Privacy Policy

Effective date: 18 June 2026

This Privacy Policy explains how Klipt ("Klipt", "we", "us", or "our") collects, uses, and shares personal data when you use the Klipt video generation service (the "Service"). It is written to meet the requirements of the EU General Data Protection Regulation (GDPR) and equivalent laws.

1. Data controller

Klipt, established in France, is the data controller for personal data processed through the Service. You can contact us about privacy at hello@klipt-ai.com.

2. Personal data we collect

• Account data: name, email address, and authentication identifiers.
• Billing data: purchase history, credit balance, and limited payment metadata. Full card details are collected and stored by Stripe, not by us.
• Inputs you submit: the URLs, text, images, brand assets, and other material you provide so we can generate videos, together with brand material we read from the URLs you supply.
• Generated content: scripts, voice-overs, and rendered videos associated with your account.
• Usage and technical data: log data, IP address, device and browser information, timestamps, and event data needed to operate and secure the Service.
• Communications: messages you send us, such as support requests.

Do not submit special-category personal data or other people's personal data through Inputs unless you have a lawful basis to do so.

3. How and why we use data (legal bases)

| Purpose | Legal basis (GDPR Art. 6) | |---|---| | Provide the Service: read brand assets, draft scripts, render videos, deliver Output | Performance of a contract | | Process payments and manage credits | Performance of a contract; legal obligation | | Secure the Service, prevent abuse and fraud | Legitimate interests | | Provide support and respond to requests | Performance of a contract; legitimate interests | | Improve and debug the Service | Legitimate interests | | Send service and, where applicable, marketing communications | Legitimate interests or consent | | Comply with legal and tax obligations | Legal obligation |

Where we rely on legitimate interests, we balance those interests against your rights. You may object at any time (see Section 8).

We do not use your Inputs or Output to train our own or third parties' foundation models. We instruct our AI and voice subprocessors not to use your content for training where their terms allow such instruction.

4. Automated processing

The Service uses automated AI models to read brand material, generate scripts, and produce videos. This processing creates the product you requested; it does not produce legal or similarly significant decisions about you within the meaning of GDPR Article 22. A human (you) reviews and approves the script before rendering.

5. Subprocessors and recipients

We share personal data with service providers who process it on our behalf under data processing agreements:

• Supabase — database, authentication, and storage (hosting region as configured for the project).
• Stripe — payment processing and billing.
• Scaleway — cloud hosting and compute for rendering, based in the EU.
• AI and text-to-speech providers — used to analyze brand material, generate scripts, and produce voice-overs. Inputs and prompts necessary for generation are sent to these processors.

We also disclose data to authorities or advisors where required by law or to protect our rights. We do not sell personal data.

A current list of subprocessors is available on request at hello@klipt-ai.com.

6. International transfers

We prioritize EU-based infrastructure (Supabase region as configured, Scaleway in the EU). Where a subprocessor—such as an AI or voice provider—processes data outside the European Economic Area, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision. You can request information about these safeguards at hello@klipt-ai.com.

7. Retention

We keep account and billing data for as long as your account is active and as required to meet legal, tax, and accounting obligations. We keep Inputs and generated content for as long as needed to provide the Service and to let you access your videos; you may request deletion of specific jobs at any time. Logs are kept for a limited period for security and debugging. When data is no longer needed, we delete or anonymize it.

8. Your rights

Subject to applicable law, you have the right to access, rectify, erase, restrict, and port your personal data, to object to processing based on legitimate interests, and to withdraw consent where processing is based on consent. To exercise these rights, contact hello@klipt-ai.com. We will respond within the timeframes required by law.

You may also lodge a complaint with your local supervisory authority. In France, this is the Commission Nationale de l'Informatique et des Libertés (CNIL).

9. Security

We use technical and organizational measures appropriate to the risk, including encryption in transit, access controls, and reputable infrastructure providers. No system is perfectly secure; we cannot guarantee absolute security.

10. Children

The Service is not directed to children and is intended for users aged 18 and over. We do not knowingly collect personal data from children.

11. Cookies

We use cookies and similar technologies as described in our Cookie Policy.

12. Changes

We may update this Policy from time to time. If changes are material, we will provide reasonable notice. The "Effective date" above shows the latest version.

13. Contact

For privacy questions or requests, contact Klipt at hello@klipt-ai.com, France.