YouTube authentication tokens beyond the active session and we do not share your YouTube data with third parties.

Revoking access: at any time via Google security settings. Upon revocation we detect within 24 hours, tokens are invalidated immediately, and all YouTube-related data (channel info, video IDs, metadata) is deleted within 7 days. You receive an email confirmation when deletion is complete.

3.4 AI and user consent

We do not share your personal data with third-party AI applications without your knowledge. When you use AI features, the explicitly-selected content is forwarded to partner models (see §3.5 and product sections below) only to generate the requested output. We do not train foundation AI models on your content without explicit consent.

3.5 Storage and sub-processors

Personal data is stored on encrypted servers (TLS in-transit, AES-256 at-rest), retained for as long as needed for the purposes of this Policy or by law. Principal sub-processors:

• Anthropic, Google (Gemini), OpenAI, xAI, Runway, Kling, Luma, ByteDance, MiniMax, Vidu, Wan, Replicate — AI models for chat, image, video.
• ElevenLabs, Grok TTS — voice and dubbing.
• AWS (S3, CloudFront), Hetzner — storage, CDN, hosting.
• Stripe — EUR/USD payments.
• Apple StoreKit — iOS in-app purchases.
• T-Bank — RUB payments (Russian audience only).
• PostHog — anonymous product analytics (opt-out).
• Google Firebase, AppsFlyer/Adjust — attribution and analytics, acting on our instructions.

Advertising platforms are not sub-processors. Google, Meta, TikTok, Reddit, Yandex and VK act as independent controllers of the data they receive from us; their own privacy notices govern that processing. See §3.8.

Some sub-processors operate outside the EEA. We rely on Standard Contractual Clauses approved by the European Commission.

3.6 Sharing of Google User Data

We do not share Google user data with third parties unless necessary to provide the Service, comply with law, or protect our rights. Sub-processors that process Google user data on our behalf do so under confidentiality agreements and applicable data-protection law.

3.7 Other purposes (how we use your data)

• Access to features.
• Payment processing: subscriptions, one-off purchases, credits.
• Service updates: transactional emails; marketing only with opt-in.
• Customer support and communication: answering inquiries, status of orders, incident response.
• Compliance with the Google API User Data Policy, including Limited Use.
• Anonymous usage analysis to improve the platform.
• Legal requests: we may disclose PII in response to a federal court order, judge, or law-enforcement request — without prior notice where the law forbids it.

Anonymized usage data may be shared with marketing agencies in fully anonymized form to enhance our services. Minimum necessary data may be shared with operational partners (e.g., payment processors). Outside these categories, no external party will have access to your personal information without your explicit consent.

3.8 Advertising and measurement (web, app and server-side)

This section covers our websites, our apps and events we send from our own servers. It is separate from the app-specific description in §10.

What is shared. Depending on the channel this may include online identifiers (cookie and pixel IDs), advertising click identifiers (gclid, fbclid, ttclid, rdt_cid and similar), IP address and the approximate location derived from it, browser and device information, and events such as registration or purchase. Where we send an email address to an advertising or measurement partner, we send it as a cryptographic hash (SHA-256). A hashed email address is still personal data.

Who receives it, and in what role. Google (Google Analytics 4, Google Ads including the conversion linker and enhanced conversions), Meta, TikTok, Reddit, Yandex (Yandex Metrica) and VK. These advertising platforms act as independent controllers of the data they receive; their own privacy notices apply. Yandex Metrica and VK are Russian services and data sent to them is processed in the Russian Federation, for which the European Commission has not adopted an adequacy decision.

Customer lists. We do not upload email addresses to advertising platforms for audience matching (Google Customer Match or equivalent) without your separate, specific consent given for that purpose. Accepting this Policy is not such consent.

Legal basis (EEA/UK). Analytics, advertising, profiling, enhanced conversions, server-side conversion events and audience matching rely on consent. We do not treat continued use of the Service, an update to this Policy, or a passive statement shown at registration as consent for these purposes.

Your choices. You can withdraw consent at any time through your browser settings, the controls offered by each platform, or by contacting us using the details in §12. Withdrawal does not affect processing carried out before it, and does not restrict your access to the Service.

4. Retention and deletion

We retain your information as long as necessary to provide the Service. After your request — account deletion, subscription expiry, or explicit deletion request — personally identifiable information is deleted.

