Privacy Policy

Effective Date: January 1, 2025
Last Updated: January 1, 2025

1. Introduction

MULTTECH LLC operates ClipToContent, an AI-powered platform for transcribing and generating content from audio and video files. This Privacy Policy explains how we collect, use, and protect your personal information.

For EU users: We comply with GDPR.
For California users: We comply with CCPA/CPRA.

2. Data Controller

3. Information We Collect

3.1 Information You Provide

• Account Information: Email address, name (optional), password, profile preferences
• Payment Information: Processed by Stripe (we don't store full card numbers), billing address, transaction history
• User Content: Audio/video files, URLs, transcripts, summaries, blog posts, newsletters, and edits

3.2 Automatically Collected Information

• Usage data (pages visited, features used, interactions)
• Device information (IP address, browser, OS, device identifiers)
• Cookies and session tokens (see our Cookie Policy)
• Server logs (timestamps, errors, API requests)

4. How We Use Your Information

We use your information to:

• Provide the Service (authenticate, process content, generate outputs, store data, process payments)
• Improve the Service (analyze usage, optimize performance, develop features)
• Ensure security and compliance (detect fraud, enforce policies, comply with legal obligations)
• Communicate with you (transactional emails, service updates, marketing with consent)

5. Legal Bases for Processing (GDPR)

If you are in the European Union, we process your data based on:

• Contract Performance: To provide the Service you requested
• Legitimate Interests: To improve the Service, ensure security, and analyze usage
• Legal Obligation: To comply with laws and regulations
• Consent: For marketing communications (you may withdraw consent anytime)

6. How We Share Your Information

We do not sell your personal information. We share data only with:

• Service Providers: Supabase (database/auth), Stripe (payments), OpenAI/Anthropic (AI generation), Replicate/Deepgram (transcription), hosting providers. These vendors process data on our behalf and are contractually obligated to protect your information.
• Legal Requirements: When required by law, regulation, or lawful request
• Business Transfers: In the event of a merger, acquisition, or sale of assets (with notice)

Important: Third-party AI providers process your content to provide services. We recommend reviewing each provider's privacy policy. We are not responsible for third-party data practices beyond our contractual agreements.

7. Data Retention

We retain your information for as long as necessary to provide the Service and fulfill the purposes described in this policy, unless a longer retention period is required by law.

• Account Data: While your account is active. Deleted within 90 days after account deletion, except as required for legal purposes.
• User Content: Stored while your account is active. Permanently deleted 30 days after account deletion.
• Billing Data: Retained for 7 years to comply with tax and accounting regulations.
• Logs: Retained for 90 days for security and debugging.

8. Data Security

We implement reasonable technical and organizational measures to protect your information:

• Encryption in transit (TLS/HTTPS) and at rest where feasible
• Restricted access on a need-to-know basis
• Secure authentication (passwords hashed via Supabase Auth)
• Regular security audits and updates
• Vendor security standards (Supabase, Stripe, etc.)

However, no system is 100% secure. We cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your password. If you believe your account has been compromised, contact us immediately at support@cliptocontent.ai.

9. Your Privacy Rights

9.1 General Rights (All Users)

• Access: Request a copy of your personal information
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your account and data (subject to legal retention requirements)
• Portability: Request your data in a machine-readable format
• Opt-Out: Unsubscribe from marketing emails

9.2 GDPR Rights (EU/EEA Users)

If you are in the EU/EEA, you have additional rights under GDPR:

• Right to access, rectification, erasure ("right to be forgotten")
• Right to restriction of processing and data portability
• Right to object to processing and withdraw consent
• Right to lodge a complaint with your local data protection authority

9.3 CCPA/CPRA Rights (California Users)

If you are a California resident, you have rights under CCPA/CPRA:

• Right to know what personal information we collect and how we use it
• Right to delete your personal information (subject to exceptions)
• Right to correct inaccurate information
• Right to opt-out of sale/sharing (we do not sell personal information)
• Right to non-discrimination for exercising your rights

9.4 How to Exercise Your Rights

To exercise any of these rights, contact us at privacy@cliptocontent.ai with:

• Your account email
• Which right(s) you wish to exercise
• Any supporting information

We will respond within 30 days (or as required by applicable law). We may need to verify your identity before processing your request.

10. Cookies and Tracking

We use cookies for authentication, preferences, and analytics. See our Cookie Policy for details. You can control cookies through your browser settings.

11. International Data Transfers

ClipToContent is operated from the United States. If you are located outside the U.S., your information will be transferred to, stored, and processed in the United States and other countries where our service providers operate.

For EU/EEA users: We use EU-approved Standard Contractual Clauses (SCCs) with our service providers to ensure adequate data protection. By using the Service, you consent to the transfer of your information to the U.S. and other countries.

12. Children's Privacy

The Service is not directed to individuals under 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected information from a child under 18, we will delete that information promptly.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date, notify you via email, and/or display a notice on the Service. Your continued use after changes become effective constitutes acceptance of the updated Privacy Policy.

14. Contact Us

For EU users: If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority (supervisory authority).