Privacy Policy

This Privacy Policy explains how GhostClipper (“GhostClipper”, “we”, “us”, “our”) collects, uses, shares and protects personal data when you use our website, account portal, API and desktop application (the “Service”). It should be read together with our Terms & Conditions. By using the Service you agree to this policy.

We collect only what we need to operate the Service:

• Account data — your email address, first and last name, country, and how you heard about us, provided when you register or update your profile.
• Authentication data — a securely hashed version of your password (we never store your password in plain text), email-verification codes, and session (JWT) access tokens.
• Plan & usage data — your subscription tier and a count of how many items you have processed in the current period, so we can enforce plan limits. This count does not include the content of your files.
• Device & technical data — a device name, IP address and last-seen timestamp associated with your sign-ins, used for security, abuse prevention and rate limiting.
• Support data — information you provide when you contact us, such as by email.

The video and audio files you process are handled entirely on your own device. They are not uploaded to, transmitted to, or stored on our servers as part of processing, and we do not access, view, analyse or retain their contents. We do not use cookies for tracking or advertising, and we do not build advertising profiles about you.

We use the data above to:

• create and manage your account and authenticate your sign-ins;
• provide the Service, enforce plan quotas, and keep your usage in sync across the web and desktop apps;
• verify your email address and send essential service messages;
• secure the Service, prevent fraud and abuse, and enforce our Terms;
• respond to your support requests;
• comply with our legal obligations.

Where applicable data-protection law (such as the GDPR) applies, we process your personal data on the basis of: performance of our contract with you (to provide the Service); our legitimate interests (to secure and improve the Service and prevent abuse); your consent (where we ask for it); and compliance with legal obligations.

We do not sell your personal data. We share it only with:

• Service providers who host and operate the Service on our behalf — such as our cloud hosting and database providers and our email/SMTP provider — under agreements that require them to protect your data and use it only to provide their services to us.
• Legal and safety recipients — where we reasonably believe disclosure is required by law, legal process, or to protect the rights, property or safety of GhostClipper, our users or others.
• Business transfers — in connection with a merger, acquisition or sale of assets, subject to this policy.

We retain your account data for as long as your account is active and as needed to provide the Service. If you delete your account, we delete or anonymise your personal data within a reasonable period, except where we must retain it to comply with legal obligations, resolve disputes, prevent abuse or enforce our agreements.

We use technical and organisational measures designed to protect your data, including password hashing, encrypted transport (HTTPS), signed access tokens, account lockout and rate limiting. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security. You are responsible for keeping your credentials confidential.

We and our service providers may process your data in countries other than your own. Where we transfer personal data internationally, we take steps to ensure it receives an adequate level of protection consistent with applicable law.

Depending on where you live, you may have the right to access, correct, update, delete, restrict or object to the processing of your personal data, to data portability, and to withdraw consent. You can update much of your account data directly in the account portal, or contact us to exercise your rights. We will respond in accordance with applicable law. You also have the right to lodge a complaint with your local data-protection authority.

The Service is not intended for anyone under 18, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

We may update this Privacy Policy from time to time. We will post the revised version with a new “last updated” date, and your continued use of the Service after that date constitutes acceptance of the changes.

For any privacy question or request, contact us at support@ghostclipper.app.