Privacy Policy

1. What we collect

• Account: your email address and sign-in details (handled by Supabase Auth). If you press Continue with Google, Google shares your email (and name, if you allow it). We never receive your Google password.
• Your content: the topics and prompts you type, the settings you choose (niche, voice, look, series recipes) and the videos we generate for you: scripts, narration audio, captions, images and MP4 files.
• Usage and billing: your credit balance, which videos you made, and payment status. Card details are entered on Stripe and never reach our servers.
• YouTube connection (only if you choose to connect): your YouTube channel name and ID, and an access token that lets us upload videos you choose to post. See section 4.
• Technical data: basic logs (time, errors, IP address) that our hosting and security tools keep, and the cookies described in section 7.

2. How we use it

• To create, store, preview and deliver your videos and to run your series and schedules.
• To post a video to your YouTube channel when you press Post, or automatically for a series where you switched on auto-post.
• To manage credits, process payments, prevent abuse and keep the service secure and working.
• To answer your support requests and send service messages (for example sign-in emails).

We do not sell your personal data and we do not use your videos or prompts to show you advertising.

3. Services that process your data

We use trusted providers to run ClipFaceless. They receive only what is needed for their part:

• Supabase: database, sign-in and file storage.
• OpenAI: writes scripts and scene descriptions, creates images and transcribes narration to time the captions. Your topic text and generated script are sent to it.
• ElevenLabs: turns the script into narration.
• fal.ai: animates scene images, only when you use Character motion.
• Pexels and Pixabay: stock footage search (search words only).
• Stripe: payments.
• Inngest: runs our background jobs (event ids only, not your content).
• Google: if you sign in with Google (email / name) and, separately, if you connect YouTube to post.
• Hosting and email providers that keep the site online and deliver sign-in emails.

We may also disclose data if the law requires it or to protect our users and service.

4. Google and YouTube data

If you sign in with Google, we only receive the email (and name) Google sends for that sign-in. That is separate from posting.

If you press Connect YouTube, ClipFaceless uses YouTube API Services. By connecting you also agree to be bound by the YouTube Terms of Service, and Google handles your data under the Google Privacy Policy.

• What we ask for: permission to upload videos to your channel and to read your channel name and ID so we can show which channel is connected.
• What we store: your channel name and ID, and an encrypted refresh token. We do not store your Google password and we do not read your private videos, comments, analytics or subscribers.
• What we do with it: upload only the videos you choose to post (or that belong to a series where you switched on auto-post), with the title, caption and hashtags shown to you. We do not use this data for anything else.
• Limited Use: our use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell this data, do not use it for advertising, and do not let humans read it except with your consent, for security or to comply with law.
• How to disconnect: press Disconnect on the Series page (we delete the token and revoke access at Google), or remove ClipFaceless at myaccount.google.com/permissions. Videos already posted stay on YouTube until you delete them there.

5. How long we keep data

• Your account, videos and series are kept until you delete them or your account.
• Temporary working files made during generation (narration, scene images) are removed when you delete the video or your account and in periodic clean-ups.
• YouTube tokens are deleted when you disconnect, delete your account, or if Google tells us access was revoked.
• Payment and tax records are kept as long as the law requires.

6. Your choices and rights

• You can delete any video from your dashboard and disconnect YouTube at any time.
• You can ask us to access, correct, export or delete your data, or to delete your account, by emailing privacy@clipfaceless.com from your account email. We reply within 30 days.
• Depending on where you live (for example the EU, UK, India or California) you may have additional rights, such as objecting to processing or complaining to a data protection authority. We honour them.

7. Cookies and similar storage

• Sign-in cookies (Supabase) keep you logged in. They are necessary for the service.
• Connection check cookie (yt_oauth_state) lasts 10 minutes while you connect YouTube, to protect against forged requests.
• Theme setting is saved in your browser (local storage) to remember Dark or Normal mode.

We do not use advertising or cross-site tracking cookies.

8. Security

Data is sent over HTTPS. Access to your rows is limited to your account, YouTube tokens are encrypted at rest and are never sent to your browser, and payment details stay with Stripe. No system is perfectly secure; if a breach affects you we will tell you as the law requires.

9. Children

ClipFaceless is not for children under 16 (or the minimum age in your country). We do not knowingly collect their data. If you believe a child has given us data, email us and we will delete it.

10. International transfers

Our providers may process data in countries other than yours. Where required we rely on safeguards such as standard contractual clauses.

11. Changes and contact

We will update this page when our practices change and change the date above; for material changes we will also tell you in the app or by email. Questions: privacy@clipfaceless.com · A-Square Info Solutions.