Privacy Policy

We collect the following data when you use ClipZard:

• Account data — your name and email address.
• Usage data — IP address, browser user-agent, and device information, used to secure your session and the Service.
• Content you provide — the videos you upload or link to, their transcripts, thumbnails, and the clips you create.
• Billing data — handled by our payment providers (Paddle or Midtrans); we store the plan, amounts, and order identifiers, but not your full card details.

We use your data to:

• Provide, operate, and maintain the Service;
• Process videos into clips and deliver results;
• Authenticate you and keep your account secure;
• Process payments and manage your credits and entitlements;
• Improve the Service and provide support.

We process your data on the basis of contract (to provide the Service you request), your consent (for account creation), and our legitimate interests (security and service improvement), consistent with applicable data-protection law, including Indonesia's Personal Data Protection Law (UU PDP) where it applies.

We share data only with the processors needed to run the Service:

• Object storage (Cloudflare R2 / S3) — stores your videos and clips.
• Database (PostgreSQL) — stores account and project data.
• Transcription & analysis — AssemblyAI and/or your configured LLM provider process content to find viral moments.
• Payment providers — Paddle and Midtrans process your payments.

We do not sell your personal data. If you bring your own API keys (BYOK), your content is processed through the providers you choose.

We use a single httpOnly session cookie to keep you signed in. It does not contain personal information in plaintext. We do not use third-party advertising cookies.

We retain your account data for as long as your account is active. Content you delete is removed after a short retention period. We may retain data longer where required by law or for legitimate business, security, and audit purposes.

You may request access to, correction of, or deletion of your personal data, and you may withdraw consent or object to processing. To exercise these rights, contact us at hello@birunidev.com.

Passwords are hashed with Argon2, session tokens are stored hashed, and sensitive data is encrypted in transit and at rest. No method of transmission or storage is completely secure, but we take reasonable measures to protect your data.

We may update this policy as our practices or legal obligations change. Material changes will be communicated to you. Continued use of the Service after changes take effect constitutes acceptance.

For any privacy questions or requests, contact us at hello@birunidev.com.