Privacy Policy

Last updated: August 9, 2026

This Privacy Policy explains what information Clipforge collects when you use the Service, and how it's used. Clipforge is operated by Anshuman Sharma, an individual sole proprietor.

1. Information we collect

• Account information: name, email address, and password (stored as a salted bcrypt hash, never in plain text).
• Content you provide: scripts, prompts, product descriptions, and any video/audio files you upload for generation — including a reference voice sample if you use voice cloning (see §3 below for how that's specifically handled).
• Generated content: the videos, voiceovers, and captions Clipforge produces for you.
• Connected platform data: if you connect a YouTube, TikTok, or Instagram account, we store your platform account ID, display name, and an OAuth access/refresh token — encrypted at rest (AES-256-GCM) and never stored or logged in plain text — so we can publish on your behalf when you choose to. Disconnecting a platform deletes the stored token.
• Trend Radar data: if you use Trend Radar, we store the niche and YouTube channels you choose to track, and public YouTube video metadata (titles, thumbnails, and public view/engagement statistics) for videos related to those channels — collected via the official YouTube Data API. This is public information about videos, not personal data about you, except for your own niche/channel selections.
• Billing information: handled entirely by Stripe — we never see or store your card number. We keep a reference to your Stripe customer/subscription ID.
• Usage data: basic request logs (IP address, timestamps) used for security and abuse prevention.
• Cookies: we use only strictly necessary cookies — a signed session cookie (to keep you logged in) and a short-lived OAuth state cookie (to prevent forged connection requests when you link a social platform). No advertising, analytics, or tracking cookies are set, and we don't run any third-party analytics or tracking scripts on the Service.

2. How we use your information

• To generate the videos, voiceovers, and captions you request
• To operate your account, track credits, and process billing
• To publish to platforms you've explicitly connected, when you ask us to
• To run Trend Radar's scheduled scans of the channels/niches you've chosen to track
• To send account-related emails (e.g. password resets)
• To detect and prevent abuse of the Service

3. Voice cloning data

A reference voice sample you upload for cloning is stored in the same private media storage as your other project files, and is used only to generate the voiceover for that project — it's never used to train a shared model or used for any other user's generation. Voice recordings can be considered sensitive or biometric-adjacent data under some laws (e.g. Illinois's BIPA, and California's CCPA/CPRA treatment of biometric information). By uploading a voice sample, you consent to Clipforge processing it for the purpose of voice cloning as described in our Terms of Service §4.1. You can delete a project (and its associated voice sample) from your dashboard at any time, or request full account deletion — see §6.

4. Third-party processors

Generating a video means sending relevant parts of your input to the providers that power that step. Depending on which provider is active for your request, this may include:

• OpenAI and/or Groq — script writing, transcription, and text-to-speech
• Microsoft Edge TTS — text-to-speech (free-tier fallback)
• Pexels — stock video/photo b-roll matching
• Stripe — payment processing and subscription billing
• Backblaze B2 — storage of generated media files
• Resend — delivery of transactional emails (e.g. password resets)
• Google (YouTube Data API) — Trend Radar's channel/video data, and YouTube publishing if you connect a YouTube account
• TikTok and Meta (Instagram) — publishing, if you connect those accounts

Each of these providers processes data under their own privacy policy and terms. We only send them what each specific feature requires. Some of these providers are located outside your country and may process data internationally; where required, we rely on those providers' own compliance mechanisms (e.g. standard contractual clauses) for cross-border transfers.

4.1 YouTube API Services disclosure

Trend Radar uses the YouTube Data API Service. By using this feature, you're also agreeing to be bound by the YouTube Terms of Service. Google's use of information received from the YouTube API is governed by the Google Privacy Policy. You can revoke Clipforge's access to your Google/YouTube account at any time via Google's security settings or by disconnecting YouTube from your Clipforge dashboard.

5. Data retention

We retain your account data and generated projects for as long as your account is active. You can delete individual projects from your dashboard. Database backups are retained for 30 days on a rolling basis for disaster recovery, then automatically deleted.

6. Your rights

Depending on where you live, you may have rights including:

• Access — request a copy of the personal data we hold about you
• Correction — ask us to fix inaccurate data
• Deletion — ask us to delete your account and associated data (see below)
• Portability — request your data in a portable format
• Objection/restriction — object to or limit certain processing
• California residents specifically also have the right to know what personal information is collected, and to opt out of any sale or sharing of it — we don't sell or share personal information to third parties for advertising purposes

You can permanently delete your account and all associated data (projects, generated media, connected platform tokens, and voice samples) from Dashboard → Billing → Delete account. This immediately cancels any active subscription and cannot be undone. For any other request, or if you'd rather we handle it for you, email support@forgecut.app.

7. Data security

Passwords are hashed with bcrypt. Social platform access tokens are encrypted at rest (AES-256-GCM). Generated media is stored in a private bucket and served only through short-lived signed URLs — it is never made publicly listable. Data in transit is encrypted via HTTPS.

8. Children's privacy

The Service is not directed at anyone under 18, and we don't knowingly collect data from children. See our Terms of Service §2.

9. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

10. Contact

Questions about this policy, or want to exercise any of the rights above? Email support@forgecut.app.