Introduction
Clip It Live (“we,” “us”) operates the website at clipitlive.com (the “Service”). This policy explains what personal data we process when you use the Service, why we process it, and the choices you have. It applies to anyone who visits the site, uploads a video, or buys a clean export.
What we collect
Information you give us
- Uploaded media. Videos, audio, and images you upload to the Service while building a project.
- Project metadata. Titles, durations, edit decisions (cuts, ordering, sync points) you create in the editor.
- Email address. When you complete a purchase, Stripe collects the email you enter at checkout and shares it with us so we can deliver the backup download link.
- Support messages. If you email us, we keep that message and any reply.
Information we collect automatically
- Session cookie. A first-party cookie that anonymously identifies your browser so your projects appear on the home page when you return. See our Cookie Policy.
- Theme preference. Stored in
localStoragein your browser; never sent to us. - Server logs. Standard request logs (IP address, user-agent, requested URL, timestamps, error traces) collected by our hosting provider for security and debugging.
- Anti-abuse signals. When enabled, Cloudflare Turnstile is used on upload to distinguish humans from bots.
What we do not collect
- We do not require an account, name, address, or phone number.
- We do not use third-party advertising or tracking cookies.
- We do not sell or rent your personal information to anyone.
Why we collect it
- Operate the editor
- Store your uploads and project state long enough to render the export you asked for.
- Deliver purchases
- Send the backup download link to the email captured at Stripe checkout.
- Resume your work
- Match your browser to your projects via a session cookie when you return.
- Prevent abuse
- Keep service logs and CAPTCHA signals to detect bots, fraud, and infrastructure misuse.
- Comply with the law
- Respond to lawful requests, enforce our Terms, and meet tax and accounting obligations.
Legal bases (for users in the EEA / UK)
If you are in the European Economic Area, the United Kingdom, or Switzerland, we rely on the following legal bases under the GDPR:
- Contract — to provide the Service you request and to deliver paid exports.
- Legitimate interests — to keep the Service safe, secure, and improving (this is balanced against your rights).
- Legal obligation — to keep transaction records and respond to legal requests.
- Consent — for any optional processing where we explicitly ask.
Sub-processors
We use the following providers to run the Service. Each is contractually required to handle your data securely and only on our instructions.
- Stripe, Inc.
- Payment processing and email capture at checkout. Stripe receives your card details directly; we do not see them.
- DigitalOcean Spaces
- Object storage for uploaded media, intermediate working files, and rendered exports. Hosted in the region we have configured.
- Cloudflare
- CDN, DNS, DDoS protection, and (when enabled) Turnstile bot-mitigation on the upload form.
- Email delivery provider
- Used to send the backup download link after a successful purchase. The only personal data shared is the email Stripe captured.
We may add or change sub-processors as the Service evolves. Material changes will be reflected on this page.
Data retention
We keep data only as long as we need it:
- Free / unfinished projects: automatically deleted after a short retention window (currently 7 days from last activity) by our cleanup worker.
- Paid project files (uploads + render): kept for the period stated on the success screen so you can re-download, then automatically expired and deleted.
- Backup download link: the signed URL expires within roughly one hour of issue.
- Transaction records: retained as long as required by tax and accounting law (typically 7 years).
- Server logs: retained for a short rolling window (typically 30–90 days) for security and debugging.
International transfers
We are based in the United States. If you access the Service from outside the United States, your data will be processed in the United States and in the regions where our sub-processors operate. Where required, we rely on safeguards such as the Standard Contractual Clauses to protect your data when it crosses borders.
Your rights
Depending on where you live, you may have the right to:
- Access a copy of the personal data we hold about you;
- Correct data that is inaccurate or out of date;
- Delete your data (subject to legal retention obligations);
- Restrict or object to certain processing;
- Port data you provided in a structured, machine-readable format;
- Withdraw consent where processing is based on consent;
- Lodge a complaint with your local data-protection authority.
To exercise these rights, email [email protected]. Because the Service is account-free, we may need additional information to verify the request (for example, the project ID and the email used at checkout).
California privacy rights (CCPA / CPRA)
If you are a California resident, you have the right to know what personal information we collect, to request deletion or correction of that information, and to opt out of any “sale” or “sharing” of personal information as defined by the CCPA. We do not sell or share personal information for cross-context behavioral advertising. You have the right not to be discriminated against for exercising any of these rights. To submit a request, email [email protected].
Children
The Service is not directed to children under 13, and we do not knowingly collect personal information from a child under 13. If you believe a child has provided us personal information, contact [email protected] and we will delete it.
Security
We use HTTPS in transit, encrypted object storage at rest, scoped pre-signed URLs for uploads and downloads, and short retention windows. No system is perfectly secure; if you discover a vulnerability, please disclose it responsibly to [email protected].
Changes
We may update this Privacy Policy from time to time. The “Effective” date at the top reflects the latest version. We will use reasonable means to flag material changes.
Contact
For privacy questions, complaints, or requests to exercise your rights: