LumeClip

Privacy Policy

Last updated: July 13, 2026

LumeClip ("we", "our") respects your privacy. This policy explains what data we collect, why we collect it, and how you can control it.

1. Data we collect

  • Account: name, email address, and profile picture provided by Google at login via OAuth.
  • Projects: YouTube video URLs or video files you submit for processing.
  • Usage: video minutes consumed, active plan, and project history.
  • Payment: transactions processed by Stripe. We do not store card data — Stripe is the controller of that data.
  • Google Drive (optional): if you connect your Drive account, we store an access token encrypted with AES-256-GCM solely to upload your clips to your own Drive. We do not read or modify other files.
  • Technical logs: IP address, user-agent, and server errors for security and diagnostic purposes (via Sentry, retained for 90 days).

2. How we use your data

  • Process your videos and deliver the generated clips.
  • Manage your account, plan, and minute balance.
  • Process payments via Stripe.
  • Send transactional notifications (e.g., clip ready).
  • Improve the quality and stability of the service.

We do not sell your data. We do not use your videos to train AI models without explicit consent.

3. Data sharing

  • Stripe — payment processing.
  • AssemblyAI — audio transcription (audio files are deleted after processing per their policy).
  • OpenAI / Anthropic — content analysis for clip suggestions. Content is sent as transcription text, not as video.
  • Google — OAuth login and, if you connect, Drive uploads.
  • Sentry — error monitoring (no personally identifiable data in payloads).
  • Vercel — frontend hosting.

All third parties listed above are data processors operating under data protection agreements.

4. Data retention

  • Original video files: deleted after processing is complete.
  • Generated clips: retained while your account exists or until you delete the project.
  • Account data: retained while the account is active. Upon account deletion, all data is permanently removed within 30 days.

5. Your rights

You have the right to:

  • Access the data we hold about you.
  • Correct inaccurate data.
  • Delete your account and all associated data (available in profile settings).
  • Data portability — request via email.
  • Revoke Google Drive access at any time in profile settings.

6. Security

Access tokens for third-party services (Google Drive, YouTube) are encrypted with AES-256-GCM before storage. All communications use HTTPS. Database access is restricted to our infrastructure.

7. Cookies

We use session cookies to keep you authenticated. See our Cookie Policy for details.

8. Changes

Significant changes will be communicated by email with at least 15 days' notice. Continued use of the service after that date constitutes acceptance of the new policy.

9. Contact

Questions or requests: support@lumeclip.com