Privacy Policy

Controller

Controller: Controller details pending completion. Tax identification: Tax ID pending completion. Address: Address pending completion. Privacy contact: privacy@autoclip.intelligex.es. These details must be completed before publishing or monetizing the service.

Data We Process

We process account data such as name, email, hashed password, plan, email verification status, and technical authentication data.

We process content created or configured by the user: topics, prompts, prototypes, creative instructions, visual directions, scripts, scenes, hashtags, generated videos, selected voices, and publishing calendars.

If you connect ElevenLabs, we process your encrypted API key, the last four characters of the key, connection status, and metadata for imported voices. We do not display the full key after it has been saved.

We also process service usage data, such as calls to external providers, approximate consumption, technical errors, creation dates, and update dates.

Minors

In Spain, people over 14 may give consent by themselves for the processing of their personal data where consent is the applicable legal basis.

If you are under 14, you may only use AutoClip with permission from your parent or legal guardian.

Legal representatives may exercise data protection rights on behalf of the minor where applicable. AutoClip may request reasonable information to verify authorization or legal representation if necessary.

Purposes and Legal Basis

We use data to create and manage your account, authenticate you, provide the service, generate scripts, voices and videos, save your history, enable settings, provide support, and improve security.

The main legal basis is performance of a contract or pre-contractual measures when you use the platform. We also use legitimate interest for security, abuse prevention, and technical maintenance. When you connect external services or accept non-essential communications, the basis may be your consent.

If monetization is activated, we may process data needed for payments, billing, subscription management, and compliance with legal obligations.

Providers and Transfers

To provide the service, we may use Hostinger for hosting, database and email, OpenAI for script generation or recommendation assistance, ElevenLabs for voice synthesis, Pexels for clip search, and Stripe for payments when monetization is activated.

Some providers may process data outside the European Economic Area. In that case, available contractual safeguards will apply, such as standard contractual clauses or other mechanisms recognized by applicable law.

Retention

We keep data while your account remains active and, as a general criterion, for 1 year from the last activity, unless you request deletion earlier or there is a legal obligation to keep them.

If you request deletion of your account or data, it will be carried out within a maximum of 30 days from the account closure or deletion request, except for data blocked due to legal obligations.

We may keep blocked data for the periods needed to address legal, tax, contractual responsibilities, or claims.

Your Rights

You may request access, rectification, erasure, objection, restriction, portability, and withdrawal of consent where applicable by writing to the privacy contact.

You may also file a complaint with the competent supervisory authority. If the controller operates from Spain, the competent authority is the Spanish Data Protection Agency.

Security

We apply reasonable technical and organizational measures, including hashed passwords, token authentication, encryption of integration keys, user data separation, and access controls.

No system is infallible. If we detect a security breach that may affect your rights, we will act in accordance with the applicable legal obligations.

User Content and Responsibility

You must not enter third-party personal data, images, voices, trademarks, or protected content unless you have sufficient authorization.

It is prohibited to use the service to impersonate people, create misleading deepfakes, infringe third-party rights, or generate illegal content.