Privacy

ClipoStack is in beta. This page explains, in plain language, what we collect, where it stored, and the outside services we rely on. It's meant to be orientation — not a replacement for your workplace's rules or any agreement your host (cloud or employer) has in place.

Signing in

The Studio (Videos page, uploads, assets, exports) requires an account. You can sign in with email and password (beta — invite code required). Passwords are stored as a salted hash; we never see your plaintext password.

Public pages (Home, How it works, this Privacy page, the beta signup form) can be read without signing in.

What stays on your device

After you sign in, the site uses a normal session cookie so you stay signed in between visits. Your browser may also keep small preferences in local storage — for example, which video you last opened, theme choice, or the auto-pipeline video id you're waiting on.

When the Studio talks to the API, it sends a client id so usage counters and billing line up with the right person: once you're signed in, that id is tied to your account. Clearing site data or signing out invalidates both the cookie and any preferences.

What we keep on the server

When you use the Studio, our backend stores:

  • Account record — your email, a hashed password (if you registered with email), and subscription tier.
  • Videos — uploaded source videos, transcripts, edit plans, your B-roll choices, and rendered exports. Stored on the backend's file system under your acccount.
  • Stock clips you save — stock files you download through the Studio are kept in your personal library so you can reuse them across videos.
  • Monthly usage counters — how many source minutes, renders, stock searches, uploads, and plan generations you've used, so we can show your remaining quota. Resets at the start of each calendar month in your browser's timezone (sent as X-Usage-Timezone).
  • Beta requests — when you submit the contact/beta form, we store your email and message.

You can delete a video at any time from the Studio, which removes all relevant files for it. You can also delete your account from Profile → Delete my account; that wipes your account record, video files, and usage counters.

Outside services we use

Some features rely on third-party sub-processors. Each has its own privacy terms; the relevant parts of your data may pass through them when you use those features. We describe them by category below, and will identify the specific vendors on request — contact us via contact form.

  • An AI/ML inference provider — transcription and AI edit plans. Your audio track and transcript are sent to the provider's API for processing.
  • A licensed stock-video provider — stock footage search. Your search terms and the clip ids you download are sent to the provider.
  • A PCI-compliant payment processor — subscriptions, one-off payments, and usage-based billing. Payment details are handled entirely by the processor; we store only a customer/subscription id and your current tier.
  • Google / Apple / Microsoft — OAuth sign-in, when you pick that option. They return an email and stable id to us.
  • Email delivery (SMTP) — registration confirmations, password-reset links, and beta-request notifications go out through our configured SMTP provider.
  • Analytics — enabled only when the site operator configures it. Collects anonymised page-view metrics; no studio content leaves the browser through analytics.

Your controls

  • Sign out to end your session on this browser.
  • Delete individual videos from the Videos page.
  • Delete your entire account from Profile → Delete my account.
  • Downgrade back to the free tier at any time from the upgrade menu in the studio header — this stops future charges. For invoice copies, or other billing questions, contact us via contact form.
  • Have a question about your data? Send us a note via contact form.