Privacy Policy

Data Controller

Clipflow is developed and operated by Sergey Bliumental, an independent software developer based in Cyprus. Contact: [email protected].

Data we collect

• Account data: your email address and authentication data, managed by our authentication provider (Supabase Auth).
• Your content: ideas, prompts, scripts, and the images, video clips, and composed videos generated in the Service at your request.
• Social account connection data: when you connect a social media account via the platform's official OAuth flow, we store the platform account identifier, display name, granted scopes, and the OAuth tokens. Tokens are stored encrypted at rest (AES-256-GCM) and are never exposed through the API or written to logs.
• Publication metadata: titles, descriptions, and captions rendered from your templates, publication timestamps, and the platform post identifiers of publications made on your behalf.
• Support communications: messages you send to our support address.

How we use data

• To operate the Service: generate the content you request and maintain your queues and schedules.
• OAuth tokens are used exclusively to publish the content you queued to your own accounts and to read basic account identity (such as the account name) at connection time. We do not read, modify, or delete any other content in your social accounts.
• Content is published only upon your explicit action or according to a schedule you have explicitly configured.
• To respond to your support requests.

OAuth scopes

• YouTube: youtube.upload (uploading your videos) and youtube.readonly (reading your channel identity at connection time).
• TikTok (upon integration launch): user.info.basic (basic profile identity) and video.publish (publishing your videos).
• Other platforms: scopes are requested at integration launch and are limited to the minimum required for publishing.

AI providers

Content is generated using third-party generative AI models (including, for example, OpenAI, Seedance, and Kling AI), accessed directly or via infrastructure providers. Your prompts and generation inputs are transmitted to these providers solely to produce your content, subject to the providers' own terms.

Sharing

• We do not sell your data.
• We do not use your data to train AI models.
• We do not transfer your data to third parties, except: (a) to the social platforms' official APIs, to perform the publishing you requested; (b) to the AI providers listed above, to generate your content; and (c) where required by applicable law.

Google API Services

Clipflow's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

YouTube API Services

Clipflow uses YouTube API Services to publish videos and manage publication metadata on YouTube channels authorized by the user.

Google's Privacy Policy is available here.

Users can revoke Clipflow's access at any time through Google Account permissions or by disconnecting YouTube in Clipflow.

Data retention

We retain your data for as long as your account is active. Disconnecting a social account deletes its stored tokens immediately. You can request deletion of your account and all associated data at any time — see the Data Deletion Policy.

Security

• OAuth tokens are encrypted at rest (AES-256-GCM).
• Data is transmitted over encrypted connections (TLS).
• Access to production data is restricted to what is necessary to operate the Service.

Changes

We may update this policy. The "Last updated" date at the top reflects the latest revision; material changes will be reflected on this page.

Contact

[email protected]