Privacy policy

FrameCutter is operated by Kairen AI Consulting (KvK 98386212), trading as FrameCutter (“we”, “us”); full contact details are in section 14. We are the controller of the personal data described here. This policy explains what we collect, why, who else handles it, how long we keep it and how to delete it.

1. Data we collect

Cookies

We set only strictly necessary cookies: the ones that keep you signed in (sb-…-auth-token, sometimes split into numbered parts) and one that completes a sign-in securely while it's happening (sb-…-auth-token-code-verifier). No advertising, analytics or tracking cookies, which is why there is no cookie banner. Checkout and the billing portal run on our payment partner's pages, and Google sign-in on Google's; those set their own cookies under their own policies.

We don't collect passwords (you sign in with a code or Google), card numbers, your contacts, your precise location or advertising identifiers, and we don't connect to your social media accounts.

2. People in your footage

Your footage often shows you, and sometimes other people. We process it only to make your videos, on your instructions. Make sure everyone who appears in what you upload is fine with it (see our Terms). If you appear in someone else's FrameCutter video and want it removed, email privacy@framecutter.com.

3. Google user data

If you choose “Continue with Google”, Google shares only your name, email address, profile picture and Google account ID with us (the basic sign-in scopes openid, email and profile). We don't ask for access to Gmail, Drive, YouTube or any other Google data. We use it only to create your account and sign you in; we don't sell it, use it for advertising, or use it to train AI models. FrameCutter's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can remove FrameCutter's access in your Google Account under Third-party apps & services.

4. How we use AI

• The AI never touches your pixels or your voice. It writes an edit plan (which lines to keep, in what order, where captions and effects go); our own software cuts your real footage to that plan. We don't generate video, faces or voices.
• What the AI model providers receive: transcripts, your prompt and chat messages, your style settings and learned rules, the names and tags of your clips, and, when you copy a style from a video you chose, a set of still frames from that video. They don't receive your email address, payment details or your full video files.
• What the transcription provider receives: the sound of your clips only, never the picture. We opt out of its model-improvement program on every request, so the audio isn't used to train its models.
• Not used for training by our AI model providers: we use their paid business services, under which they don't use what we send to train their models. They may keep it for a limited time to detect abuse and meet legal obligations.
• Your corrections teach your editor. Rules learned from your corrections are stored in your account and used for your videos.
• Helping improve the editor is your choice, and off by default. If you turn on “Help improve FrameCutter's editing” (during onboarding or on the Account page), we may use your corrections and edits (what you asked for, the plans, which cuts you kept or changed) to make the editor better for everyone. Your footage and videos are never shared or published. If you leave it off, your corrections and edits are only ever used for your own editor. You can turn it off any time; from then on, nothing new is used.

We don't make automated decisions about you that have legal or similarly significant effects.

5. Service providers

These providers help us run FrameCutter. Each receives only what it needs, under data-processing terms.

6. Legal bases

• Performance of a contract: your account, sign-in, editing your videos (including the footage and the people in it, on your instructions), storage, emails about your videos, and billing.
• Legitimate interests: security logs and bot protection, preventing abuse, and measuring what each step costs us. You can object to these at any time.
• Legal obligation: tax records and answering lawful requests from authorities.
• Consent: the waitlist, and “Help improve FrameCutter's editing” if you turn it on.

7. International transfers

We're established in the EU, and your footage, videos and database are stored in the EU. Some providers, including our AI model providers, transcription provider, payment partner and security provider, are based in the United States or may process data outside the European Economic Area. Where data leaves the EEA or the UK, we rely on the European Commission's Standard Contractual Clauses (with the UK Addendum) or on the EU–US Data Privacy Framework where the provider is certified.

8. Retention and deletion, in plain words

• Originals: the full-quality (4K) file you upload is deleted 14 days after upload. We keep a lighter 1080p copy, so old clips stay editable and exportable.
• When a paid plan ends: 30 days later, all your footage, copies, videos, transcripts, edits and style data are deleted. If you cancel, your plan ends at the end of the period you paid for, and the 30 days start then. Your account stays, on the Free plan.
• Delete my data (Account page): deletes all of the above immediately. Your account, plan and your record of the “Help improve” choice stay.
• Delete account (Account page): cancels any subscription immediately, deletes all of the above, your usage records and your login, including any Google sign-in data. It can't be undone.

What remains after deletion: invoices and payment records at our payment partner for as long as tax law requires, copies in our providers' encrypted backups until those backups expire, and security logs until they expire. None of it is used to run an account. You can also ask us to delete your data by emailing privacy@framecutter.com.

9. Security

All traffic is encrypted. Every account's data is separated at the database level, so one account can't read another's. Footage and videos are in private storage and are only served to their owner through short-lived links. Sign-ins and AI requests are protected by rate limits and bot checks. No system is perfectly secure; we'll tell you and the authorities about a breach where the law requires it.

10. Children

FrameCutter isn't meant for anyone under 16, and paid plans are for adults (18+). We don't knowingly collect data from children; if you believe a child has given us personal data, email privacy@framecutter.com and we'll delete it.

11. Your rights

You can ask to access, correct, delete or receive a copy of your personal data, object to processing based on our legitimate interests, and ask us to restrict processing. You can delete your data or your account yourself on the Account page. Email privacy@framecutter.com; we answer within one month.

You can also complain to a supervisory authority. Ours is the Dutch Data Protection Authority (Autoriteit Persoonsgegevens), autoriteitpersoonsgegevens.nl, but you can also contact the authority where you live. If you live in California or another US state with a privacy law, you have the same rights to know, access, correct and delete; we don't sell or share personal data for advertising, and you'll never be treated differently for using your rights.

12. We don't sell your data

We have never sold personal data and don't share it for advertising. We may disclose data if the law requires it, to enforce our Terms, to protect someone's rights or safety, or as part of a merger or sale of the business, in which case we'll tell you first.

13. Changes to this policy

If we change this policy, we'll update the date at the top. For important changes we'll tell you by email or in the app before they take effect.

14. Contact