1. Introduction

Kineclip ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered video generation service. Kineclip acts as the controller of the personal data described in this policy.

2. Information We Collect

2.1 Information You Provide

Account information (email, name, password)
Phone number, if you complete SMS verification (verified via our SMS provider)
Payment information (processed securely via Stripe; we do not store full card details)
Content preferences (niche, style, voice settings)
Prompts and other inputs you enter to generate videos
Photos and other media you upload (for example, for photo-to-video generation)
Social media account connections
Referral codes and promotional codes you use
Support communications

2.2 Automatically Collected Information

Device information (browser type, operating system)
Usage data (pages visited, features used, time spent), collected via Google Analytics and our own first-party analytics
How you arrived at Kineclip (referring site, campaign parameters), captured on your first visit
IP address and request metadata in standard server logs, used for security, fraud prevention, and operating the Service
Error and diagnostic data when something goes wrong (via our error-monitoring provider)
Cookies and similar technologies (see Section 12)

2.3 AI-Generated Content Data

Video generation parameters and preferences
Generated video metadata
Publishing schedules and history

3. How We Use Your Information

We use the collected information for:

Providing and maintaining the Service
Processing payments and subscriptions
Generating and publishing AI videos on your behalf
Screening prompts and uploads with automated content moderation for safety
Improving our service quality
Sending service-related communications, and occasional product updates you can opt out of (see Section 13)
Providing customer support
Analyzing usage patterns to improve the Service
Operating the referral program (linking a referred signup to the referrer's code)
Preventing fraud and ensuring security

4. AI Processing of Your Prompts and Uploads

Generating videos requires sending your generation inputs to the AI providers we use:

Your prompts, scripts, and uploaded photos are transmitted to our AI service providers (currently OpenAI for script writing, voiceover, captions, image analysis, and content moderation; and fal.ai for image and video rendering) solely to produce your requested output
Uploaded photos are screened by automated moderation before use, stored in your account's private storage, and retained until you delete them or delete your account
We do not use your prompts or uploads to train our own AI models
Our AI providers process this data as service providers under their API terms; we do not authorize them to use it for advertising

5. Data Sharing and Disclosure

We may share your information with:

Service Providers: third parties that help us operate the Service — payment processing (Stripe), cloud hosting and storage (Amazon Web Services), database and authentication (Supabase), AI generation (OpenAI, fal.ai), email delivery (Resend), SMS verification (Twilio), error monitoring (Sentry), and analytics (Google Analytics)
Social Media Platforms: when you connect accounts for publishing (TikTok, YouTube, Instagram, Facebook)
Legal Requirements: when required by law or to protect our rights
Business Transfers: in connection with mergers, acquisitions, or asset sales

We do not sell your personal information to third parties.

6. TikTok Integration

When you connect your TikTok account to Kineclip, we collect and store certain information to enable video publishing on your behalf:

OAuth Tokens: Your TikTok authorization tokens are encrypted using AES-256-GCM and stored in our database. These tokens allow us to upload and publish videos to your TikTok account.
Profile Information: We access basic profile information including your TikTok username and avatar for display purposes within the Kineclip dashboard.
Publishing Access: We access the ability to upload and publish videos to your TikTok account, as authorized by you during the OAuth connection flow.
Disconnection: You can disconnect your TikTok account at any time via Dashboard → Social Media → Disconnect. Upon disconnection, your OAuth tokens are deleted immediately from our systems.
No Third-Party Sharing: Your TikTok tokens and account data are never shared with third parties. They are used solely for publishing videos on your behalf through the Kineclip platform.

7. YouTube and Google Integration

When you connect your YouTube account to Kineclip, we use Google OAuth 2.0 to request the minimum permissions needed to publish videos on your behalf. The specific Google API scopes we request are:

https://www.googleapis.com/auth/youtube.upload: Allows Kineclip to upload videos to your YouTube channel. Videos are uploaded only when you initiate a publish action or enable scheduled auto-publishing.
https://www.googleapis.com/auth/youtube.readonly: Allows Kineclip to read your channel metadata (channel name, avatar, ID) so that we can display which channel your uploads will go to, prevent accidental cross-account publishing, and confirm the processing status of a video Kineclip uploaded. We do not read your other videos, playlists, comments, or subscriber data.

