Privacy Policy

1. Data controller

The controller is the owner identified at the beginning of this page. You can use the listed email address for any privacy question.

2. Data we process and its sources

The data comes from you, your device, and the public metadata returned by the YouTube API for the link you provide. Clipia does not need you to include sensitive personal data in a video.

• Account data: email address, user identifiers, and the basic information you authorize Google to share if you choose Google sign-in.
• Service data: YouTube URL, public video metadata, editing settings, job status, generated clips, and technical data required to process them.
• Anonymous use: random identifiers stored in cookies to recover a job and enforce usage limits.
• Security and diagnostics: IP address, browser, device, timestamps, error logs, and activity needed to prevent abuse and operate the service.
• Optional analytics: if you accept it, pages visited, approximate visit source, interactions, device, browser, and approximate geographic location.
• Communications: your email address and the contents of messages you send us.

3. Purposes and legal bases

• Providing the service, creating an account, processing videos, and delivering clips: performance of a contract or requested pre-contractual steps.
• Handling questions and support: performance of our relationship with you or our legitimate interest in responding and improving the service.
• Enforcing quotas, preventing fraud, protecting accounts, and diagnosing failures: our legitimate interest in running a secure, reliable service.
• Meeting tax, regulatory, or valid authority requirements: compliance with a legal obligation.
• Loading non-essential measurement or analytics: your consent only, which you may withdraw at any time.

4. Required data

Required fields and essential technical data allow us to provide the requested function. Without them, features such as signing in, processing a link, or recovering a job may not work. Rejecting optional analytics does not prevent you from using Clipia.

5. Providers and recipients

Clipia uses processors that handle data on the controller’s behalf: Supabase for authentication and the database; Vercel to serve the web application; Railway to run processing; and Cloudflare R2 to store results temporarily. Google is involved when we request YouTube metadata, you use Google sign-in, or—after your consent—we use Google Analytics 4 to measure website usage.

Data may also be disclosed where required by law, a competent authority, or to establish, exercise, or defend legal claims. We do not sell personal data.

6. International transfers

Some providers may process data outside the European Economic Area. Where this happens, recognized mechanisms will be used, such as adequacy decisions, Standard Contractual Clauses, or other valid safeguards provided under the relevant provider agreements.

7. Retention periods

Shorter periods displayed in the product will take precedence. A copy may remain locked in an ordinary backup cycle before final deletion.

• Anonymous jobs and results: normally up to 24 hours.
• Free or Pro account jobs and results: normally up to 48 hours while the beta keeps its current limits.
• Account data: while the account remains active and, after closure, for periods needed to meet legal obligations or handle claims.
• Quota, security, and error logs: for the limited time needed for their purpose and potential liabilities.
• Usage data associated with Google Analytics: for up to 14 months depending on the property setting; aggregated reports may be kept for longer.
• Cookie preference: 180 days unless you change it sooner.

8. Videos, results, and confidentiality

Clips and ZIP files are stored temporarily behind hard-to-guess links, but they should not currently be treated as a private repository for confidential information. Anyone who receives a link may access the file while it exists. Do not submit secrets, highly sensitive data, or content you are not entitled to process.

9. Your rights

You may request access, correction, deletion, restriction, objection, and portability where applicable. You may also withdraw consent without affecting processing carried out before withdrawal. Email the controller and identify your request; we may ask for reasonable information to confirm your identity.

If you believe the processing breaches data-protection law, you may complain to the Spanish Data Protection Agency at aepd.es or to your competent supervisory authority.

10. Automated operations and children

Clipia automatically enforces usage limits and processes content according to your settings. These operations do not produce legal or similarly significant effects on you. The highlight detector is experimental and its scores are editorial suggestions, not personal assessments.

The service is not directed to people under 18. If you lack legal capacity, do not create an account or submit content without the required authorization.

11. Security and changes

We apply technical and organizational measures proportionate to risk, although no internet-connected system can offer absolute security. We may update this policy when the service or the law changes; the date at the top identifies the current version, and we will provide notice of material changes where required.