This Privacy Policy explains how Cliplume (“Cliplume”, “we”, “us”) collects, uses, shares and protects personal data when you use our website, apps and services (the “Service”), and the choices and rights you have. It applies to visitors, account holders and anyone whose information reaches us through the Service.
In short: we collect what we need to run your account and create what you ask for, we send your inputs only to the providers that make the result, we do not sell your personal data, and we do not use your private creations to train models we offer to others. The details follow.
1.Who is responsible for your data
Cliplume is the controller (and, under some laws, the “business”) for the personal data described in this policy. You can reach us for any privacy matter at support@cliplume.com (subject “Privacy”).
When you upload other people’s personal data (for example a photo or voice of someone else), you are responsible for having the right to do so; in that case we process it on your behalf to deliver what you requested.
2.What we collect
Information you give us
- Account data: your email address, name and profile details, and the sign-in method you choose (email or a third-party identity such as Google).
- Your Content: prompts, text, images, video, audio, voice recordings, character or product photos, and other inputs you upload, and the outputs created for you.
- Billing data: your plan, payment status, transaction identifiers, billing country and tax details. Card and bank details are entered with our payment processor, not on our servers.
- Communications: messages you send to support, survey answers and feedback.
Information collected automatically
- Usage data: the tools you use, jobs you start and their status, credits used, features clicked, errors and performance events.
- Device and log data: IP address, approximate location derived from it, browser and device type, operating system, language, referring page and timestamps.
- Cookies and similar technologies: described in our Cookie Policy.
Information from other sources
- Sign-in providers: if you sign in with a third-party identity, we receive basic profile data (such as name, email and avatar) as you authorize.
- Payment processor: confirmation of payments, subscription state, and fraud or risk signals.
We do not intentionally collect sensitive categories of data (such as health, biometric identification or government ID). Voice and face data: if you upload a photo or recording of a person, the Service processes it to produce your output. We do not use it to identify anyone or to build a biometric profile, and we do not create or store face or voice templates for identification.
3.How we use your data and our legal bases
Where the GDPR, UK GDPR or similar laws apply, we rely on these legal bases:
- To provide the Service (contract): create and secure your account, run your generations, store your library, process payments, deliver downloads and provide support.
- To keep the Service safe (legitimate interests, legal obligation): detect fraud, abuse and prohibited content, enforce our Terms, apply spending limits, protect users and children, and investigate incidents. This includes automated screening of requests and outputs.
- To improve and operate the Service (legitimate interests): measure reliability and performance, debug, understand which features are used, plan capacity and set prices, using de-identified or aggregated data where practical.
- To communicate with you (contract, legitimate interests, consent): service and billing messages, security notices, and, with your consent or where permitted, product news. You can opt out of marketing at any time.
- To comply with law (legal obligation): keep tax and accounting records, respond to lawful requests, and report unlawful content such as child sexual abuse material.
- With your consent: for optional analytics or cookies where the law requires consent, and for anything else we ask about specifically. You can withdraw consent at any time.
We do not use your data to make decisions that produce legal or similarly significant effects on you solely by automated means. Our safety checks can block a request, and you can contact us to have a decision reviewed by a person.
4.AI processing and model training
To create your result, your Inputs (prompts, images, audio, video) are sent securely to the AI model providers that run the relevant model. We choose providers that process data to deliver our request and under terms that restrict their use of it.
We do not use your private Inputs or Outputs to train generative models that we make available to others without your permission. We do not sell Your Content. Outputs you choose to make public can be seen by others.
Do not include secrets, financial identifiers, health details or other people’s sensitive information in prompts or uploads unless you need to and have the right to.
6.International transfers
We and our providers operate in several countries, including the United States and the European Economic Area, so your data may be processed outside the country where you live. Where the law requires, we use safeguards such as the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum, adequacy decisions, or provider certifications under recognized frameworks. You can ask us for a copy of the safeguards that apply.
7.How long we keep data
- Creations and uploads: kept while your account is active, deleted when you delete them, and removed automatically after a period of no activity (currently 14 days without activity on a creation). Files are erased with the creation.
- Operational logs: kept for a short period, currently about 14 days, unless needed to investigate abuse or an incident.
