Privacy Policy

This Privacy Policy describes how Klipa AI (“Klipa”, “we”) collects, uses, shares and protects your personal data when you use the service available at klipa.ai (the “Service”), in accordance with the General Data Protection Regulation (GDPR). It complements our Terms of Service.

1. Data Controller

The data controller is the operator of the Klipa AI Service (klipa.ai). For any questions about your data or to exercise your rights: support@klipa.ai.

2. Data Collected

We collect the following categories of data:

3. Purposes of Processing

Your data is used to:

• provide, operate and secure the Service and its editing/processing features;
• manage your account, subscription and billing;
• send you notifications related to file processing and your account;
• ensure security, prevent fraud and moderate content (including automated detection of adult content);
• comply with our legal and accounting obligations;
• measure the audience of our website and app, on our own servers;
• measure how well our advertising performs and show you relevant ads, including retargeting, through Google, Meta (Facebook and Instagram), TikTok and Snapchat — with your consent where it is required, and with a right to object everywhere else.

We never sell your personal data. Content you upload from November 3, 2026 may also be used to improve our services, including by training or fine-tuning the tools that run them (legitimate interest). It is never sold, never used for advertising and never made public. You can object at any time by writing to support@klipa.ai: your content will then only be used to produce the results you request. Objection applies to the future; an improvement already made is not undone.

4. Tracking: Categories, Regime and Withdrawal

We split tracking into three categories, on one simple criterion: who receives the data. This section applies to the website and to the mobile app.

a. Running the service (no consent required)

Without these, the service cannot do what you came for.

b. Klipa audience measurement (on by default, you may object anywhere)

We count pages viewed, tools used and visit duration on our own servers, using a measurement identifier that is renewed at least every 13 months. This data is shared with no third party, is not combined with other services, and is not used to follow you from one site to another. On those conditions, the law allows this measurement without prior consent: it is therefore active by default, including in Europe, and you can switch it off at any time (see "How to change your choices" below).

c. Third-party measurement and advertising (subject to your choice)

This category covers everything that leaves for someone other than us.

We do not sell this data. We never send ad networks the content of your files, your transcripts, your subtitles or your exports.

The regime depends on where you connect from

A banner lets you accept or refuse category (c), whatever your country. What happens before you answer depends on your country of connection:

• European Economic Area, United Kingdom, Switzerland and French overseas territories: category (c) is off until you accept it: no third-party measurement or advertising cookie is set. Google Analytics only receives signals without cookies or identifiers (page viewed, device type, country), used to produce estimated aggregate statistics. On iPhone and iPad, Apple's permission prompt — App Tracking Transparency — collects your answer in the app; on Android, a banner the first time you open the app.
• All other countries: category (c) is on from your arrival; if you refuse it, no third-party measurement or advertising cookie is used from then on, and Google Analytics only receives the cookieless signals described above. On iPhone and iPad, Apple's prompt is shown to you regardless.

If your country cannot be determined, we apply the most protective regime. If your browser sends the Global Privacy Control signal, we treat it as a refusal of category (c) and Google Analytics is not loaded at all, without asking you anything.

How to change your choices, at any time

• On the website: the "Tracking preferences" link at the bottom of every page reopens the settings, whatever your country.
• In the mobile app: Account screen, privacy section — two switches, one for audience measurement, one for advertising and retargeting.
• On iPhone and iPad: the advertising identifier is in any case only readable after an explicit system prompt (App Tracking Transparency). Declining it is enough to prevent this, independently of your Klipa settings. You can change your mind in Settings → Privacy & Security → Tracking.

Withdrawal applies going forward: it does not undo processing already carried out. We keep a timestamped record of your successive choices — only the date, the country and the categories accepted or refused — so that we can demonstrate what you had decided. You can request a copy by writing to support@klipa.ai.

5. Artificial Intelligence Processing

The Service uses artificial intelligence technologies, on our own servers and with specialised technical providers (artificial intelligence, computing).

• What may be sent to them: depending on the tool you use, only the elements needed for processing — text (transcripts, subtitles, topics you enter), audio track, images extracted from your video or the video itself.
• For what purpose: to produce the result you request and, for content uploaded from November 3, 2026, to improve our services (see section 3).

These features are triggered by you: you only use them if you choose to. AI results are provided “as is” (see our Terms). Processing by these providers is governed by their own privacy policies.

6. Recipients and Sub-processors

We transmit to sub-processors only the data strictly necessary for their service. For artificial intelligence and computing providers we list categories; their identity is given to anyone who asks for it when exercising their right of access (Art. 15 GDPR). This list may change; any update will be reflected on this page.

7. Transfers Outside the European Union

Some providers are located outside the European Economic Area, notably in the United States and China. These transfers are governed, as applicable, by an adequacy decision, the European Commission's Standard Contractual Clauses, or the necessity of performing the service you requested (Article 49 GDPR). By using the artificial intelligence features, you are informed that the elements needed for processing may be processed outside the EU.

8. Retention Periods

9. Payment

Payments are processed by Stripe. We do not store any credit card information. See Stripe's Privacy Policy.

10. Security

Communications are encrypted via HTTPS (TLS 1.3). Authentication uses JWT tokens, passwords are hashed (bcrypt), and files are stored on secure servers with restricted access. Despite our efforts, no transmission over the Internet is entirely infallible; we cannot guarantee absolute security.

11. Your Rights (GDPR)

You have the following rights:

• Access — obtain a copy of your data;
• Rectification — correct your information from your settings;
• Erasure — delete your account and your data;
• Portability — export your data in a structured format;
• Restriction and objection to processing (in particular based on legitimate interest);
• Withdrawal of consent at any time (cookies, marketing);
• Automated decisions — you are not subject to any decision producing legal effects based solely on automated processing.

To exercise your rights: support@klipa.ai. We will respond within one month. You may file a complaint with your local data protection authority.

12. Minors

The Service is not intended for persons under 18 (or the applicable digital age of majority). We do not knowingly collect data from minors; if we became aware of such data, it would be deleted.

13. Connector for AI Assistants

Klipa offers a connector (MCP protocol, https://mcp.klipa.ai/mcp) that lets an AI assistant you use work with Klipa's tools on your account, under the same conditions as on the website.

Your consent. The connector only works after you authorize it on a Klipa page. You can withdraw this authorization at any time from klipa.ai/mcp; it ends on its own no later than 180 days after it was given. The assistant can never pay, change your plan or delete anything in your account.

What we record:

• the name of the authorized assistant, the permissions granted, and the dates of authorization and last use;
• access keys, only as a fingerprint (hash), never in clear text;
• for each job started by the assistant: the date, the requested action and its outcome, without the content of your videos or conversations, kept for 400 days;
• upload links created for you: valid for 24 hours, deleted 7 days after they expire.

What we do not collect. We do not read your conversations, nor the assistant's memory or history. We only receive what the assistant sends to carry out your request: the link or file of the video and the chosen settings (on some assistants, the file you attached yourself and asked it to use).

Your videos and results are processed and kept exactly as on the website (retention periods in section 8).

What the assistant receives. The connector returns the status of jobs, download links valid for 72 hours and, depending on the tool, information taken from the video (clip titles and summaries, an excerpt of the transcript). This information is then processed by the provider of the assistant you use, under its own privacy policy.

Deletion. Deleting your Klipa account deletes every authorization given to assistants.

14. Changes

We may modify this Policy. The applicable version is the one published on this page. In case of a substantial change, we will inform you by an appropriate means.

15. Contact

For any questions regarding data protection: support@klipa.ai.