Translation provided for your convenience. In case of any discrepancy, only the French version is authoritative. Write to us at contact@clippi.fr with any question.
Privacy policy
Last updated: 19 October 2026
This page explains, in plain language, which personal data Clippi processes, why, for how long, and what your rights are, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act (loi Informatique et Libertés).
1. Who is responsible for your data
The controller (responsable du traitement) is Jennifer Coruble, Entrepreneur individuel (micro-entrepreneur), 8 bis rue Dorée, 95760 Valmondois, France. For any question or request: contact@clippi.fr. See also the legal notice (mentions légales).
Your own content. For the videos, sounds and images you upload (which may show or let others be heard), you remain the controller and Clippi acts as processor (sous-traitant): it processes them only to provide the service you request. If you need a data processing agreement, write to contact@clippi.fr.
2. Data processed
| Data | Purpose | Lawful basis | Retention period |
|---|---|---|---|
| Account: email address, display name, password (stored only in hashed form), date and version of the terms accepted, date of birth | Create and secure your account, identify you | Performance of the contract | As long as the account exists; deletion on request |
| Accounts of 13- and 14-year-olds: email address of the parent or legal guardian, status and date of their reply | Obtain the parental consent required before the age of 15 | Legal obligation (loi Informatique et Libertés, art. 45) | 14 days maximum without a reply (then the account is deleted); once consent is given, as long as the account exists |
| Login: session token (hashed), IP address, browser | Maintain the session, secure access, limit abuse | Performance of the contract, legitimate interest (security) | Session duration: 30 days |
| Content: uploaded videos, extracted audio, transcript, clips, titles, descriptions, settings, versions | Provide the service: analyse, produce, correct, export | Performance of the contract | Until you delete the project (the files are then erased) or the account |
| Connected social accounts (YouTube, TikTok, Instagram): account identifier and display name, encrypted access tokens | Prepare and, after your approval, carry out publications | Your consent (connecting the account) | Until the account is disconnected in Settings |
| Billing and usage: plan, customer identifiers with the payment provider, token balance and transactions, volumes consumed | Invoice, apply quotas, refund, prevent fraud | Performance of the contract, legal obligation | Lifetime of the account; accounting records: 10 years |
| Processing logs: task status, errors, decisions | Display a project's history, diagnose and correct errors | Performance of the contract, legitimate interest | Same as the project |
| Messages sent to contact@clippi.fr | Reply to your request | Legitimate interest | The time needed to handle the request |
Clippi detects the position of faces in the video in order to reframe the clip vertically. This detection runs on our servers, is used only for framing and does not identify anyone: no facial recognition is performed and no biometric template is created or stored.
Clippi does not resell your data, does not use it for advertising and does not train any artificial intelligence model with your content.
3. Who receives your data
Clippi uses service providers, solely to deliver the service:
| Provider | Role | Data concerned |
|---|---|---|
| Railway Corporation (United States) | Hosting of the application, the database and the files | All data of the service |
| Cloudflare, Inc. (United States) | Domain name, protection and routing of requests; anti-bot verification (Turnstile) on the sign-up page | Browsing requests (IP address, headers); on the sign-up page, technical signals from the browser |
| OpenAI (United States) | Speech transcription (API service) | The audio extracted from your videos, in segments |
| Anthropic (United States) | Editorial analysis: identifying passages, titles and descriptions (API service) | The transcript text and your project settings |
| Resend (United States) | Sending the service's emails (parental consent request) | The parent's email address and the child's display name |
| Stripe (Ireland / United States) | Payment of subscriptions and tokens, when billing is enabled | Your email and payment information, entered directly with Stripe: Clippi neither sees nor stores your card number |
| YouTube (Google), TikTok, Instagram (Meta) | Publication of your clips, only on the accounts you connect and after your approval | The clip, its title and its description; the account's access tokens |
These providers are used through their professional services, and their own terms govern the data transmitted to them. Authorities may obtain data in the cases provided for by law.
4. Transfers outside the European Union
Your data is hosted in the United States (Railway's us-west2 region), and several of the providers listed above are established in the United States. These transfers rely on the safeguards provided for by the GDPR: standard contractual clauses of the European Commission and/or the provider's certification under the EU–US Data Privacy Framework. To obtain information about these safeguards, write to contact@clippi.fr.
5. Security
- Encrypted connection (HTTPS, HSTS); passwords hashed with a dedicated algorithm (scrypt), never stored in plain text.
- Social network access tokens encrypted at rest (AES-GCM); Clippi never receives the password of your social accounts.
- Workspace isolation at database level: a user can only read the data of their own workspace.
- Video files served through time-limited signed links; limit on the number of login attempts.
- Nothing is published without your explicit approval.
No system is infallible. In the event of a personal data breach likely to result in a risk to you, you and the CNIL would be informed under the conditions provided for by law.
6. Cookies and trackers
Clippi sets a single cookie, clippi_session: it keeps you logged in (30 days, not accessible to scripts, restricted to this site). It is strictly necessary for the service and therefore does not require consent. The site uses no advertising cookie, no audience measurement tool and no third-party tracker; fonts are served by the site itself. The site's protection provider (Cloudflare) may set a technical security cookie to distinguish human visitors from bots; on the sign-up page, its Turnstile module similarly verifies that a person is creating the account.
7. Your rights
You may at any time request access to your data, its rectification, its erasure, restriction of or objection to a processing operation, and its portability, and withdraw any consent given. You may also set directives on what happens to your data after your death.
- Deleting a project erases its videos, clips and associated data. Disconnecting a social account deletes its tokens. These actions are available in the application.
- To delete your account or to exercise any other right: write to contact@clippi.fr from your account's address. We reply within one month (extendable by two months for complex requests, with prior notice). We may ask for proof of identity if there is doubt as to who you are.
- Complaint: if you consider that your rights are not being respected, you may lodge a complaint with the CNIL (Commission nationale de l'informatique et des libertés, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, cnil.fr).
8. Minors
The service is restricted to persons aged at least 13. For ages 13 to 14, registration requires the consent of a parent or legal guardian, obtained by email: as long as it is missing, the account is read-only, and it is deleted after 14 days without a reply or in case of refusal. The parent's address is used only for this request. If you believe that a child under 13 has created an account, write to us: we will delete it.
9. Changes
This policy may change, in particular when a provider or a feature is added. The date of the last update appears at the top of the page; in the event of a significant change, registered users are informed.