Deletion procedures

• Account deletion: contact support@clipchat.ai. Processed within 14 days.
• YouTube data: revoke access via Google security settings → deletion within 7 days.
• Authorized Google API data (YouTube, Drive): deleted within 7 days of revocation.
• Generated content: videos, images and other artifacts are deleted with your account unless you explicitly downloaded them locally.

You receive an email confirmation when deletion is complete. Billing records are retained for 10 years (Portuguese tax law). Information may be retained longer where required by law or court order.

5. Your rights

5.1 GDPR rights

• Right of access: obtain a copy of personal data we have processed.
• Right to rectification: correct inaccurate data.
• Right to erasure: request deletion of part or all of your data.
• Right to restriction of processing: ask us to stop processing if data is incorrect, unlawfully processed, or no longer needed.
• Right to data portability: receive your data in a machine-readable format and transfer it to another controller.

To exercise any right, contact the email in §12.

5.2 Right to object

Under GDPR, you have the right to object to processing of your personal data for direct marketing. Upon objection, we are obliged to immediately cease such processing. To object, write to the email in §12.

Complaints can be filed with the Portuguese Data Protection Authority CNPD (cnpd.pt) or your national DPA.

6. Opting out

In addition to the core Service we may offer newsletters, satisfaction surveys and marketing communications. You can opt out at any time: the unsubscribe link in any email or your account settings on clipchat.ai. Anonymous analytics has a separate toggle inside the extension settings and the iOS app.

7. Security of your information

We employ multiple measures to protect your data:

• Anti-malware scanners and regular security audits.
• TLS 1.2+ for all connections between your device and our servers.
• At-rest encryption (AES-256) for S3 storage and databases.
• Internet standards for email traffic: DKIM, SPF, DMARC.
• Short-lived JWT tokens with refresh-rotation.
• Principle of least privilege for internal staff access.

8. Mobile Application (iOS App)

The ClipChat mobile application for iOS turns a music track the user supplies into a generated music video.

8.1 Data collected

• Contact information: name and email (via Sign in with Apple or other providers).
• User content: photos, videos, audio uploaded for generation; prompts.
• Audio you supply: the music track you choose is uploaded to our servers, analysed automatically to split it into scenes, and used to generate the video for that clip. It is stored with the clip and is deleted when you delete the clip or your account. We do not use it to train models and do not share it with third parties beyond the processors listed in this policy.
• Identifiers: account ID, IDFA, identifierForVendor.
• Purchase history: via Apple StoreKit (tier, credit pack, timestamp).
• Usage: launches, feature use, screen views, taps; advertising interactions.
• Coarse location: approximate, IP-derived (city/region).
• Diagnostics: crash logs, performance metrics.

8.2 App Tracking Transparency (ATT) and IDFA

In compliance with Apple's ATT framework, our iOS app requests permission before using IDFA to track activity across other companies' apps and websites. You can grant or revoke this in Settings → Privacy & Security → Tracking. If denied, IDFA is not used for cross-app tracking and core functionality continues to work normally.

8.3 Advertising and analytics partners

• Meta (Facebook) Ads — device identifiers, install/purchase/engagement events. Meta Privacy.
• TikTok for Business — device identifiers, install/conversion events. TikTok Privacy.
• Google Firebase Analytics & Crashlytics. Firebase Privacy.
• Mobile Measurement Partners (AppsFlyer, Adjust) — attribution across networks. They act as data processors under our instructions.
• Apple — IAP processing. We never receive or store your payment card information. Apple Privacy.

8.4 Sign in with Apple

The iOS app supports Sign in with Apple. We receive a unique stable user identifier and optionally your name and email (which you may hide via Hide My Email). This is used solely to manage your ClipChat account. You can revoke at Settings → Apple ID → Password & Security → Apps Using Apple ID.

8.5 In-app purchases

Purchases are processed by Apple via StoreKit. Apple handles all payment information; we receive only transaction metadata (product identifier, price tier, timestamp, anonymized transaction ID) needed to credit your account. Refunds must be requested through your App Store account.

8.6 Mobile data deletion

You may delete your account and all associated mobile data via support@clipchat.ai or via the in-app account deletion feature. Personal data is removed within 14 days, except where retention is required by law.

8.7 Apple App Privacy Labels

A structured summary of data collected by the iOS app is available on its App Store product page under "App Privacy" — corresponding to the categories described in this section.

9. Changes to this Policy

SPACEFOX UNIPESSOAL LDA reserves the right to amend this Privacy Policy. Material changes will be notified at least 14 days in advance via email or in-product banner before they take effect. If you do not agree with the modifications, you have the opportunity to withdraw your consent during this notification period.

10. Contact