- Account data: kept while your account is open and for a limited time afterward for backups, dispute handling and fraud prevention.
- Billing and tax records: kept for as long as tax, accounting and financial law require (often 6 to 10 years).
- Safety records: where a request or output triggers a serious safety concern, we may keep the minimum record needed to enforce our rules and meet legal duties, including longer if law enforcement requires it.
- Support messages: kept for as long as needed to help you and handle related questions.
When data is no longer needed, we delete it or anonymize it. Deleted data can remain in encrypted backups for a limited time until they are overwritten.
8.Security
We use technical and organizational measures designed to protect personal data, including encryption in transit, access controls and least-privilege access, authentication through a dedicated identity provider, signed and time-limited links for private files, segregated environments, rate limiting, monitoring and audit logging, and vetting of providers. No system is perfectly secure, so we cannot guarantee absolute security.
If a data breach affects your rights, we will notify you and the regulators as the law requires. Please use a strong, unique password or a passkey, and tell us at support@cliplume.com if you suspect your account is at risk.
9.Your rights and choices
Depending on where you live, you may have the right to:
- access the personal data we hold about you and get a copy;
- correct inaccurate or incomplete data;
- delete your data (“right to be forgotten”) and close your account;
- restrict or object to certain processing, including processing based on legitimate interests and any direct marketing;
- data portability, to receive your data in a structured, commonly used format;
- withdraw consent at any time, without affecting earlier processing;
- not be subject to decisions based solely on automated processing with significant effects, and to ask for human review; and
- complain to your data protection authority (in the EEA, the authority of your country; in the UK, the ICO).
You can manage much of this yourself: edit your profile and delete creations in the product, and manage your account in Settings. For anything else, email support@cliplume.com from your account address. We may need to verify your identity and will respond within one month (or the period the law sets), and we will not discriminate against you for exercising your rights. If we decline a request, we will explain why.
10.Additional notice for US residents
If you live in California, Colorado, Connecticut, Virginia, Utah, Texas or another US state with a consumer privacy law, you may have the rights to know, access, correct, delete and port your personal information, to opt out of its sale, sharing for targeted advertising and certain profiling, and to appeal a refusal. You can use an authorized agent to make a request.
In the past 12 months we collected the categories of data described in Section 2 (identifiers, commercial information, internet and device activity, content you provide, and inferences from your use of the Service) for the purposes in Section 3. We disclosed them to the service providers in Section 5. We do not sell personal information or share it for cross-context behavioral advertising, and we have no actual knowledge of selling or sharing the personal information of anyone under 16. We use sensitive personal information only to provide the Service you request.
We honor opt-out preference signals, such as Global Privacy Control, where the law requires. To exercise any right, email support@cliplume.com with the subject “Privacy request”. If we decline, you may appeal by replying to our response, and you may contact your state attorney general.
11.Children’s privacy
The Service is for adults 18 and over and is not directed to children. We do not knowingly collect personal data from anyone under 18, and we do not offer the Service to them. If you believe a child has given us personal data, or has an account, tell us immediately at support@cliplume.com and we will delete it and close the account promptly. See our full Child Safety Policy.
12.Safety screening
To keep the Service lawful and safe, we automatically screen requests and outputs for prohibited content, such as sexual content involving minors, non-consensual intimate imagery, and fraud. This screening may use automated tools and, in some cases, review by trained staff. Screening is carried out under our legitimate interests and legal obligations. Content that violates our rules can be blocked or removed, and serious cases can lead to account action and reports to authorities.
14.Third-party links and services
The Service may link to other sites and services. Their privacy practices are their own, and this policy does not cover them. Sign-in, payment and generation providers act under their own privacy policies for the data they receive in their role as independent controllers, where that applies.
15.Changes to this policy
We may update this policy as our Service or the law changes. If changes are material, we will tell you by email or in the product before they take effect, and update the date at the top of this page. Previous versions are available on request.
16.Contact us
Email support@cliplume.com with the subject “Privacy” for questions, requests or complaints. If you are in the EEA or UK and we have not resolved a concern, you can lodge a complaint with your local data protection authority. For child-safety reports, see Child Safety.