LumeClip

Privacy Policy

Last updated: October 6, 2026

LumeClip ("we", "our") respects your privacy. This policy explains what data we collect, why we collect it, and how you can control it.

1. Data we collect

  • Account: name, email address, and profile picture provided by Google at login via OAuth.
  • Projects: YouTube video URLs or video files you submit for processing.
  • Usage: video minutes consumed, active plan, and project history.
  • Payment: transactions processed by Stripe. We do not store card data — Stripe is the controller of that data.
  • Google Drive (optional): if you connect your Drive account, we store an access token encrypted with AES-256-GCM solely to upload your clips to your own Drive. We do not read or modify other files.
  • Technical logs: IP address, user-agent, and server errors for security and diagnostic purposes (via Sentry, retained for 90 days).

2. How we use your data

  • Process your videos and deliver the generated clips.
  • Manage your account, plan, and minute balance.
  • Process payments via Stripe.
  • Send transactional notifications (e.g., clip ready).
  • Improve the quality and stability of the service.

We do not sell your data. We do not use your videos to train AI models without explicit consent.

3. Data sharing

  • Stripe — payment processing.
  • AssemblyAI — audio transcription (audio files are deleted after processing per their policy).
  • OpenAI / Anthropic — content analysis for clip suggestions, translation and the synthetic voice used for dubbing. We send the transcript text and, to suggest a layout, a few still frames from the video; the full video is not sent. Under OpenAI's API policy, this content is not used to train models.
  • TikTok, YouTube and Instagram (optional) — if you connect an account, we publish the clips you schedule to it. The platform receives the video and caption; disconnecting deletes the access token and cancels that account's scheduled posts.
  • Google — OAuth login and, if you connect, Drive uploads.
  • Sentry — error monitoring (no personally identifiable data in payloads).
  • Vercel — frontend hosting and cookieless visit counting (Vercel Analytics).
  • Google Analytics — site usage statistics, only if you accept analytics cookies (see the Cookie Policy). It does not receive your name, email or the content of your videos.

All third parties listed above are data processors operating under data protection agreements.

4. Data retention

  • Original video files: deleted after processing is complete.
  • Generated clips: retained while your account exists or until you delete the project.
  • Account data: retained while the account is active. Upon account deletion, all data is permanently removed within 30 days.

5. Your rights

You have the right to:

  • Access the data we hold about you.
  • Correct inaccurate data.
  • Delete your account and all associated data (available in profile settings).
  • Data portability — request via email.
  • Revoke Google Drive access at any time in profile settings.

6. Security

Access tokens for third-party services (Google Drive, YouTube, TikTok, Instagram) are encrypted with AES-256-GCM before storage. All communications use HTTPS. Database access is restricted to our infrastructure.

7. Cookies

We use session cookies to keep you authenticated. See our Cookie Policy for details.

8. Changes

Significant changes will be communicated by email with at least 15 days' notice. Continued use of the service after that date constitutes acceptance of the new policy.

9. Contact

Questions or requests: support@lumeclip.com