Draft – have this reviewed by a lawyer before publishing
Privacy Policy
Courtesy translation of the German privacy policy. The German version is authoritative.
1. Controller
[Name] [Anschrift] Email: [E-Mail]
2. What we process and why
- Server logs (IP address, time, page, browser) to run and secure the site – Art. 6(1)(f) GDPR.
- Account data (email, name, Google profile ID) to register you and provide the service – Art. 6(1)(b).
- Videos, transcripts and generated clips to provide the service – Art. 6(1)(b).
- Billing data for payments and tax retention – Art. 6(1)(b), (c).
- Usage data (video minutes used, jobs) for quota management and abuse prevention – Art. 6(1)(b), (f).
We use no tracking or advertising cookies and no analytics that require consent.
3. Processors and recipients
- Cloudflare (hosting, D1 database, R2 file storage) – USA/EU.
- Anthropic (Claude) – analysis of transcripts to select moments and write titles – USA.
- Groq – speech-to-text transcription of the audio track – USA.
- [Anbieter] – VPS on which videos are downloaded and rendered.
- Stripe – payment processing for paid plans – Ireland/USA.
- Resend – delivery of login emails – USA.
- Google – optional sign-in with Google – USA.
- TikTok – only if you connect your account and publish via the Content Posting API – Ireland/USA.
Transfers to the USA rely on the EU-US Data Privacy Framework or Standard Contractual Clauses (Art. 46 GDPR). To our knowledge, content sent through the Groq and Anthropic APIs is not used to train their models [verify against current provider terms].
4. Cookies
We only set a strictly necessary session cookie for sign-in, so no consent banner is shown. Fonts are served from our own server.
5. Retention
- Videos, transcripts and clips: 7 days (Free), 30 (Creator), 90 (Pro), 90 (Business), then deleted automatically. You can delete jobs earlier.
- Account data: until you delete your account.
- Invoices: statutory retention periods (up to 10 years).
6. Your rights
You have the right of access, rectification, erasure, restriction, data portability, objection and withdrawal of consent (Art. 15–21, 7(3) GDPR). Write to [E-Mail]. You may also lodge a complaint with a data protection supervisory authority.