Privacy Policy

This Privacy Policy explains how Cutly (“Cutly,” “we,” “us”) collects, uses, shares, and protects information when you use the Cutly apps and hosted service (the “Service”), which turn long-form videos into short, captioned clips.

Cutly is also available as open-source software you can self-host. If you use a self-hosted instance operated by you or a third party, that operator—not Cutly—is responsible for the data processed by that instance. This policy describes the Cutly-operated hosted service.

Account information.

When you create an account we collect your name, email address, and a securely hashed password. Authentication is handled by our auth provider; we do not store plaintext passwords.

Content you provide.

To generate clips, we process the video URLs you submit (for example links to videos you are authorized to use) and any video files you upload. We store the resulting clips, transcripts, captions, and related processing metadata so you can view, edit, and export them. You are responsible for having the rights to any content you submit.

Billing information.

Paid plans are processed by our payment processor, Stripe. We do not store your full card number; we retain your subscription status and a customer identifier needed to manage billing.

Usage, device, and log data.

We collect session identifiers, IP address, and basic technical logs to operate, secure, and debug the Service. If analytics are enabled for the hosted site, we use a privacy-friendly analytics provider that does not build cross-site advertising profiles. We also use PostHog on the hosted site to understand how the product is used, to replay sessions (with everything typed into form fields masked), and to receive error reports so we can fix problems.

Campaign and referral information.

When you visit our website while signed out, your browser keeps a record of how you first arrived, for up to 90 days. It stores this in your browser's local storage, not in a cookie. The record includes campaign tags in the link you followed (such as utm_source, utm_campaign, or a ref code), the domain of the referring website (not the full address), the page you landed on, and the time of that visit. Page addresses are reduced to their route, so share links and project IDs are never recorded. Nothing is recorded while you are signed in.

The first account to sign in on that browser claims the record, and it is then deleted from the browser so no other account can use it. If that account is new, we save the record to it once, shortly after sign-up. We also note when you first download or export a clip. We use this to learn which channels bring people who find Cutly useful. If analytics are enabled, the sign-up and clip-export events we send to our analytics provider include the same campaign fields. We don't use this information for advertising or sell it. You can remove the record from your browser by clearing site data for supoclip.com.

• Provide the Service—process your videos and generate, edit, and export clips.
• Authenticate you and keep your account secure.
• Process payments and manage subscriptions.
• Send transactional email (for example sign-up confirmation, completion notices, and billing receipts).
• Maintain, debug, secure, and improve the Service.
• Understand which campaigns and referring sites lead to sign-ups and first clip exports.
• If you connect a social account, publish the clips you choose and show you how they perform.
• Comply with legal obligations and enforce our terms.

You can connect a YouTube, TikTok, or Instagram account so Cutly can publish clips for you. Connecting is optional, happens through the platform's own sign-in page, and we never see your password for that platform.

What we access and why.

• Basic profile (account ID, display name, username, profile picture) — to show which account is connected.
• Permission to upload or publish — to post the clips you choose, with the title, caption, visibility, and time you set. We never post anything you didn't ask us to.
• Statistics for posts made through Cutly (views, likes, comments, shares) — to show you how your clips perform and, once you have enough results, to tailor clip selection for your own future videos.

We store the access tokens the platform issues in encrypted form and use them only for the purposes above. We do not sell this data, use it for advertising, share it with other users, or use it to train general-purpose AI models.

Disconnecting and deletion.

You can disconnect an account at any time from the Social page. Disconnecting deletes the stored tokens immediately, cancels any posts still scheduled for that account, and asks the platform to revoke Cutly's access where it supports that. You can also remove records of published posts, including their statistics, from the app. Deleting your Cutly account removes all of this data. You can also revoke access from the platform itself, for Google at Google security settings. To ask us to delete this data, email privacy@supoclip.com.

YouTube and Google.

Cutly uses YouTube API Services. By connecting a YouTube account you agree to the YouTube Terms of Service, and Google's handling of your data is described in the Google Privacy Policy. Cutly's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We share data with vendors that process it on our behalf, only as needed to provide the Service:

• Transcription — to transcribe audio from your videos.
• AI/LLM providers — to analyze transcripts and identify clip-worthy segments.
• Stripe — payment processing.
• Email delivery — transactional emails.
• Hosting & infrastructure — to run the Service.
• Analytics — when enabled, to measure site visits, sign-ups, and clip exports.
• YouTube, TikTok, and Instagram (Meta) — only if you connect an account, to publish the clips you choose and read their statistics (see Connected Social Accounts).
• PostHog — on the hosted site, product analytics, session replays with form inputs masked, and error reports. Hosted in the EU.

We do not sell your personal information, and we do not use it for cross-context behavioral advertising. We may disclose information if required by law or to protect the rights, safety, and security of our users and the Service.

We retain your account information, including any campaign and referral information saved at sign-up, for as long as your account is active. Your tasks, uploaded videos, and generated clips are retained until you delete them or delete your account. Temporary processing files are deleted automatically after processing. We may retain limited records as required for legal, security, or accounting purposes.

You can access and update your account information in the app. You can delete individual tasks and clips at any time. You can delete your account—which removes your associated data—from the app, or by contacting us at privacy@supoclip.com.

Depending on where you live (for example under GDPR or CCPA/CPRA), you may have rights to access, correct, delete, or port your personal data, and to object to or restrict certain processing. To exercise these rights, contact us at the address below. We will not discriminate against you for exercising your rights.

We use industry-standard safeguards, including encryption in transit (HTTPS). On mobile devices, session credentials are stored in the operating system keychain. No method of transmission or storage is completely secure, but we work to protect your information using reasonable technical and organizational measures.

We may process and store information in countries other than where you live. Where required, we use appropriate safeguards for such transfers.

The Service is not directed to children under 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect personal information from them. If you believe a child has provided us personal information, contact us and we will delete it.

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above and, where appropriate, provide additional notice. Your continued use of the Service after an update means you accept the revised policy.

Questions about this policy or your data? Email us at privacy@supoclip.com.