Privacy Policy

Clipstar (clipstar.io) turns a one-sentence description of a niche into a series of short videos and posts them to the channels you connect. In this policy, “we”, “us” and “Clipstar” mean the operator of that service, and “you” means the person using it.

This policy explains what personal information we collect, why, who we share it with, and the choices you have. For any question about it, write to support@clipstar.io.

Account details. Your name and email address, and whether your email is verified. If you sign up with a password we store it only as a salted one-way hash; we cannot read it. If you sign in with Google we receive your name, email address and Google’s stable account identifier, and nothing else from your Google account.

What you create. The descriptions, series settings, characters, scripts, schedules, and the voices, images, captions and videos generated for you, together with your edits and review notes.

Connected channels. If you connect YouTube, TikTok or Instagram, we receive the access needed to post on your behalf (an authorisation token, stored securely) and basic details about the channel such as its name and handle. We only use it to publish what you approve or schedule. You can disconnect at any time.

Credits and purchases. A record of the credits you were given, bought, spent and had refunded. When paid credit packs are available, payment is handled by a payment provider; we receive confirmation of the purchase but never your full card number.

Technical data. When you use the service our servers record your IP address, browser and device type (user-agent), the address requested, the response status, timing and a request identifier. We also record errors. We use this to keep the service running, find faults and protect it from abuse.

Messages from us. We email you what the service needs: verification and password-reset codes, a welcome message and notices about your account. We do not send marketing email without asking you first.

• To create and secure your account, and to sign you in.
• To generate, store, show and publish your series and episodes, and to run the credit system.
• To send the emails described above.
• To keep the service reliable and safe: monitoring, debugging, rate limiting and preventing fraud and abuse.
• To improve the product, using aggregated or de-identified information where we can.
• To meet legal obligations and to enforce our Terms of Service.

Under laws such as the GDPR we rely on these legal bases: performing our contract with you, our legitimate interest in running and securing the service, your consent where we ask for it, and legal obligation.

We do not sell your personal information, and we do not use it for advertising.

• Session cookie (sid). Keeps you signed in. It is HttpOnly, so scripts on the page cannot read it, and it holds a random identifier only. It lasts up to 30 days and renews while you use the service. It is strictly necessary, so it does not need consent.
• Preferences in your browser. Your light/dark choice, and for now the series, episodes and credits shown in your workspace, are kept in your browser’s local storage on your device.

We do not use advertising cookies or third-party analytics trackers.

We share personal information only as needed to run the service, with:

• Infrastructure and hosting providers that run our servers, databases and networking.
• An email provider that delivers our messages to you.
• A monitoring provider that receives our logs, metrics and traces so we can keep the service healthy.
• AI providers that turn your descriptions into scripts, voices, images and video. They receive the text and references needed to make each episode.
• A payment provider, when paid credit packs are available.
• The platforms you connect (YouTube, TikTok, Instagram), which receive the videos and details you choose to publish. What they do with it is governed by their own policies.
• Authorities and advisers when the law requires it, or to protect our rights, our users or the public.
• A buyer or successor, if we are part of a merger, acquisition or sale of assets. We would tell you first.

These providers act on our instructions and may use the information only to provide their service to us.

Signing in with Google gives us only your name, email address and Google’s account identifier. We use them to create and secure your account.

If you connect a YouTube channel, we use the access you grant solely to upload and schedule the videos you approve and to read your channel’s basic details. We do not use it for anything else, we do not sell it, and we do not let people read it except as needed to provide the service, for security or to comply with the law.

Clipstar’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. By connecting YouTube you also agree to the YouTube Terms of Service, and Google’s handling of your data is described in the Google Privacy Policy.

You can withdraw our access at any time from the Channels screen, or in your Google account at myaccount.google.com/permissions.

We keep your account and content while your account is open. Verification and reset codes stop working after 10 minutes and are stored only as a one-way hash. Server logs are kept for a limited period needed for security and debugging, then deleted or anonymised.

When you ask us to delete your account we delete your personal information and content, except what we must keep to meet legal, tax or security obligations or to resolve disputes. Backups are overwritten on their normal cycle.

Traffic uses HTTPS. Passwords are hashed with a modern password-hashing algorithm. Sign-in uses an opaque, HttpOnly session cookie rather than tokens kept in the page, sign-up and sign-in attempts are rate limited, and access to production systems is restricted. No online service is perfectly secure, so please use a strong, unique password and tell us at once if you think your account has been accessed without permission.

Depending on where you live (for example under the GDPR, the UK GDPR or the California Consumer Privacy Act) you may have the right to access the information we hold about you, correct it, delete it, receive a copy, object to or restrict some uses, and withdraw consent you gave. You also have the right to complain to your data-protection authority.

To use any of these rights, including deleting your account, write to support@clipstar.io from the email address on the account. We will reply within the time the law gives us, normally within 30 days. You can change your name and email in Settings, and disconnect any channel from the Channels screen.

Our providers may process information in countries other than yours. Where the law requires it, we use safeguards such as standard contractual clauses so that your information stays protected.

Clipstar is for people who are at least 16 years old, or older where the law of your country sets a higher age of digital consent. We do not knowingly collect information from younger children. If you believe a child has given us information, write to us and we will delete it.

We may update this policy as the service changes. When we make a material change we will tell you, for example by email or in the app, before it takes effect. The date at the top shows when it was last revised.

Questions, requests or complaints about privacy: support@clipstar.io.