Draft, not yet in effect. This policy is a working draft for the Voycut beta and hasn't been reviewed by a lawyer. Highlighted items still have to be filled in or confirmed.

LEGAL

Privacy Policy

1. Who we are

Voycut is a Windows app with an online account and AI service, operated by [OPERATOR: COMPANY OR INDIVIDUAL NAME], [POSTAL ADDRESS] ("we", "us"). We are the controller of the personal data described here. Contact: [PRIVACY CONTACT EMAIL].

[IF REQUIRED: EU / UK REPRESENTATIVE NAME AND ADDRESS]

2. The short version

3. What stays on your PC

The following are stored only on your computer and are not sent to us: your original video, audio and image files; your projects, clip analysis results, storyboards, timelines and previews; the projects Voycut writes for CapCut or DaVinci Resolve; and the app's logs. The app keeps your Voycut sign-in in the Windows Credential Manager. Beat detection for music and on-screen text recognition run locally. The app has no crash reporting or usage telemetry.

4. What we collect and why

DataWhyLegal basis (GDPR)
Account data: email address, password (stored hashed by Firebase), whether your email is verified, sign-in timestamps.To create your account, sign you in on the website and in the app, and send verification and password reset emails.Performance of a contract
Access record: your beta access status and when it started.To check that your account may use the AI service.Performance of a contract
Request metadata: app version, time, and error codes returned by the AI service, without the request content.To block outdated app versions and find faults.Legitimate interests
Content you send for AI processing (see section 5).To analyze your clips and plan and edit your video.Performance of a contract
Technical data: IP address and browser or app details in server logs kept by our hosting providers.Security, abuse prevention and operating the service.Legitimate interests
Messages you send us (for example feedback or support emails).To reply and improve Voycut.Legitimate interests

We don't sell or share your personal information for cross-context behavioral advertising, and we don't use it to build advertising profiles.

5. Data sent to AI services

When you use AI features, the Voycut app sends the following through our server to our AI model provider, [UPSTREAM MODEL PROVIDER NAME]:

Our server passes these requests on and does not store their content or keep a per-account record of them. The provider processes the content to return a result. Its retention period is [UPSTREAM RETENTION PERIOD], and it [DOES / DOES NOT] use the content to train its models.

Voiceover. If voiceover is available and you turn it on, the text to be spoken is sent through our server to ElevenLabs, which returns the audio. If ElevenLabs is unavailable to us, we may switch to Fish Audio instead; we never send the same request to both. Retention: [ELEVENLABS / FISH AUDIO RETENTION PERIOD]. Training use: [YES / NO].

Please don't include information in your footage or text that you don't want processed this way, such as other people's sensitive personal data.

6. Service providers (sub-processors)

ProviderPurposeLocation
Google LLC (Firebase Authentication, Cloud Firestore)Accounts, sign-in emails and access recordsUnited States
Vercel Inc.Hosting this website and the server that relays AI requestsUnited States [CONFIRM REGION]
[UPSTREAM MODEL PROVIDER NAME]AI analysis and planning[LOCATION]
ElevenLabs Inc.Voiceover, only if you use it[LOCATION]
Fish Audio [LEGAL ENTITY NAME]Alternative voiceover provider, only if we switch to it and you use voiceover[LOCATION]

The app also downloads files directly from third parties, which receive your IP address: the installer from GitHub, and, on first launch, local AI model files from Hugging Face (or its mirror hf-mirror.com). If background music search is set up in the app, music search terms are sent directly to Jamendo.

7. International transfers

Our providers process data in the United States and possibly other countries outside your own. For transfers of personal data from the EEA, the UK or Switzerland, we rely on [TRANSFER MECHANISM, e.g. the European Commission's Standard Contractual Clauses (and the UK Addendum), or the provider's EU-US Data Privacy Framework certification]. You can ask us for a copy of the relevant safeguards.

8. How long we keep data

9. Your rights and deleting your account

Depending on where you live (for example under the GDPR, the UK GDPR or California law), you may have the right to access, correct, delete or receive a copy of your personal data, to object to or restrict certain processing, and to withdraw consent where we rely on it. We won't treat you differently for using these rights.

To delete your account or make any other request, email [PRIVACY CONTACT EMAIL] from the address you signed up with. We'll delete your Firebase account and your access record within [N, at most 30] days and confirm by email. We respond to all requests within one month. Data on your PC is yours to delete: uninstall Voycut and remove its project folders.

You can also complain to your local data protection authority.

10. Children

Voycut is not meant for children. You must be at least [MINIMUM AGE, e.g. 16] years old to create an account. If you believe a child has given us personal data, contact us and we'll delete it.

11. Security

Connections to our server use HTTPS. AI service keys are kept on our server, not in the app. Access to account data is limited to what the service needs. No system is perfectly secure, and we'll notify you and the authorities of a breach where the law requires.

12. Changes

If we change this policy, we'll update the date above and, for significant changes, tell you by email or in the app before they take effect.

13. Contact

[OPERATOR: COMPANY OR INDIVIDUAL NAME], [POSTAL ADDRESS], [PRIVACY CONTACT EMAIL].