Privacy Policy

Overview

This Privacy Policy explains how Cutform collects, uses, shares, stores, and protects personal data when you use our website, app, authentication flows, video processing tools, social integrations, billing, analytics, onboarding, support, and related services.

For some workspace and customer content, Cutform may act as a processor or service provider on behalf of the workspace owner. For account administration, billing, website analytics, security, legal compliance, product analytics, and our direct relationship with users, Cutform generally acts as a controller or business.

Personal Data We Collect

We may collect account and identity data, workspace membership and role data, billing and subscription data, uploaded or imported video and audio, generated clips, captions, transcripts, thumbnails, brand kits, project metadata, support messages, logs, device data, usage analytics, and communications data.

If you connect a social account, we may collect account IDs, channel/page/profile names, profile images, access tokens, refresh tokens, token expiry data, granted scopes, upload or posting permissions, scheduled-post metadata, publishing status, and platform responses. We do not ask for or store your social platform passwords.

How We Use Personal Data

We use personal data to create accounts, authenticate users, manage workspaces, process videos, generate clips, create captions and transcripts, render outputs, schedule posts, connect social accounts, process subscriptions, send service communications, provide support, debug issues, monitor reliability, prevent abuse, improve the product, and comply with law.

Where UK or EU data protection law applies, our lawful bases may include performance of a contract, legitimate interests, legal obligation, and consent where required for optional processing such as non-essential cookies or certain marketing.

AI, Transcription, and Video Processing

Cutform may send uploaded videos, source media, audio, transcripts, captions, prompts, project settings, brand assets, and metadata to AI, transcription, and video-processing providers to provide requested features.

Recommended default: Cutform does not use customer videos, audio, transcripts, captions, generated clips, brand assets, or workspace content to train Cutform or third-party AI models without the customer's explicit opt-in.

Google, YouTube, and Limited Use

Cutform may use Google API Services, including Google Sign-In and YouTube API Services. Cutform's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including Limited Use requirements.

If you use YouTube features, we may process YouTube API data only to provide the YouTube-related functionality you request, such as retrieving video metadata or thumbnails, connecting your YouTube account, preparing uploads, publishing content, or showing posting status. You can revoke access through your Google account permissions.

How We Share Personal Data

We may share personal data with infrastructure providers, payment providers, email providers, analytics providers, transcription providers, AI/video processing providers, social platforms you connect, professional advisers, authorities where required, and business-transfer parties.

We do not sell customer content. Recommended default: Cutform does not sell personal information or share it for cross-context behavioral advertising unless clearly disclosed and opt-out rights are provided.

Retention, Deletion, and Rights

We keep personal data for as long as needed to provide Cutform, comply with legal obligations, resolve disputes, enforce agreements, maintain security, and operate backups. Social tokens are retained while an integration remains connected or as needed for security, troubleshooting, logs, or legal compliance.

Depending on where you live, you may have rights to access, correct, delete, restrict, object, withdraw consent, receive a portable copy, opt out of certain uses, or lodge a complaint. To exercise rights, contact [email protected].

Security and International Transfers

We use technical and organizational measures designed to protect personal data, including access controls, authentication, least-privilege practices, secure cloud infrastructure, logging, monitoring, encryption in transit, and vendor review.

Cutform and its subprocessors may process personal data in the United Kingdom, European Economic Area, United States, and other countries. Where required, we use legally recognized safeguards for international transfers.

Contact

Privacy questions and requests can be sent to [email protected].