This Privacy Notice explains how Clippum collects, uses, and protects your personal information when you use our website at clippum.com and our clip-generation service. We've written it in plain English because legalese is exhausting.
1. Who we are
Clippum is a service operated by Robert Sielmann Balsells PA, a Florida Professional Association with offices at 5 Island Ave, Apt 11K, Miami, FL 33139, United States. You can reach our privacy contact at hi@clippum.com.
2. What we collect
Information you give us
- Account details: email address, password (stored hashed — we never see your actual password), display name if you sign in with Google.
- Content: the YouTube links you submit, the topics you select, and any custom instructions you write.
- Payment information: handled entirely by Stripe. We only store your subscription plan and a Stripe customer ID — never your card number.
- Communications: when you email us, we keep your message and our reply.
Information collected automatically
- Usage data: IP address, browser type, device info, pages visited, time spent, and which features you use.
- Cookies: a single essential session cookie (
clippum_session) to keep you logged in. We don't use marketing or analytics cookies in this version.
- Logs: server logs for security, debugging, and abuse prevention. Kept for 90 days then deleted.
Information from third parties
- Google (if you sign in with Google): we receive your email, your Google account ID, and your name. We don't access anything else.
- YouTube (via yt-dlp): we fetch metadata and audio of videos you submit a link to. We don't get any account information from YouTube about you.
3. Why we use your information
- To run the service: processing your clips, managing your account.
- To charge you: subscription billing through Stripe.
- To send transactional emails: verification, password reset, receipts, expiry warnings.
- To prevent abuse and fraud.
- To improve the service: anonymized usage analytics.
- To comply with legal obligations: tax records, valid court orders, regulatory requirements.
We do not sell your personal information. We do not share it for cross-context behavioral advertising. We do not use your content to train AI models. If you're a California resident, this means we do not "sell" or "share" your personal information as those terms are defined under the CCPA/CPRA.
4. Who we share data with
We share specific data with the following service providers, each contractually bound to protect it:
- Stripe, Inc. (payments) — name, email, payment details. Stripe's privacy policy.
- Resend, Inc. (transactional emails) — email address and message content. Resend's privacy policy.
- Cloudflare, Inc. (CDN, DNS, R2 storage for clips) — IP address, generated clips. Cloudflare's privacy policy.
- Hetzner Online GmbH (server hosting, in Germany or Finland) — all server-side data. Hetzner's privacy policy.
- OpenAI, L.L.C. (analyzing transcripts to find clippable moments) — transcript text only, no personal identifiers attached. OpenAI's privacy policy.
- Groq, Inc. (audio transcription via Whisper) — audio content only. Groq's privacy policy.
- Google LLC (only if you use "Sign in with Google") — limited to the OAuth handshake. Google's privacy policy.
We may also disclose data to comply with a valid subpoena, court order, or other legal process — but we will challenge overbroad requests and notify you when legally allowed.
5. How long we keep data
- Source videos you submit: deleted from our servers immediately after processing — typically within 30 minutes.
- Generated clips: stored in cloud storage for 15 days, then permanently deleted. Download them before they expire.
- Account information: kept until you delete your account.
- Billing and tax records: kept for 7 years as required by U.S. federal and Florida tax law.
- Server logs: 90 days.
- Anonymized usage statistics: indefinitely.
6. International data transfers
Clippum is operated from the United States, but our servers and some providers are based in the European Union or other countries. By using the service, you understand that your data may be transferred to and processed in any country where we or our providers operate. Where required by law (e.g. for users in the European Economic Area), we rely on appropriate safeguards such as the EU Standard Contractual Clauses.
7. How we keep data safe
- All traffic is encrypted with HTTPS (TLS 1.2+).
- Passwords are hashed with bcrypt — even we can't read them.
- API keys for Stripe, OpenAI, etc. are encrypted at rest.
- Our server is behind a firewall, with brute-force protection on the login.
- Access to the production environment is strictly limited.
No system is bulletproof. If we ever experience a security incident that materially affects you, we'll notify you without undue delay, consistent with applicable U.S. state breach notification laws.
8. Your rights
If you're a California resident (CCPA / CPRA)
You have the right to:
- Know what personal information we collect about you, where we got it, why we use it, and who we share it with.
- Access a copy of the personal information we hold about you.
- Delete your personal information (subject to legal exceptions like tax recordkeeping).
- Correct inaccurate personal information.
- Opt out of sale or sharing of your personal information. As noted above, we don't sell or share for cross-context behavioral advertising, but you have the right anyway.
- Limit use of sensitive personal information. We don't process sensitive personal information.
- Non-discrimination: we won't deny service, charge different prices, or downgrade quality because you exercised a privacy right.
If you're a resident of Virginia, Colorado, Connecticut, Utah, or another U.S. state with a comprehensive privacy law
You generally have similar rights to those described above. To exercise them, contact us as described below.
If you're in the European Economic Area, the UK, or Switzerland
You have the right to access, correct, delete, restrict, port, and object to processing of your personal data, and to withdraw consent where applicable. You also have the right to lodge a complaint with your local data protection authority.
How to exercise your rights
Email hi@clippum.com with "Privacy request" in the subject line. We'll verify your identity by sending a confirmation to the email associated with your account, and respond within 45 days (extendable by another 45 days if necessary, per CCPA). You may also designate an authorized agent to act on your behalf — we'll require written authorization.
9. Children's privacy
Clippum is not directed at children under 13. We do not knowingly collect personal information from anyone under 13. If we learn we have collected information from a child under 13, we will delete it promptly. This is consistent with the U.S. Children's Online Privacy Protection Act (COPPA).
10. Cookies
We only use one essential cookie: clippum_session, used to keep you signed in. It expires after 30 days of inactivity. We don't use tracking, advertising, or analytics cookies in the current version of the service. If we ever add them, we'll show a cookie consent banner first.
We honor Global Privacy Control (GPC) signals where required by law as a request to opt out of sale or sharing of personal information.
11. Email communications and CAN-SPAM
We send transactional emails (verification, password reset, receipts, clip expiry warnings) that are part of providing the service — these are not promotional. If we ever send promotional emails, every one will include a one-click unsubscribe link, per the U.S. CAN-SPAM Act.
12. Changes to this notice
If we make material changes, we'll email you before they take effect and update the "Last updated" date at the top of this page. Continued use of Clippum after changes take effect means you've accepted them.
13. Contact us
Questions, requests, complaints? Email hi@clippum.com, or write to:
Robert Sielmann Balsells PA
Attn: Privacy
5 Island Ave, Apt 11K
Miami, FL 33139
United States