Privacy Policy
Last updated: May 4, 2026
1. Who We Are
ClipTwin lets people create short AI videos using their own private avatar. For UK GDPR purposes, we act as the controller for the personal data we collect to run the service. You can contact us at contact@cliptwin.com.
2. Information We Collect
When you use ClipTwin, we may collect:
- Account information: name, email address, login details, authentication metadata, and account role.
- Avatar source media: avatar name, profile photo, full-body photo, side-profile photo, optional extra photos, optional notes, and a short 10-second reference video containing your look and voice.
- Video request information: selected scene, mood, script, silent action prompt, recipient name, pronunciation notes, delivery settings, and problem reports.
- Generated videos: the AI videos you create, video URLs, preview images, share links, delivery status, and related support history.
- Payment and credit information: checkout status, credit ledger entries, refunds, Stripe references, and order totals.
- Usage and security data: pages visited, features used, device/browser details, IP-derived security logs, and error logs.
3. Lawful Basis
We process personal data only when we have a lawful basis. Depending on the activity, this may include:
| Purpose | Lawful basis |
|---|---|
| Creating accounts, avatars, orders, and generated videos | Performance of a contract |
| Using your likeness, voice, and avatar source media to create videos | Performance of a contract and explicit consent or permission where required |
| Payments, refunds, fraud prevention, tax, and accounting records | Legal obligation and legitimate interests |
| Safety checks, abuse prevention, support, and service reliability | Legitimate interests |
| Optional analytics or non-essential cookies, where enabled | Consent or legitimate interests, depending on the tool and setting |
4. Avatar Media & Likeness
Avatar source media and generated videos can contain a person's face, body, voice, and other likeness details. We treat this as high-sensitivity personal data. You must upload only yourself or a person whose permission you have. We do not sell avatar media or generated videos to advertisers.
- We use avatar media to create your avatar, build prompts, run safety checks, generate videos, deliver orders, provide support, and investigate misuse.
- We send only the media and prompt details needed to generation providers for the video you request.
- Generated videos may be accessible through share links when you choose to share or deliver them.
- If someone reports unauthorized likeness use, we may suspend, remove, or delete the relevant avatar and videos while we review the issue.
5. Retention Schedule
We keep personal data only as long as needed for the service, safety, legal, tax, accounting, dispute, or support reasons.
| Data | Typical retention |
|---|---|
| Account profile and login data | While your account is active, then deleted or anonymized when you delete the account unless we must keep limited records. |
| Avatar source media | While the avatar exists. Deleted when you delete the avatar or account. |
| Generated videos | While you keep the video in your studio or share it. Deleted when you delete the video, avatar, or account. |
| Scripts, prompts, recipient names, and pronunciation notes | Kept with the order for generation, support, and dispute handling, then deleted or minimized when no longer needed. |
| Payment and accounting records | Kept as required for tax, accounting, refunds, fraud prevention, and legal claims. UK company records may need to be kept for 6 years. |
| Support reports, security logs, and operational alerts | Kept for a limited period unless needed for fraud, safety, payment disputes, or legal claims. |
6. Data Storage & Security
We use cloud infrastructure, access controls, HTTPS, database permissions, server-only service keys, and storage deletion tools to protect personal data. No internet service is perfectly secure, so we limit access to sensitive operational data and review security as the service grows.
Avatar media and generated videos are stored with Supabase Storage and related metadata is stored in Supabase databases. We are working toward shorter-lived signed access links for sensitive media where practical.
7. Third-Party Services
We use third-party services to operate ClipTwin, including:
- Supabase: authentication, database, storage, and application data.
- Render: application hosting and server logs.
- Stripe: secure payment processing, checkout, refunds, promotion codes, and credit purchases.
- Enhancor / Seedance: AI video generation from selected avatar media, scenes, and prompts.
- Claude CLI and AI model providers: prompt building, translation, and generation support where used.
- Resend: transactional email delivery.
- Telegram: internal operational notifications for administrators.
- Google Analytics: analytics where enabled and permitted.
International transfers may occur when these providers or their subprocessors process data outside the UK. Where required, we rely on appropriate safeguards such as data processing agreements, standard contractual clauses, UK addendums, adequacy decisions, or equivalent transfer safeguards.
8. Your Rights
Depending on your location, you may have rights to access, correct, export, restrict, object to, or delete personal data. You can delete individual videos, delete avatars, or request full account deletion from your profile page. You may also contact us to report unauthorized likeness use.
Under UK GDPR, the right to erasure is not absolute, but we aim to respond to deletion requests without undue delay and within one month. If we cannot delete particular records because of tax, payment, fraud, safety, or legal reasons, we will explain what is kept and why.
If you are in the UK and believe we have not handled your data properly, you can complain to the Information Commissioner's Office.
10. Children's Privacy
ClipTwin is not intended for children under 13. Do not upload media of a minor or create videos involving a minor unless you have the legal right and permission to do so and the content complies with our safety rules.
11. Changes to This Policy
We may update this privacy policy from time to time. If changes materially affect how we use personal data, we will take reasonable steps to notify users.
12. Contact Us
For privacy questions, account deletion, data access, or likeness-permission concerns, contact us at contact@cliptwin.com.