Privacy Policy for clonecut

Introduction

Welcome to clonecut, an AI creative platform for image and video generation. We are committed to safeguarding your personal data while delivering browser-based AI generation and editing workflows. This Privacy Policy explains what information we collect, how we use it, and the safeguards we apply when you interact with clonecut.

Effective Date: 2026-10-25

Information Collection and Use

To deliver reliable AI image, video, and photo editing services, we process the following categories of information:

1. Account Information

   • What We Collect: Name, email address, password hash, locale, and authentication tokens when you create or access an account.
   • Purpose: To authenticate you, provide account dashboards, send essential notices, and deliver customer support.

2. AI Generation and Editing Data

   • What We Collect: Uploaded or pasted images, video inputs, text prompts, model selections, mask selections, aspect ratios, generation settings, outputs, and transformation metadata.
   • Purpose: To run AI generation and editing models, process task status, store your creation history, and help you resume drafts securely.

3. Usage Analytics

   • What We Collect: Feature usage, button clicks, session timestamps, device type, browser version, and referring URLs.
   • Purpose: To monitor system health, prevent abuse, prioritize roadmap improvements, and ensure the interface stays performant.

4. Payment Information

   • What We Collect: Billing name, billing address, last four digits of card, transaction IDs, and plan selections. Full payment data is processed by Stripe on our behalf.
   • Purpose: To provision premium plans, issue invoices, handle refunds, and comply with financial regulations.

5. Cookies and Local Storage

   • What We Collect: Session identifiers, localization preferences, analytics opt-in/out states, and CSRF tokens.
   • Purpose: To keep you signed in securely, remember your preferences, and honor consent choices.

6. Support & Communications

   • What We Collect: Messages you send via chat, email, or forms plus attachments you voluntarily provide.
   • Purpose: To resolve issues, investigate bugs, and improve the overall support experience.

7. Microsoft Clarity Session Analytics

   • What We Collect: When analytics is permitted, we associate a pseudonymous version of your internal account UUID with Clarity session recordings and record coarse events such as generator viewed, generation started, generation succeeded, generation failed, and insufficient credits. We do not send your email address, display name, prompts, uploaded media, generated media URLs, payment details, IP address, OAuth identifiers, authentication tokens, or raw provider errors to Clarity.
   • Purpose: To diagnose usability and generation-flow problems for a specific authenticated account without exposing direct identity fields. Prompt inputs, general form inputs, and generated-media result areas are masked in Clarity recordings.
   • Your Choice: In the EEA, United Kingdom, Switzerland, and locations we cannot reliably determine, Clarity analytics starts only after explicit analytics consent. You can withdraw consent from Cookie Settings; pending analytics events are discarded and Clarity cookies are cleared.

Data Storage and Security

We protect personal data with layered safeguards:

• Encryption for data in transit (TLS 1.2+) and at rest using cloud-native KMS.
• Role-based access controls to limit who can review customer-generated assets.
• Audit logging across admin activity, authentication, and billing workflows.
• Automatic data minimization that deletes temporary AI inference assets within 48 hours unless you save them to your library.

Despite our best efforts, no transmission method can be guaranteed 100% secure. We encourage you to use strong passwords and enable MFA whenever possible.

AI Processing Practices

• Images, prompts, and video inputs are processed only to complete the generations or edits you request.
• We may retain anonymized generation and transformation metrics to tune prompts, reliability, and guardrails.
• Unless you explicitly publish an asset, we will never use your media for marketing showcases.
• You can delete generated outputs at any time from the dashboard.

Information Sharing and Disclosure

We do not sell or rent personal data. Limited sharing may occur in these scenarios:

• Vendors: Payment processors, storage providers, analytics, and email delivery services operate under data processing agreements.
• Legal Compliance: When responding to lawful requests or protecting our rights, users, or the public.
• Business Transfers: In the event of a merger or acquisition, we will notify you before any change of control impacts this policy.

Data Retention

• Account data persists while your workspace remains active.
• Billing records follow applicable accounting and tax retention laws (typically 7 years).
• Deleted projects enter a 30-day recycle window before permanent removal.
• You may submit a data deletion or export request by emailing privacy@clonecut.org.

Your Rights

Depending on your jurisdiction, you may have the right to:

• Access, export, or correct personal data.
• Object to or restrict certain processing.
• Withdraw analytics consent at any time from Cookie Settings.
• Withdraw marketing consent without affecting service delivery.
• Lodge a complaint with your local supervisory authority.

We honor these rights within the timelines required by GDPR, CCPA/CPRA, and other emerging digital regulations.

Changes to This Policy

We will update this Privacy Policy when we introduce new features, work with new subprocessors, or comply with updated regulations. Material changes will be announced via email or in-app notifications, and the “Effective Date” will be revised accordingly.

Contact Us

Service Provider: clonecut Email: support@clonecut.org Privacy Contact: privacy@clonecut.org Website: https://www.clonecut.org

By using clonecut, you agree to the practices described above. Thank you for trusting us with your creative workflow.