Privacy Policy
What CloneCut AI collects, why, which services handle your videos, photos and payments, how long data is kept and how to delete it.
Last updated: November 5, 2026
Who we are
CloneCut AI (clonecutai.io) is operated by TOOLVERSE LTD ("we", "us"). This policy explains what we collect when you use the site, why we collect it, which services handle it for us and how you can delete it. Questions go to support@clonecutai.io.
What we collect
- Your Google account details. When you sign in with Google, we receive your name, email address and profile picture. We never see your Google password.
- The videos you upload. The short source video (MP4 or MOV, 3 to 15 seconds) you upload to clone, stored privately in your account.
- The photos you upload. The one to three photos of a person, pet or product you upload for a video, stored privately in your account.
- Your videos and history. Each video you make, the subject type and any extra direction you typed, the quality, the length, whether the original sound was kept, the credits it cost and whether it finished.
- Reports you send. If you report a video, the reason, any note you add, and how we settled it (credits returned or a refund).
- Purchases and credits. The pack or plan you bought, the amount paid, your credit balance and the Stripe references for each payment. Card details go straight to Stripe; we never see or store your card number.
- Sign-in sessions. The IP address and browser type of each signed-in session, used to keep you signed in and to spot misuse.
- Messages you send us. If you email support, we keep the conversation so we can help you.
- Visit statistics. Pages viewed, the site that sent you, country and device type, collected without cookies.
We do not use your videos or photos to recognise or identify anyone, and we do not create biometric templates from them.
How we use it
- To run your account and show your videos and credit balance.
- To make your videos. Your source video, your photos and the instructions for the clip are sent to an AI video provider that renders the new video. The finished MP4 is stored in your account.
- To tell you about your videos. We email you when a video is ready or could not be made, and about the outcome of a report you send us. These are service emails, not marketing.
- To take payments, add credits, return credits when a generation fails, and settle reports with credits or refunds.
- To answer support requests and to prevent fraud and abuse.
- To see, in aggregate, which pages people visit so we can improve the site.
We do not sell your data, use it for advertising, publish your videos or photos, or use them to train AI models.
Legal bases (EEA and UK)
We process your data to provide the service you signed up and paid for (contract), to keep the service secure and understand how it is used (legitimate interests), and to keep payment records (legal obligation). When a video or photo shows another person, you confirm that they agreed to it before you upload it.
Services that handle data for us
- Cloudflare: hosting, database, file storage (Cloudflare R2), security and cookieless traffic statistics. It holds everything the site stores, including your uploaded videos, photos and finished videos.
- Google: sign-in. Google shares your name, email address and profile picture with us when you sign in.
- Stripe: payments. It receives your email address and the details of each purchase and payment.
- WaveSpeed AI: AI video generation. It receives your source video, your photos and the settings for each video, only to make that video.
- Plausible Analytics, which we host ourselves: visit statistics without cookies or personal identifiers.
These services may process data in the United States and other countries, each under its own privacy terms. The AI provider may keep the files it receives for a limited time to run and secure its service.
How long we keep it
- Your account, uploaded videos, photos, finished videos and history are kept until you delete them or your account.
- When you delete your account (Account → Profile → Delete Account), we delete your account, sessions, credit balance, purchase and generation records, and the uploaded videos, photos and finished videos stored for you. Unused credits are lost.
- We keep a one-way hash of your email address, not the address itself, so the same address cannot sign up again within 30 days of a deletion.
- Stripe keeps payment records for as long as financial law requires.
Cookies and browser storage
We only use the cookies needed to sign you in and keep the site secure. There are no advertising cookies. The Cookie Policy lists what the site stores in your browser.
Your rights
Depending on where you live, you may have the right to access, correct, export or delete your personal data, to object to or restrict how we use it, and to complain to your local data protection authority. You can delete your account yourself at any time. If someone uploaded a video or photo of you without your consent, email us and we will remove it. For anything else, email support@clonecutai.io and we will reply within 30 days.
Children
CloneCut AI is only for adults. It is not meant for anyone under 18, and videos or photos of children must not be uploaded. If you think a child's data, video or photo has reached us, email us and we will delete it.
Security
The site only runs over HTTPS. Uploaded videos, photos and finished videos are private: only the signed-in owner can open them. No system is perfectly secure, so please tell us right away if you notice anything wrong.
Changes to this policy
If we change this policy, we will update this page and the date at the top. We will announce significant changes on the site before they apply.