Privacy Policy
Last updated: September 25, 2026
1. Introduction
This policy explains what personal data Clipbeat ("we", "us") collects when you use clipbeat.app and its apps, why we collect it, who processes it and what choices you have. Contact: hello@clipbeat.app.
2. Information We Collect
Account information
- Email address, display name and profile picture from the provider you sign in with (Google, TikTok, YouTube or Instagram)
- Your plan, credit balance and credit history
Content you create
- Audio files you upload, transcribed lyrics, prompts, generated images, video shots, music and voice
- Project data (timeline, titles) synced to your account so you can continue on another device
Connected social accounts
- OAuth tokens (stored encrypted), account username and display name, profile picture URL
Payments
- Payments are processed by Paddle, our merchant of record. We receive the plan or credit pack you bought, amounts and transaction IDs — never your full card details.
Usage and device data
- Product events such as uploads, AI generations, exports and checkout steps
- A hashed (not raw) IP address, browser user agent and referring page
- Marketing source of your first visit: UTM campaign parameters, the referring website (domain only) and the landing page. We do not collect ad click IDs such as gclid or fbclid.
- Error logs used for debugging
Your own API keys (optional)
If you add your own fal.ai or OpenRouter key, it is stored in your browser and those requests go directly from your browser to the provider. We do not receive these keys.
3. How We Use Your Information
- Provide the Service: transcription, AI generation, project sync, export and publishing
- Manage your plan, credits and payments, and prevent abuse of free credits
- Send service emails (for example, welcome and account emails); you can unsubscribe from non-essential emails at any time
- Understand which pages and features work, and fix problems
We do not sell your personal data, and we do not use your uploads to train AI models.
4. Service Providers
We share data only with providers that help us run the Service:
- Hetzner — application servers and database
- Cloudflare — website hosting, CDN and file storage (R2) for uploads and generated media
- fal.ai, OpenRouter, MiniMax — AI processing of the audio, prompts and images you send to them
- Pexels, Pixabay — stock media search (your search terms)
- Paddle — payments, invoices, taxes and refunds (merchant of record)
- Resend — sending emails
- Google Analytics, Microsoft Clarity — only if you allow analytics cookies
- YouTube, TikTok, Instagram — when you connect an account and publish a video
Some of these providers process data outside your country, including in the United States. Where required, transfers rely on appropriate safeguards such as Standard Contractual Clauses.
5. Cookies and Similar Technologies
Analytics cookies are off until you allow them. Google Analytics and Microsoft Clarity are not loaded at all without your consent, so no data is sent to them. If you decline, existing analytics cookies are deleted. We also use your browser's local storage for preferences, drafts and (optionally) your own API keys. When a page crashes, we send an error report (error message, page path without query, browser details) to our own servers to fix bugs — it sets no cookies and contains no personal data.
| Cookie | Purpose | Duration | When set |
|---|---|---|---|
clipbeat_session | Keeps you signed in across clipbeat.app apps (HttpOnly). | 30 days | Always (strictly necessary) |
cb_consent | Remembers your cookie choice (v1.a1 = analytics allowed, v1.a0 = declined). | 180 days | After you choose |
cb_aid | Random anonymous ID that links visits to our own product analytics. | 180 days | Only if you allow analytics |
cb_attr | First-touch marketing source: campaign (UTM) parameters, referring site and landing page. | 90 days | Only if you allow analytics |
_ga, _ga_* | Google Analytics 4 — aggregated traffic statistics. | Up to 2 years | Only if you allow analytics |
_clck, _clsk | Microsoft Clarity — session replays and heatmaps to find usability problems. | Up to 1 year | Only if you allow analytics |
First-party cookies are set on .clipbeat.app so that the website and the apps share your choice. .
6. Data Retention
We keep account data for as long as your account exists. Uploads and projects are kept until you delete them or your account; media that no longer belongs to a project is cleaned up automatically. Payment records are kept as long as required for tax and accounting.
7. Data Security
- HTTPS encryption for all data in transit
- Encrypted storage of OAuth tokens
- Server-side access control on every account resource
8. Your Rights
Depending on where you live, you have the right to:
- Access the personal data we hold about you and receive a copy
- Correct inaccurate data
- Delete your account and associated data
- Object to or restrict certain processing
- Withdraw consent for analytics at any time (Cookie settings in the footer)
- Disconnect social media accounts at any time
- Lodge a complaint with your local data protection authority
To exercise these rights, email hello@clipbeat.app.
9. Children's Privacy
The Service is not intended for children under 13. We do not knowingly collect personal information from children under 13.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will post the new version on this page and update the date above.
11. Contact Us
Questions about this policy or your data: hello@clipbeat.app