Privacy Policy

This Privacy Policy describes how Klipa AI (“Klipa”, “we”) collects, uses, shares and protects your personal data when you use the service available at klipa.ai (the “Service”), in accordance with the General Data Protection Regulation (GDPR). It complements our Terms of Service.

1. Data Controller

The data controller is the operator of the Klipa AI Service (klipa.ai). For any questions about your data or to exercise your rights: support@klipa.ai.

2. Data Collected

We collect the following categories of data:

3. Purposes of Processing

Your data is used to:

• provide, operate and secure the Service and its editing/processing features;
• manage your account, subscription and billing;
• send you notifications related to file processing and your account;
• ensure security, prevent fraud and moderate content (including automated detection of adult content);
• comply with our legal and accounting obligations;
• measure the audience of our website and app, on our own servers;
• measure how well our advertising performs and show you relevant ads, including retargeting, through Google, Meta (Facebook and Instagram), TikTok and Snapchat — with your consent where it is required, and with a right to object everywhere else.

We never sell your personal data. Klipa does not use your content to train its own models.

4. Tracking: Categories, Regime and Withdrawal

We split tracking into three categories, on one simple criterion: who receives the data. This section applies to the website and to the mobile app.

a. Running the service (no consent required)

Without these, the service cannot do what you came for.

b. Klipa audience measurement (on by default, you may object anywhere)

We count pages viewed, tools used and visit duration on our own servers, using a measurement identifier that is renewed at least every 13 months. This data is shared with no third party, is not combined with other services, and is not used to follow you from one site to another. On those conditions, the law allows this measurement without prior consent: it is therefore active by default, including in Europe, and you can switch it off at any time (see "How to change your choices" below).

c. Third-party measurement and advertising (subject to your choice)

This category covers everything that leaves for someone other than us.

We do not sell this data. We never send ad networks the content of your files, your transcripts, your subtitles or your exports.

The regime depends on where you connect from

A banner lets you accept or refuse category (c), whatever your country. What happens before you answer depends on your country of connection:

• European Economic Area, United Kingdom, Switzerland and French overseas territories: category (c) is off until you accept it: no third-party measurement or advertising cookie is set. Google Analytics only receives signals without cookies or identifiers (page viewed, device type, country), used to produce estimated aggregate statistics. On iPhone and iPad, Apple's permission prompt — App Tracking Transparency — collects your answer in the app; on Android, a banner the first time you open the app.
• All other countries: category (c) is on from your arrival; if you refuse it, no third-party measurement or advertising cookie is used from then on, and Google Analytics only receives the cookieless signals described above. On iPhone and iPad, Apple's prompt is shown to you regardless.

If your country cannot be determined, we apply the most protective regime. If your browser sends the Global Privacy Control signal, we treat it as a refusal of category (c) and Google Analytics is not loaded at all, without asking you anything.

How to change your choices, at any time

• On the website: the "Tracking preferences" link at the bottom of every page reopens the settings, whatever your country.
• In the mobile app: Account screen, privacy section — two switches, one for audience measurement, one for advertising and retargeting.
• On iPhone and iPad: the advertising identifier is in any case only readable after an explicit system prompt (App Tracking Transparency). Declining it is enough to prevent this, independently of your Klipa settings. You can change your mind in Settings → Privacy & Security → Tracking.

Withdrawal applies going forward: it does not undo processing already carried out. We keep a timestamped record of your successive choices — only the date, the country and the categories accepted or refused — so that we can demonstrate what you had decided. You can request a copy by writing to support@klipa.ai.

5. Artificial Intelligence Processing

The Service uses AI technologies. Processing is split as follows:

• Processed locally on our servers in Europe: file conversion and editing (cut, compress, reframe, etc.) and audio transcription. Your video and audio files are not transmitted to third-party AI providers.
• Processed by third-party AI providers: for subtitle translation, video translation, script and hashtag generation, the relevant text (transcripts, subtitles, topics you enter) is sent to a language-model provider to produce the result. For video dubbing, voice synthesis sends only the translated text — no video or audio track is sent — to a third-party text-to-speech service (OpenAI; Microsoft Edge TTS as fallback).

These features are triggered by you: you only use them if you choose to. AI results are provided “as is” (see our Terms). Processing by these providers is governed by their own privacy policies.

6. Recipients and Sub-processors

We transmit to sub-processors only the data strictly necessary for their service. This list may change; any update will be reflected on this page.

7. Transfers Outside the European Union

Some sub-processors are located outside the European Economic Area, including in the United States (including OpenAI, the dubbing voice-synthesis provider) and China (for the language-model provider). These transfers are governed, as applicable, by an adequacy decision, the European Commission's Standard Contractual Clauses, or the necessity of performing the service you requested (Article 49 GDPR). By using the translation, video dubbing, script or hashtag features, you are informed that the relevant text may be processed outside the EU.

8. Retention Periods

9. Payment

Payments are processed by Stripe. We do not store any credit card information. See Stripe's Privacy Policy.

10. Security

Communications are encrypted via HTTPS (TLS 1.3). Authentication uses JWT tokens, passwords are hashed (bcrypt), and files are stored on secure servers with restricted access. Despite our efforts, no transmission over the Internet is entirely infallible; we cannot guarantee absolute security.

11. Your Rights (GDPR)

You have the following rights:

• Access — obtain a copy of your data;
• Rectification — correct your information from your settings;
• Erasure — delete your account and your data;
• Portability — export your data in a structured format;
• Restriction and objection to processing (in particular based on legitimate interest);
• Withdrawal of consent at any time (cookies, marketing);
• Automated decisions — you are not subject to any decision producing legal effects based solely on automated processing.

To exercise your rights: support@klipa.ai. We will respond within one month. You may file a complaint with your local data protection authority.

12. Minors

The Service is not intended for persons under 18 (or the applicable digital age of majority). We do not knowingly collect data from minors; if we became aware of such data, it would be deleted.

13. Connector for AI Assistants (Claude, ChatGPT and Others)

Klipa offers a connector (MCP protocol, https://mcp.klipa.ai/mcp) that lets an AI assistant you use work with Klipa's tools on your account, under the same conditions as on the website.

Your consent. The connector only works after you authorize it on a Klipa page. You can withdraw this authorization at any time from klipa.ai/mcp; it ends on its own no later than 180 days after it was given. The assistant can never pay, change your plan or delete anything in your account.

What we record:

• the name of the authorized assistant, the permissions granted, and the dates of authorization and last use;
• access keys, only as a fingerprint (hash), never in clear text;
• for each job started by the assistant: the date, the requested action and its outcome, without the content of your videos or conversations, kept for 400 days;
• upload links created for you: valid for 24 hours, deleted 7 days after they expire.

What we do not collect. We do not read your conversations, nor the assistant's memory or history. We only receive what the assistant sends to carry out your request: the link or file of the video and the chosen settings (on ChatGPT, the file you attached yourself and asked it to use).

Your videos and results are processed and kept exactly as on the website (retention periods in section 8).

What the assistant receives. The connector returns the status of jobs, download links valid for 72 hours and, depending on the tool, information taken from the video (clip titles and summaries, an excerpt of the transcript). This information is then processed by the assistant's provider (Anthropic, OpenAI…) under its own privacy policy.

Deletion. Deleting your Klipa account deletes every authorization given to assistants.

14. Changes

We may modify this Policy. The applicable version is the one published on this page. In case of a substantial change, we will inform you by an appropriate means.

15. Contact

For any questions regarding data protection: support@klipa.ai.