Privacy Policy
Effective date: August 29, 2025
We value your privacy. This Privacy Policy explains how Cutflux ("Cutflux," "we," "our," or "us") collects, uses, shares, and protects information in connection with our websites, apps, APIs, and related services (the "Services"). If you do not agree with this Policy, you should not use the Services.
Controller
The data controller is Cutflux Technologies. Contact: [email protected]. If you contact support about privacy, we may ask for verification to protect your account.
1. Scope & Definitions
- Customer Content: media, audio, video, transcripts, captions, prompts, and other content you upload or process via the Services.
- Personal Data: information that identifies or can reasonably be linked to an individual, as defined by applicable law (e.g., GDPR/UK GDPR/CPRA).
- Processing: any operation performed on Personal Data (collection, storage, use, etc.).
This Policy applies to visitors, account holders, and customers. It does not cover third‑party services that you link to (e.g., external video platforms); their privacy practices are governed by their own policies.
2. Information We Collect
We collect the following categories of information:
A. Account & Contact Data
Name, email, password (hashed), profile settings, team/workspace info, communication preferences.
B. Billing & Transactions
Payment instrument details are handled by our payment processors (e.g., Lemon Squeezy or Stripe). We receive limited information like transaction IDs, plan purchased, amount, currency, and status. We do not store full card numbers.
C. Customer Content & Metadata
Files and links you submit for download, transcription, or clipping; generated outputs (e.g., transcripts, captions, clips); and associated metadata (file names, durations, languages). You may delete your content from within the product where features permit.
D. Usage & Technical Data
IP address, device and browser type, operating system, timestamps, pages or endpoints visited, referring URLs, error logs, approximate location (derived from IP), and cookie identifiers or similar technologies.
E. Communications
Support tickets, messages, survey responses, and marketing preferences.
3. How We Use Information
We process Personal Data for:
- Providing the Services (create/secure your account; process jobs; deliver outputs; maintain history). (Legal bases: Contract; Legitimate Interests)
- Payments & Billing (manage purchases, taxes, invoices, refunds, fraud checks). (Contract; Legal Obligation; Legitimate Interests)
- Service Performance & Safety (monitoring, debugging, abuse/spam/malware prevention, rate‑limiting). (Legitimate Interests; Legal Obligation)
- Improvement & Analytics (aggregate statistics, quality and reliability improvements). (Legitimate Interests; Consent where required)
- Communications (service emails, updates, security alerts; marketing with your consent and easy opt‑out). (Contract; Legitimate Interests; Consent)
- Compliance (regulatory, tax, dispute resolution, law enforcement requests). (Legal Obligation; Legitimate Interests)
We do not sell Personal Data. We do not use Customer Content to train general‑purpose foundation models. We may use de‑identified or aggregated data to improve the Services.
4. Sharing & Disclosures
We share Personal Data only with:
- Service Providers / Processors: hosting and infrastructure; storage (S3‑compatible); CDN and security; email delivery; analytics; customer support; payments (e.g., Lemon Squeezy/Stripe). These providers may access Personal Data only to perform services on our behalf and must protect it under contracts.
- Integrations you choose: If you link a third‑party integration, you authorize us to share necessary data to enable that integration.
- Business Transfers: In a merger, acquisition, or sale of assets, data may be transferred consistent with this Policy.
- Legal: Where required by law or to protect rights, safety, and the integrity of the Services.
International transfers may occur; where applicable, we rely on mechanisms such as Standard Contractual Clauses or equivalent safeguards.
5. Retention
We retain Personal Data only as long as necessary for the purposes in this Policy, including legal, accounting, or reporting obligations. Customer Content may be deleted by you; backups purge on rolling cycles subject to technical and legal constraints.
6. Your Rights
Depending on your location, you may have rights to access, rectify, erase, port, restrict or object to processing, and to withdraw consent where processing is based on consent. You can exercise rights by contacting [email protected]. You also have the right to lodge a complaint with your local supervisory authority.
We do not discriminate against individuals for exercising privacy rights.
7. Children
The Services are not directed to children under 16 (or the age required by local law). We do not knowingly collect Personal Data from children. If you believe a child provided Personal Data, contact us to request deletion.
8. Security
We implement reasonable technical and organizational measures to protect Personal Data (encryption in transit, access controls, logging). No system is 100% secure; you are responsible for safeguarding your credentials and using strong passwords.
9. Cookies & Similar Technologies
We use cookies or similar technologies to operate the Services (authentication, fraud prevention), to remember preferences, and to measure performance. Where required, we will present a consent banner with options to accept, reject, or manage non‑essential cookies. See our Cookie Policy for details and how to control cookies in your browser.
10. Marketing
We may send product updates and offers if you opt in. You can unsubscribe at any time using the link in our emails or in your account settings. Transactional/service emails (e.g., receipts, security alerts) are not marketing and you cannot opt out of them while using the Services.
11. Changes to this Policy
We may update this Policy from time to time. If changes are material, we will notify you (e.g., by email or in‑product notice). The "Effective date" above reflects the latest version.
12. Contact
Questions or requests? Email [email protected] or use our support page. If you are in the EU/UK/EEA, you may also contact your local data protection authority.
Regional Disclosures
EU/UK GDPR
Our legal bases are listed in §3. For transfers outside the EU/UK, we rely on SCCs or other approved safeguards. You can request a copy of key SCC terms.
California (CPRA)
We do not "sell" or "share" Personal Information as defined by CPRA. We use service providers under CPRA‑compliant contracts. Categories collected: identifiers, commercial information (transactions), internet/activity data, and in some cases inferences for analytics. You can request disclosure or deletion of your Personal Information, and request correction if inaccurate.
This Policy is provided for transparency and does not constitute legal advice.