Privacy policy
Last updated: November 2, 2026
ClipsForAI is built to know as little about you as possible. This page explains what we do process, why, and for how long.
In short
- You can use ClipsForAI without an account. If you create one, we ask only for an email address and a password.
- Videos and results are temporary: the video is deleted after processing, the results after 2 hours.
- We don’t sell data, show ads, or use analytics or tracking cookies.
- Your personal data is stored and processed in the European Union.
- You can download your data or delete your account yourself, at any time.
Who is responsible for your data
The data controller is LumonTec (LumonTec di Stefano Gagliotti), Corso Alessandro Volta 243, 80040 Terzigno (NA), Italy, VAT number IT10981501215, which operates ClipsForAI. For anything about your personal data, write to info@lumontec.it.
We have not appointed a Data Protection Officer; the address above reaches the person responsible for privacy.
What data we process
If you use ClipsForAI without an account
- A session identifier: a random code in a technical cookie, set only when you start your first job, so that the results are shown only to you.
- Your IP address, used for a moment to apply usage limits and stop abuse. We never store it: we keep only a code derived from it with a key that changes every day.
- What you submit: the link or the file, and the results we produce from it (title, frames, screenshot sheets, transcript). This is processed temporarily, as described below.
If you create an account
- Email address, stored encrypted.
- A password fingerprint (a scrypt hash). We never store or see your password itself.
- Account details: your plan, when the account was created, updated and activated.
- Usage counters: how many videos and how many seconds of video you processed each month, used for your plan limits and shown on your account page.
- Last login (the day only), to tell active accounts from abandoned ones and to help with support.
- API keys for the AI connector (Premium and Enterprise): the name you give each key, its first 12 characters, a hash of the key, when it was created and last used. Never the full key.
We send you emails only about your account: the activation link, a notice if you try to register an address that already has an account, and password reset links. News and product updates only if you ask for them (see below).
If you subscribe to news
News and product updates are optional: a separate, unticked box when you register, or a button on your account page. If you subscribe, we also record when you gave consent, the version of the text you agreed to and the language of the page, so that we can prove your consent and write to you in that language.
What we don’t collect
No name, postal address, phone number or payment data; no stored IP addresses; no location, device fingerprinting or browsing history; no analytics. The content you submit is never linked to your account in any lasting way.
Why we process it, and on what legal basis
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Processing your videos and showing you the results | Link or file, results, session identifier | Performance of the service you ask for (Art. 6(1)(b)) |
| Creating and running your account, including account emails | Email, password fingerprint, account details | Contract (Art. 6(1)(b)) |
| Applying the limits of your plan | Usage counters, daily counters | Contract (Art. 6(1)(b)) |
| Security and abuse prevention: rate limits, login protection, technical logs | Hashed IP address, encoded email address, account identifier | Our legitimate interest in keeping ClipsForAI secure and available for everyone (Art. 6(1)(f)) |
| News and product updates, only if you ask for them | Email, when you gave consent, version of the text and language | Consent (Art. 6(1)(a) GDPR and art. 130 of the Italian Privacy Code). You can withdraw it at any time with the link in every email, on your account page or by writing to us; withdrawing doesn’t affect your account |
| Accountability: a record of every view and change our staff make to an account | Staff identifier, account identifier, action, time | Our legitimate interest in the security of processing, and legal obligation (Art. 6(1)(f) and (c)) |
| Complying with the law, e.g. requests from authorities | Only what the law requires | Legal obligation (Art. 6(1)(c)) |
We don’t make decisions about you based solely on automated processing, and we don’t build profiles.
How long we keep it
| Data | How long |
|---|---|
| Video file (uploaded or downloaded) | Deleted as soon as processing ends, whether it succeeded or failed |
| Results: title, frames, screenshot sheets, transcript | 2 hours from the start of the job, then deleted automatically |
| The link you submitted | Until processing starts (usually seconds), then only in memory while it runs |
| Session and session cookie | 30 days from your last visit, or until you log out |
| Activation link / password reset link | 24 hours / 30 minutes, and single use |
| Accounts never activated | Deleted after 48 hours |
| Account: email, password fingerprint, plan, usage counters, API keys, day of last login | Until you delete your account |
| Consent to news: when, version of the text, language | Until you withdraw it or delete your account |
| Record of our staff’s views and changes to accounts | 12 months, then deleted automatically |
| Hashed IP addresses and usage limit counters | The daily key is discarded after 48 hours, after which a hash can no longer be linked to anything; counters last at most 24 hours |
| Failed login counters | 15 minutes for an address from one connection; one hour for an address from all connections |
| Technical logs | They contain no personal data; they are rotated automatically |
Who helps us, and where your data is
We never sell your data or share it with advertisers. We use a few providers, bound by contract to process data only on our instructions:
| Provider | What for | Data involved | Where |
|---|---|---|---|
| Contabo | Hosting of our servers | All the data described on this page | European Union (Germany) |
| Amazon Web Services (Amazon SES) | Sending account emails | Only your email address and the content of the email (activation or password reset link) | EU region of AWS; AWS is a US company, see below |
| Webshare | Proxy used only to download YouTube videos | No personal data about you: it sees only that our server connects to YouTube, over an encrypted connection | Not applicable: it receives no personal data |
Our staff: the controller’s authorised staff can see account data (email, plan, usage counters, API key names, consent to news) to give support, keep ClipsForAI secure, meet legal obligations and, if you subscribed, send you news. Every view and change is recorded, and the record is kept 12 months. The console we use never shows your videos, links or results.
News emails: we haven’t chosen a sending tool yet. We will add it to this list, with where it processes data, before the first news email.
Payments: paid plans are not available yet. When they launch, payments will be handled by Stripe, and we will update this policy before then.
Video platforms: when you submit a link, our server downloads the video from that platform, which sees our server and not you.
Your personal data is stored and processed in the European Union. Amazon Web Services, which sends our emails from its EU region, is a company based in the United States: any transfer of data outside the EU is covered by the AWS Data Processing Addendum, which includes the European Commission’s Standard Contractual Clauses, and by AWS’s certification under the EU-US Data Privacy Framework.
We disclose data to public authorities only when the law requires it.
Your rights
Under the GDPR you have the right to access your data, to correct it, to have it deleted, to restrict its processing, to receive it in a portable format and to object to processing based on our legitimate interest.
- Download your data: on your account page, “Your data” gives you a file with everything we hold about your account.
- Delete your account: on the same page. The account, its API keys and its sessions on every device are deleted at once; results you already produced disappear within 2 hours.
- Change your password on the account page; anything else (for example changing your email address) by writing to info@lumontec.it.
We answer within one month. We may ask you to write from the address registered on the account, to make sure the request really comes from you.
If you believe we are processing your data unlawfully, you can complain to the Italian Data Protection Authority (Garante per la protezione dei dati personali, garanteprivacy.it) or to the authority of the EU country where you live or work.
Children
ClipsForAI is not meant for people under 16. If you are under 16, please don’t create an account. If you believe a child has given us personal data, write to us and we will delete it.
Changes to this policy
When we change this policy we update the date at the top of the page. If a change is significant, we will tell account holders by email before it takes effect.