Privacy Policy

1. Operator and scope

ClipmivoAI is operated by Yang Ding as an individual based in Beijing, China. Yang Ding is responsible for personal information processed by this service. Contact [email protected] for privacy, support and data-rights requests. No separate data protection officer has been appointed.

This policy covers the website, accounts, video creation and API/CLI services at clipmivoai.com. Third-party checkout, identity and model services also have their own privacy rules.

2. Information we process

Account and security: email address, identity-service user ID, login sessions, verification results and necessary security logs. Email-code sign-in does not create a separate website password. If Google sign-in is offered and you choose it, we process the basic account information you authorize.

Creation and usage: prompts, uploaded images/video/audio, outputs, drafts, model settings, task status, usage, API-key verification data and permissions, callback settings and delivery records. Do not include passwords, payment-card details or unnecessary sensitive personal information in prompts or task metadata.

Transactions and communications: order IDs, amounts, currencies, payment/refund status, credit ledgers and support messages you send us. Network infrastructure processes IP addresses, request times, browser request information and errors to deliver the service and prevent abuse.

3. Purposes and legal bases

We process information to perform our service contract, including authentication, requested tasks, storage, delivery, usage measurement and orders. Necessary transaction records and lawful requests are handled to meet legal obligations. Where applicable law permits, necessary security and support processing relies on legitimate interests in protecting accounts and operating the service. Optional processing that requires consent relies on consent, which you may withdraw.

We do not sell personal information or share it for cross-context behavioral advertising. Private creations are not published as showcases without your permission, and we do not ourselves train models on your private inputs or outputs. Third parties involved in processing a task handle content under applicable terms; our commitments do not mean that every third party retains no data.

4. Cookies, local storage and communications

Optional page and fixed product measurement is sent only after you choose Accept optional. The local-storage key clipmivo:optional-consent:v1 stores accepted or rejected until you change it or clear site data; an old notice-dismissal record is not consent. Reopen Cookie settings in the footer at any time. Withdrawal stops future measurement and reloads the page. Optional measurement stays off if browser storage is unavailable or Do Not Track or Global Privacy Control is enabled.

Language handling: a supported URL path locale takes priority, followed by a valid lang query parameter. The unqualified home path / defaults to English; other paths use saved clipmivo.locale, with legacy frameflow.locale support, or fall back to English. Manual selections normally use clipmivo.locale; localized subpages may navigate first, retaining the choice in the URL. zh-CN uses Simplified Chinese source text; missing translations or a failed language-catalog load fall back to English. Locale preferences are not used for analytics or advertising, and user prompts are not translated.

Necessary login cookies maintain secure sessions, and Cloudflare Turnstile helps prevent abuse. Language preferences and guest drafts may be stored locally on your device; browser settings can clear them, which may remove preferences or drafts. When enabled, we use our aggregate analytics on Cloudflare Workers for redacted page visits, source category, country or region, device category, and fixed product actions such as starting the studio, receiving a quote and entering checkout. Events contain only non-sensitive attributes such as language, workflow, model, credits or USD amount. We do not store visitor IP addresses, cookies or user IDs in this analytics dataset, and do not send query parameters, full referrer URLs, prompts, uploaded media, email addresses, API keys or payment details to it.

Verification codes, security alerts, order messages and policy notices are service communications. There is currently no marketing-email subscription program. If one is introduced, required consent and unsubscribe options will be provided when subscribing.

5. Information sharing and disclosure

Operational notifications: we use Lark to send necessary order IDs, amounts and status, task IDs and models, service alerts and aggregate statistics to a private internal operations group for delivery and reconciliation support. These notices do not include full email addresses, prompts, uploaded media, generated videos, access tokens or signed download links. Sent notification records are retained on the site for 90 days; failed notices remain until resolved. Lark chat messages are managed separately by the operator for service needs. Contact our privacy email for related access or deletion requests.

We use third-party processing for cloud infrastructure, authentication, email delivery and model computation. When you submit a generation request, necessary prompts, selected media and settings are transmitted to the systems processing that task to fulfill your request. Contact our privacy email to ask about relevant data recipients.

The checkout provider, such as Waffo Pancake or Creem, handles payment, billing contact details, taxes, receipts, refunds and disputes and, where applicable, acts as Merchant of Record (MoR). Independently held information is subject to that provider’s privacy policy and legal retention obligations. ClipmivoAI servers do not store full payment-card numbers or security codes. We retain necessary order, payment-status and refund records.

Necessary information may also be disclosed to comply with applicable law or lawful requests, protect rights, or provide integrations you expressly request. Task notifications to a callback destination you configure contain the limited fields described for that feature.

Prompt safety checks

Before generation, we send prompts, negative prompts and relevant text settings to OpenAI for content moderation. Reference images are made available to OpenAI individually through short-lived signed links. When semantic assessment is needed, prompts, negative prompts and context such as the reference-image count are sent to DeepSeek to check identity replacement and unsafe exclusions; reference-image pixels are not currently sent to DeepSeek. This processing may involve international transfers to China, the United States and other regions. Our moderation logs contain only prompt hashes, decisions, request IDs and necessary account identifiers for up to 180 days, without raw prompts or reference images. Data independently held by these providers is subject to their privacy policies and retention arrangements; contact [email protected] for applicable details. Rejected or unavailable moderation prevents queuing and charging generation credits. This is not comprehensive screening of audio, video or generated outputs.

Payment confirmation emails

When order confirmation emails are enabled, your account email and order information are processed by our email delivery provider to send confirmation, including [email protected] for support. The confirmation does not replace the payment provider’s tax receipt. The recipient address is removed from our local delivery queue after sending.

6. Retention and deletion

Account information and creative content are retained while your account is active and you need that storage. You can delete media and works in the website or request account closure by email. We aim to process a complete, identity-verified request within 30 calendar days and explain any legally permitted extension. File deletion takes time, and deletion from third-party systems and backups may take additional time.

Our retention schedule is up to 24 months after resolution for routine support records, up to 6 months for security and operational audit records, and 5 years after a transaction for necessary transaction and refund records. Where law, tax requirements, unresolved disputes or fraud-prevention obligations require longer retention, only the necessary records are retained with restricted use. Expired records are to be deleted or anonymized.

Identity, payment, email and model services may retain records they independently hold under their own legal obligations and retention arrangements. We assist with applicable requests to relevant data recipients rather than promise direct deletion of all their records.

7. Security and international processing

We use HTTPS, protected session cookies, account-scoped access and API-key permissions. No system can guarantee absolute security; report concerns to [email protected]. A reportable breach will be notified to authorities and affected users within applicable legal deadlines; GDPR supervisory notification, where required, is generally due within 72 hours of awareness.

The processing described above may take place in China, the United States and other countries or regions. International processing must comply with applicable law, using required transfer safeguards where necessary. Contact our privacy email for recipients and safeguards relevant to your request.

8. Your rights

As provided by applicable law, you may request access, correction, deletion, restriction, objection, a portable copy or withdrawal of consent, and complain to your local supervisory authority. Account export covers relevant records held by this application; request other information at [email protected]. Reasonable identity verification may be required. We do not discriminate against you for exercising legal rights.

9. Age restriction

The service is intended only for people aged 18 or older. We do not knowingly collect personal information from people under 18. Contact us if you believe this has occurred so we can investigate and arrange deletion.

10. Updates and contact

Material changes will ordinarily be announced through the website or account email at least 15 days in advance; legal or urgent security requirements may require earlier effect. Where renewed consent is required, we will seek it. Contact: Yang Ding, Beijing, China; [email protected].