Privacy Policy

1. Information We Collect

• Account data: your name and email address when you register.
• Video content: videos you upload are stored on our private servers solely to generate short clips for you. We do not view, share, or publish your content without your explicit action.
• Social media tokens: when you connect YouTube or Instagram, we store an encrypted OAuth access token to post and manage content on your behalf only when you take an explicit action. We request only the permissions required for the features you use (YouTube: youtube.upload to publish clips, youtube.force-ssl to delete videos you previously published through ClipForge; Instagram: instagram_business_basic, instagram_content_publish).
• Usage analytics: anonymized data about pages visited and features used, solely to improve the product. We do not use third-party advertising trackers.
• Payment data: billing is processed by Stripe. We never store your full credit card details on our servers.

2. How We Use Your Data

• To operate and improve the ClipForge AI Service.
• To generate short clips from your uploaded videos using AI and FFmpeg processing.
• To publish clips to social platforms (YouTube, Instagram) only when you explicitly initiate it.
• To send transactional emails: account confirmation, password resets, billing receipts.
• We do not sell, rent, or trade your personal data to third parties.
• We do not use your videos, clips, or Google user data to develop, improve, or train AI or machine learning models.
• We do not use your data for targeted advertising or any advertising purposes.
• We do not transfer Google user data to data brokers, advertisers, or any third-party analytics platforms.

3. Social Media Integrations

When you connect YouTube or Instagram, we store an OAuth access token encrypted in our database. This token is used to upload clips to YouTube and, when you explicitly request it, to delete videos you previously published through ClipForge. We never post, delete, or modify your social media content without your direct instruction. You can revoke access at any time from the Settings page, or directly from your Google or Instagram account settings.

3a. Google API Data — Specific Disclosures

ClipForge AI uses the YouTube Data API v3. The following disclosures apply specifically to data obtained through Google APIs:

• Data accessed: We access your YouTube channel identity (channel ID and name) solely to confirm which channel to post to. We upload video files to your channel only when you explicitly click “Post” in the ClipForge interface. When you explicitly click “Delete from YouTube” in the ClipForge interface, we delete that specific video from your channel. We do not read, download, or store any of your existing YouTube videos, watch history, subscriptions, or account analytics.
• Data use: Google user data (channel identity, upload capability, and video deletion capability) is used solely to provide the YouTube posting and video management features you request. It is never used for advertising, user profiling, or any purpose unrelated to the action you initiate.
• Data sharing: We do not transfer, sell, or share any Google user data with third parties. Data is not shared with data brokers, advertisers, or any external analytics services.
• Data protection: OAuth tokens are stored encrypted in our database. All communication with Google APIs occurs over HTTPS/TLS. Access is restricted to authorised ClipForge backend servers only.
• Data retention: Your YouTube OAuth token is retained only while your account is active and you have YouTube connected. It is permanently deleted when you disconnect YouTube from Settings or close your account. We do not retain any copies of uploaded video files after they are delivered to YouTube.

4. Data Storage and Security

• All data is transmitted over HTTPS (TLS 1.2+).
• OAuth tokens are stored AES-encrypted in our database.
• Videos and clips are stored on private servers and are not publicly accessible without an authenticated, time-limited URL.
• We follow industry-standard security practices including access controls, server hardening, and routine security reviews.
• In the event of a data breach affecting your personal information, we will notify you within 72 hours as required by applicable law.

5. Data Retention

• Your videos and clips are retained until you delete them or close your account.
• Social access tokens are deleted immediately when you disconnect a platform.
• Upon account closure, all personal data is deleted within 30 days.
• Anonymized analytics data may be retained indefinitely.

6. Cookies

We use only essential session cookies required for authentication and security. We do not use advertising cookies, cross-site tracking cookies, or any third-party analytics cookies (such as Google Analytics). You can disable cookies in your browser, but doing so may prevent you from logging in.

7. Third-Party Services

We use the following trusted third-party services to operate ClipForge AI:

• Stripe — payment processing. Subject to Stripe's Privacy Policy.
• Google / YouTube API — video publishing and deletion (user-initiated only). Subject to Google's Privacy Policy.
• Meta / Instagram API — reel publishing. Subject to Meta's Privacy Policy.

We share only the minimum data required for these services to function. We do not authorize these providers to use your data for their own purposes beyond what is necessary to provide their services to us.

8. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you.
• Deletion: request deletion of your account and all associated data.
• Correction: request correction of inaccurate data.
• Portability: request an export of your data in a machine-readable format.
• Objection: object to certain types of processing, including any direct marketing.

To exercise any of these rights, email us at support@cmdfleet.com. We will respond within 30 days.

9. Children's Privacy

ClipForge AI is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. For material changes, we will notify you by email at least 14 days before the change takes effect. Your continued use of the Service after the effective date constitutes acceptance of the updated policy. We will always post the current version at this URL with the updated date.

11. Contact Us

For privacy-related questions, requests, or concerns, contact us at:
support@cmdfleet.com
Nexora Solutions