Privacy Policy

1. Operator and scope

ClipmivoAI is operated by Yang Ding as an individual based in Beijing, China. Yang Ding is responsible for personal information processed by this service. Contact contact@clipmivoai.com for privacy, support and data-rights requests. No separate data protection officer has been appointed.

This policy covers the website, accounts, video creation and API/CLI services at clipmivoai.com. Third-party checkout, identity and model services also have their own privacy rules.

2. Information we process

Account and security: email address, identity-service user ID, login sessions, verification results and necessary security logs. Email-code sign-in does not create a separate website password. If Google sign-in is offered and you choose it, we process the basic account information you authorize.

Creation and usage: prompts, uploaded images/video/audio, outputs, drafts, model settings, task status, usage, API-key verification data and permissions, callback settings and delivery records. Do not include passwords, payment-card details or unnecessary sensitive personal information in prompts or task metadata.

Transactions and communications: order IDs, amounts, currencies, payment/refund status, credit ledgers and support messages you send us. Network infrastructure processes IP addresses, request times, browser request information and errors to deliver the service and prevent abuse.

3. Purposes and legal bases

We process information to perform our service contract, including authentication, requested tasks, storage, delivery, usage measurement and orders. Necessary transaction records and lawful requests are handled to meet legal obligations. Where applicable law permits, necessary security and support processing relies on legitimate interests in protecting accounts and operating the service. Optional processing that requires consent relies on consent, which you may withdraw.

We do not sell personal information or share it for cross-context behavioral advertising. Private creations are not published as showcases without your permission, and we do not ourselves train models on your private inputs or outputs. Third parties involved in processing a task handle content under applicable terms; our commitments do not mean that every third party retains no data.

4. Cookies, local storage and communications

Necessary login cookies maintain secure sessions, and Cloudflare Turnstile helps prevent abuse. Language preferences and guest drafts may be stored locally on your device; browser settings can clear them, which may remove preferences or drafts. We currently do not deploy Google Analytics or advertising pixels.

Verification codes, security alerts, order messages and policy notices are service communications. There is currently no marketing-email subscription program. If one is introduced, required consent and unsubscribe options will be provided when subscribing.

5. Information sharing and disclosure

Operational notifications: we use Lark to send necessary order IDs, amounts and status, task IDs and models, service alerts and aggregate statistics to a private internal operations group for delivery and reconciliation support. These notices do not include full email addresses, prompts, uploaded media, generated videos, access tokens or signed download links. Sent notification records are retained on the site for 90 days; failed notices remain until resolved. Lark chat messages are managed separately by the operator for service needs. Contact our privacy email for related access or deletion requests.

We use third-party processing for cloud infrastructure, authentication, email delivery and model computation. When you submit a generation request, necessary prompts, selected media and settings are transmitted to the systems processing that task to fulfill your request. Contact our privacy email to ask about relevant data recipients.

For purchases made through Waffo Pancake checkout, Waffo Pancake handles payment and related transaction information in the payment or merchant role described at checkout. ClipmivoAI servers do not store full payment-card numbers or security codes. We retain necessary order, payment-status and refund records.

Necessary information may also be disclosed to comply with applicable law or lawful requests, protect rights, or provide integrations you expressly request. Task notifications to a callback destination you configure contain the limited fields described for that feature.

6. Retention and deletion

Account information and creative content are retained while your account is active and you need that storage. You can delete media and works in the website or request account closure by email. We aim to process a complete, identity-verified request within 30 calendar days and explain any legally permitted extension. File deletion takes time, and deletion from third-party systems and backups may take additional time.

Our retention schedule is up to 24 months after resolution for routine support records, up to 6 months for security and operational audit records, and 5 years after a transaction for necessary transaction and refund records. Where law, tax requirements, unresolved disputes or fraud-prevention obligations require longer retention, only the necessary records are retained with restricted use. Expired records are to be deleted or anonymized.

Identity, payment, email and model services may retain records they independently hold under their own legal obligations and retention arrangements. We assist with applicable requests to relevant data recipients rather than promise direct deletion of all their records.

7. Security and international processing

We use HTTPS, protected session cookies, account-scoped access and API-key permissions. No system can guarantee absolute security; report concerns to contact@clipmivoai.com. A reportable breach will be notified to authorities and affected users within applicable legal deadlines; GDPR supervisory notification, where required, is generally due within 72 hours of awareness.

The processing described above may take place in China, the United States and other countries or regions. International processing must comply with applicable law, using required transfer safeguards where necessary. Contact our privacy email for recipients and safeguards relevant to your request.

8. Your rights

As provided by applicable law, you may request access, correction, deletion, restriction, objection, a portable copy or withdrawal of consent, and complain to your local supervisory authority. Account export covers relevant records held by this application; request other information at contact@clipmivoai.com. Reasonable identity verification may be required. We do not discriminate against you for exercising legal rights.

9. Age restriction

The service is intended only for people aged 18 or older. We do not knowingly collect personal information from people under 18. Contact us if you believe this has occurred so we can investigate and arrange deletion.

10. Updates and contact

Material changes will ordinarily be announced through the website or account email at least 15 days in advance; legal or urgent security requirements may require earlier effect. Where renewed consent is required, we will seek it. Contact: Yang Ding, Beijing, China; contact@clipmivoai.com.