Legal · Privacy
Privacy Policy
This policy explains what KiroClip Lite collects, how we use it, how long we keep it, and the rights you have over your data. We keep data collection to what the Service needs to run.
Introduction
KiroClip Lite (“KiroClip”, “we”) is committed to protecting your privacy. By using the Service you agree to the collection and use of information described here. This policy works alongside our Terms of Service.
What we collect
2.1 Account information
- Name and email address (at registration)
- Profile picture, if you sign in with Google
- Your password, stored only as a salted hash, never in plain text
2.2 Usage data
- Videos you upload or import by URL
- Clips generated from your videos
- Job history and processing logs
- Credit balance and transaction history, including the record of each credit charged and each credit returned
- Plan and subscription status
- Settings you save for reuse, such as saved subtitle styles and brand kits
2.3 Connected social accounts
These are collected only if you choose to connect an account. Connecting is optional, and the Service works fully without it.
- Access and refresh tokens issued by the platform, which let us post on your behalf
- Your account or channel identifier, display name and profile picture on that platform, so you can see which account you are publishing to
- The posting status the platform returns for each clip you send, which we look up using the video identifiers we were given when we uploaded them
We never receive your password for any of these platforms. We do not read your private messages, and we never edit or delete anything already on your account. We do not read, list or analyse the videos that were already there, your comments, your subscribers or your analytics. What we can do is limited to the two things described above: identifying the account you connected, and publishing the clips you explicitly choose to send.
2.4 Payment information
Card and billing details are collected and processed exclusively by Dodo Payments. We do not store or have access to your full payment details, we only receive a transaction confirmation and your Dodo Payments customer ID.
2.5 Technical data
- IP address
- Browser type and version
- Device type
- Pages visited and actions taken in the Service
- Error logs
2.6 Communications
- Emails and support messages you send us
How we use it
We use your information to:
- provide and operate the Service
- process your videos and manage your credit balance
- send transaction confirmations and account notifications
- send service alerts (job done, credit warnings, plan changes)
- publish clips to a social account you have connected, when you ask us to
- improve the Service and fix bugs
- prevent fraud and abuse, and enforce our Terms
- comply with legal obligations
We do not:
- sell your personal data
- use your uploaded video content to train AI models
- share your data with advertisers
- post anything to a connected account without an explicit action from you
Storage, retention & security
4.1 Where your data lives
- Account & job data: a managed cloud database provider
- Video files & clips: a cloud object-storage provider
- Payment data: held by our payment processor, not on our servers
4.2 Retention
| Data type | Retention |
|---|---|
| Uploaded source video | Deleted shortly after processing |
| Generated clips, Free & Lite 10 | 3 days |
| Generated clips, Lite 30 | 5 days |
| Generated clips, Lite 50 | 7 days |
| Saved subtitle styles | While on a paid plan; locked when you return to Free and permanently deleted 30 days later, unless you resubscribe within that window |
| Saved brand kits | Stored with your account until you delete them or delete the account; they are locked, not deleted, if you return to Free |
| Account data | Until you delete your account. Deletion starts a 30-day grace period during which you can undo it; after that the data is permanently purged |
| Record that a mailbox claimed its free signup credit | Kept after account deletion. It holds the canonicalised email address and nothing else, and exists only so the one-per-person free credit cannot be claimed twice |
| Social account tokens | Deleted the moment you disconnect the account, with no grace period, and revoked with the platform at the same time. A connection that has not been used for 30 days is revoked and its tokens deleted automatically |
| Record of clips we published for you | Deleted within 7 days of you disconnecting that account. If you delete your KiroClip Lite account instead, it is removed with the rest of your data when the 30-day grace period ends |
| View, like and comment counts of clips we published for you | At most 30 days, then deleted automatically |
| Transaction logs | Up to 7 years (legal/tax requirement) |
You are responsible for downloading your clips before their retention window ends.
4.3 Security measures
We apply reasonable measures, including:
- encrypted transport (HTTPS/TLS)
- hashed passwords
- row-level security on the database
- access controls and API-key restrictions
- bot protection on our sign-up and login forms
- regular security updates
Third-party services
To deliver the Service we use a small number of trusted infrastructure providers, which may process your data on our behalf. We share data with them only as needed to run the Service, and we do not disclose the specific vendors publicly for security reasons. By category, they are:
| Type of provider | What they help us do |
|---|---|
| Cloud database & authentication | Store account data and sign you in |
| Cloud object storage | Store your uploaded videos and generated clips |
| Bot-protection provider | Protect sign-up, login and password reset from abuse |
| Product analytics provider | Measure how the Service is used - pages viewed and actions taken - so we can fix problems and improve it |
| GPU compute provider | Process your videos into clips |
| AI text-analysis provider | Analyse the transcript text only, never the video |
| Payment processor (Merchant of Record) | Take payment and handle billing |
5.1 Platforms you connect yourself
We name these three explicitly, unlike the infrastructure providers above, because their own developer terms require us to. Nothing is sent to any of them unless you connect the account and ask us to post.
| Platform | What we send | Their privacy policy |
|---|---|---|
| YouTube | The clip file, plus the title and description you set, published to your channel | Google Privacy Policy |
| TikTok | The clip file, plus the title and the posting settings you choose | TikTok Privacy Policy |
This Service uses YouTube API Services. By connecting a YouTube account you also agree to the YouTube Terms of Service.