These are the only two Google API scopes Kineclip requests. We do not request permission to edit, delete, or manage your existing YouTube content, and we do not access YouTube Analytics data.

7.1 How we handle Google user data

OAuth tokens: Your Google access and refresh tokens are encrypted using AES-256-GCM before being stored in our database. They are decrypted only in memory when making API calls to Google on your behalf.
No human access: Kineclip employees do not read or access your Google user data. Access is performed only by automated systems as needed to provide the Service.
No sharing: Your Google user data and OAuth tokens are never shared with third parties, sold, or used for advertising or profiling.
No training of AI/ML models: We do not use your Google user data (channel information, video metadata, or tokens) to train or improve generalized AI or machine learning models.
Disconnection and deletion: You can disconnect your YouTube account at any time via Dashboard → Social Media → Disconnect. Upon disconnection, your OAuth tokens are deleted immediately from our systems. You may also request deletion of all associated data by contacting info@kineclip.com.

7.2 Google API Services User Data Policy — Limited Use disclosure

Kineclip's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

8. Instagram and Facebook Integration

When you connect an Instagram professional account or a Facebook Page for publishing:

OAuth Tokens: your Meta authorization tokens are encrypted using AES-256-GCM and stored in our database, and are used solely to publish the videos you create with Kineclip to the account or Page you connected
Profile Information: we access basic account/Page information (name, avatar, ID) to show which account your uploads will go to
Disconnection: you can disconnect at any time via Dashboard → Social Media → Disconnect, which deletes the stored tokens

9. Data Security

We implement industry-standard security measures to protect your data, including:

Encryption of data in transit (TLS/SSL)
Encryption of sensitive data at rest
Regular security audits and updates
Access controls and authentication
Secure payment processing via PCI-compliant providers

10. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. Generated videos are stored according to your subscription plan; photos you upload are retained until you delete them or delete your account. When you delete your account, we delete your personal data, except limited records (such as billing and transaction records) that we retain where required for legal, tax, or accounting purposes.

Deleting a series. If you delete a series that has already produced videos, we keep a read-only record of that series — its name and settings — so those videos remain explainable in your library and to our support team. Deleting a series that never produced a video removes it entirely. Deleting your account removes this record along with the rest of your personal data, as described above.

11. Your Rights

Depending on your location (including under the EU/UK GDPR and the California Consumer Privacy Act), you may have the right to:

Access your personal data
Correct inaccurate data
Delete your data ("right to be forgotten")
Export your data (data portability)
Opt-out of marketing communications
Restrict or object to certain processing

You can delete your account and its data yourself at any time from Dashboard → Settings → Delete account. To exercise any other right, contact us at info@kineclip.com. We do not discriminate against you for exercising your privacy rights.

12. Cookies and Tracking

We use cookies and similar technologies to:

Keep you logged in (authentication cookies)
Remember your preferences
Measure how the site is used with our own first-party analytics — an anonymous visitor identifier cookie (valid across kineclip.com subdomains for up to one year) and a first-touch attribution cookie recording how you originally found Kineclip
Analyze usage patterns via Google Analytics
Improve service performance

A consent banner lets you accept or reject non-essential cookies. You can also control cookies through your browser settings. Disabling cookies may affect some functionality of the Service.

13. Marketing Communications

We send transactional emails needed to operate the Service (receipts, verification codes, publishing and account notifications). We may also send occasional onboarding tips, product updates, and offers. You can opt out of non-essential emails at any time using the unsubscribe link in the email or by contacting info@kineclip.com.

14. Children's Privacy

The Service is not intended for users under 18 years of age. We do not knowingly collect information from children. If we learn we have collected data from a child, we will delete it promptly.

15. International Data Transfers

Kineclip is operated from the United States, and your data is processed there and in other countries where our service providers operate. We ensure appropriate safeguards are in place for international transfers in compliance with applicable data protection laws.

16. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through the Service. Your continued use of the Service after changes constitutes acceptance of the updated policy.

17. Contact Us

For questions or concerns about this Privacy Policy, contact us at:

Kineclip

Email: info@kineclip.com