Back to Settings

Privacy Policy

Effective date: March 31, 2026

1. Introduction

Clipy AI, operated by DeFiner Tech Ltd (Hong Kong SAR), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data in compliance with the Hong Kong Personal Data (Privacy) Ordinance (PDPO) and the EU General Data Protection Regulation (GDPR) where applicable.

2. Data We Collect

Account Information

  • Email address
  • Display name
  • Authentication credentials (hashed passwords)
  • Timezone and language preferences

Usage Data

  • Video URLs submitted for analysis
  • AI-generated content (scripts, analyses, reports)
  • Content calendar entries and publishing schedules
  • Feature usage patterns and interaction logs

Technical Data

  • IP address and approximate geolocation
  • Browser type and version
  • Device type and operating system
  • Session duration and page views

3. How We Use Your Data

  • To provide and improve the Clipy AI service.
  • To generate AI-powered content analysis and script creation.
  • To personalize your experience and content recommendations.
  • To communicate service updates, security alerts, and support messages.
  • To detect and prevent fraud, abuse, and security incidents.
  • To comply with legal obligations under Hong Kong and applicable international law.

4. Third-Party Services

We use the following third-party services to operate Clipy AI. Each processes data in accordance with their own privacy policies:

  • OpenRouter -- AI model inference for content analysis and script generation. Video metadata and text prompts are sent to AI models via OpenRouter.
  • Railway -- Backend hosting and database infrastructure. Account data and generated content are stored on Railway servers.
  • Vercel -- Frontend hosting and edge delivery. Technical data such as IP address and request metadata are processed by Vercel.
  • Supabase -- Authentication and database services. Account credentials and user data are managed through Supabase.

5. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. Specific retention periods:

  • Account data: Retained until account deletion.
  • Generated content: Retained until you delete it or your account is closed.
  • Usage analytics: Aggregated and anonymized after 90 days.
  • Technical logs: Deleted after 30 days.

6. Your Rights

Under the PDPO and GDPR (where applicable), you have the following rights:

  • Access: Request a copy of your personal data.
  • Correction: Request correction of inaccurate data.
  • Deletion: Request deletion of your account and associated data.
  • Portability: Request export of your data in a machine-readable format.
  • Objection: Object to data processing for direct marketing purposes.

To exercise any of these rights, contact us at privacy@clipyai.app. We will respond within 40 days as required by the PDPO.

7. Data Security

We implement industry-standard security measures to protect your data, including:

  • Encryption in transit (TLS 1.3) and at rest (AES-256).
  • Password hashing with bcrypt at a minimum cost factor of 12.
  • Regular security audits and vulnerability assessments.
  • Access controls and principle of least privilege for all internal systems.

8. Cookies and Tracking

Clipy AI uses essential cookies for authentication and session management. We do not use third-party tracking cookies or advertising trackers. Local storage is used to persist your language preference and application settings.

9. International Data Transfers

Your data may be transferred to and processed in countries outside of Hong Kong SAR for the purpose of providing the service. We ensure that appropriate safeguards are in place, including standard contractual clauses where required by GDPR.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notification at least 14 days before they take effect. Continued use after the effective date constitutes acceptance.

11. Contact

For privacy-related inquiries or to exercise your data rights, contact us at privacy@clipyai.app.

DeFiner Tech Ltd
Hong Kong SAR