KiroClip’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
5.2 Infrastructure providers
Video files sent to our GPU compute provider are deleted from its temporary storage immediately after the job completes. Our bot-protection provider runs invisibly on our sign-up, login and reset forms and may collect technical signals (such as device and interaction data) to tell humans apart from bots.
YouTube
KiroClip Lite uses YouTube API Services to publish clips to a YouTube channel you connect yourself. This section gathers in one place what that involves. Connecting is optional, and the rest of the Service works without it.
By connecting a channel you also agree to the YouTube Terms of Service. Google’s own handling of your data is governed by the Google Privacy Policy. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
6.1 What we ask for, and why
| Permission | What we use it for |
|---|---|
| Manage your YouTube videos | Uploading the clips you created in KiroClip Lite to the channel you connected. Nothing else. We never edit or delete videos that were already on your channel |
| View your YouTube account | Reading the connected channel’s id, title and picture so you can see where you are publishing, checking the processing status of the videos we uploaded ourselves, and reading the view, like and comment counts of those same videos so you can see how they perform in the Analytics tab |
We do not read, list or analyse the videos that were already on your channel, your comments, your subscribers or your channel analytics. The only numbers we read are the public view, like and comment counts of the clips we published for you. Every lookup, for processing status or for those counts, uses only the video identifiers YouTube gave us at upload time, which means we can never ask about a video we did not send.
6.2 What we store, and for how long
| Data | Retention |
|---|---|
| The connected channel’s id, title and picture | Until you disconnect, or until the connection goes 30 days unused |
| Access and refresh tokens, encrypted at rest | Deleted the moment you disconnect, and revoked with Google at the same time. A connection unused for 30 days is revoked and its tokens deleted automatically |
| A record of each clip we uploaded for you: video id, the title and description you chose, the privacy setting you chose, and when it was sent | Deleted within 7 days of you disconnecting that channel |
| View, like and comment counts of the clips we uploaded for you | Refreshed from YouTube daily and kept for at most 30 days. Counts older than 30 days are deleted automatically and are never shown |
We do not sell any of this, and we do not share it with third parties for advertising or profiling.
6.3 Nothing is published without you
KiroClip Lite never uploads on a schedule and never uploads on its own. No clip is selected by default: you tick the ones you want, and before anything is sent you are shown how many clips, which channel, and who will be able to watch them.
6.4 How to revoke access
Open Dashboard → Connections and press Disconnect. That deletes the tokens we hold for that channel straight away and revokes them with Google in the same action. You can also revoke our access directly from Google at myaccount.google.com/permissions.
Videos we already published stay on your channel, because our permissions do not allow us to remove them. You can delete them yourself in YouTube Studio.
6.5 How to request deletion
Disconnecting the channel starts the deletion described in 6.2 on its own, and no request is needed. If you would rather ask us, email support@kiroclip.com from the address on your account and we will delete the data above. Deleting your whole KiroClip Lite account removes it along with everything else, once the 30-day grace period in section 4.2 ends. See Data Deletion for the full steps.
Your rights
Depending on where you live, you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate data
- Delete your account and associated data
- Port your data in a portable format
- Object to certain processing
8.1 Disconnecting a social account
You can disconnect any connected account at any time from your account settings. Disconnecting deletes the tokens we hold for it immediately, with no grace period, and we can no longer post on your behalf.
Separately from disconnecting here, you can revoke our access to your Google and YouTube data directly through the Google security settings page. For TikTok, you can revoke access in the TikTok app’s own settings.
To exercise these, email support@kiroclip.com. We will respond within 30 days. Deleting your account does not entitle you to a refund of any unused credits (see the Refund Policy).
Children
The Service is not directed at children under 13, and we do not knowingly collect their data. If we learn that we have, we will delete it promptly.
International users
KiroClip Lite is operated from Indonesia. If you use it from elsewhere, your data may be transferred to and processed in countries with different data-protection laws, and by using the Service you consent to this. For users in the EEA/UK, Dodo Payments acts as Merchant of Record and handles payment data in line with GDPR.
Changes
We may update this policy. We will notify you of material changes by email or in-app. Continuing to use the Service after the effective date means you accept the update.
Contact
Privacy questions or data requests: support@kiroclip.com
Payments are processed by Dodo Payments as Merchant of Record; Dodo Payments’ privacy policy applies to payment data.