KlipzenPrivacy Policy
Before publishing: fill in the bracketed fields and have this text reviewed by a lawyer (GDPR/UK GDPR, KVKK and, if you sell to California residents, CCPA). This is a template, not legal advice. Türkçe metin: Gizlilik Politikası ve KVKK.
Last updated: [YYYY-MM-DD]
1. Who we are
The controller of your personal data is [COMPANY / SOLE TRADER NAME], [ADDRESS], email: [PRIVACY EMAIL]. [If required: EU/UK representative — NAME, ADDRESS.]
2. What we process and why
| Data | Purpose | Legal basis (GDPR) |
|---|---|---|
| Name, email, password (hash only), workspace name, team roles | Creating your account, signing in, providing the service | Contract (Art. 6(1)(b)) |
| Videos and audio you upload or link, and the clips, transcripts, captions and texts generated from them | Providing the repurposing service you request | Contract (Art. 6(1)(b)) |
| Connected channel tokens (YouTube, Ayrshare, WordPress, Ghost, Notion, webhooks), stored encrypted | Publishing and sending drafts on your instruction | Contract (Art. 6(1)(b)) |
| Published post statistics (views, likes, retention) | Performance insights shown to you and used to improve clip selection for your workspace | Contract / legitimate interest (Art. 6(1)(f)) |
| IP address, access and error logs | Security, abuse prevention, debugging | Legitimate interest (Art. 6(1)(f)), legal obligation |
| Product usage events (only if analytics is enabled): event names such as "job started", workspace and user IDs — no email, name or video content | Understanding which features help users succeed | Legitimate interest (Art. 6(1)(f)) [or consent — confirm with counsel] |
| Acceptance of these terms (timestamp) | Proof of acceptance | Legal obligation / legitimate interest |
| Sign-up source: the campaign that brought you to the site (utm parameters), the referring site's domain, and any invite code or friend referral link you used | Measuring which marketing channels work; giving referral rewards (bonus minutes) to the right people | Legitimate interest (Art. 6(1)(f)); contract for referral rewards (Art. 6(1)(b)) |
| Waitlist: email, optional first name and what you make, time of consent | Sending your early access invite and product updates | Consent (Art. 6(1)(a)); removed when you leave the list |
3. People who appear in your videos
Your content may contain other people's images or voices. You are responsible for having the rights and permissions to process it; for that content we act as a processor on your behalf. Clients you invite through a review link can see the clips you share and the comments they leave.
4. Service providers (including outside your country)
- Google LLC (Gemini API) — video/audio analysis, text generation and archive search embeddings. Whether content may be used to improve Google's models depends on Google's current API terms for paid usage: [LINK].
- Payment: outside Türkiye, Paddle.com Market Ltd (and its affiliates) is our reseller and merchant of record; Paddle processes your payment and billing details under its own privacy notice (paddle.com/legal/privacy). In Türkiye, payments are processed by iyzico Ödeme Hizmetleri A.Ş. We never store card details.
- Optional features you choose to use: YouTube (Google) for direct uploads and statistics; Ayrshare for posting to TikTok, Instagram, LinkedIn, X and others; ElevenLabs (voice-cloned dubbing) and sync.so (lip sync); Microsoft Azure Speech or another text-to-speech provider (AI dubbing); WordPress, Ghost or Notion for drafts; your own webhooks (Make, Zapier, n8n).
- Product analytics (optional): PostHog [EU region] — only if enabled; see section 7.
- Hosting and storage: [PROVIDER, COUNTRY]. Email delivery: [PROVIDER].
Transfers outside the EEA/UK rely on [Standard Contractual Clauses / adequacy decisions — confirm with counsel].
5. How long we keep data
Account data: for as long as your account exists. Generated project outputs: [30] days unless you delete them earlier. Uploaded raw media: deleted no later than 24 hours after processing. Technical logs: [90] days. When you delete your account, your data is deleted or anonymised within a reasonable time, except where the law requires us to keep it.
6. Security
Passwords are stored as one-way hashes; connected account tokens and API secrets are encrypted; each workspace's data is isolated; connections use HTTPS; sessions use httpOnly cookies.
7. Cookies and similar technologies
We use strictly necessary cookies to keep you signed in (an httpOnly session cookie and a non-secret "signed in" indicator). We do not use advertising cookies. If product analytics is enabled, usage events are sent from our own server — no third-party analytics script or cookie is placed in your browser. Your language preference is stored in your browser's local storage. The campaign or invite that brought you here is kept only in the open tab's session storage, to be attached to your account if you sign up, and is cleared when the tab closes.
8. Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict or object to processing of your data, to data portability, and to withdraw consent. You can delete your account and data at any time in the app (Profile > Delete my account and data). For other requests, email [PRIVACY EMAIL]; we respond within 30 days. You may also complain to your data protection authority.
9. Changes
We publish updates on this page and notify you by email about material changes.