Privacy Policy

1. Data Controller

The controller responsible for the processing of your personal data under the EU General Data Protection Regulation (GDPR) is:

Amir Nazarzadeh Ziksari
Pölnitzweg 117
13125 Berlin, Germany
Email: [email protected]

2. Information We Collect

When you use CutSnap, we collect information you provide directly to us, including your name, email address, and account credentials. We collect the video and audio files you upload for processing. We also collect usage and technical data (such as device and browser information and interactions with our service) when you use the platform.

3. How We Use Your Information and Legal Basis

We process your personal data on the following legal bases under Article 6(1) GDPR:

• Providing the service — creating and managing your account, transcribing your videos, subtitle editing, and rendering and exporting your files. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
• Analytics — understanding how the service is used in order to improve it. Legal basis: your consent (Art. 6(1)(a) GDPR), which you may withdraw at any time via the cookie settings.
• Aggregate audience measurement — counting page views and understanding which sources bring visitors to CutSnap, so we can tell whether the service is reaching people. This measurement uses no cookies and stores nothing on your device; see Section 8 for how it works. Legal basis: our legitimate interests in operating and improving the service (Art. 6(1)(f) GDPR). You may object to this processing at any time (Art. 21 GDPR) by contacting us.
• Security and legal compliance — protecting the service against abuse and meeting our legal obligations. Legal basis: our legitimate interests and compliance with legal obligations (Art. 6(1)(f) and (c) GDPR).

We do not sell your personal information to third parties.

4. Video and Audio Data

To generate transcriptions and subtitles, the audio from the videos you upload is transmitted to and processed by specialized third-party speech-to-text (transcription) providers located in the United States. This means your audio is sent to and processed on their servers. Your video and audio content is not used to train AI models. Your uploaded and exported files remain available in your account and are not automatically deleted after a fixed time; they are retained as described in Section 7 (Data Retention).

5. Third-Party Processors

We rely on the following categories of third-party service providers to operate CutSnap. Each processes data only on our behalf and under a data processing agreement:

• Authentication — Firebase Authentication (Google) for secure sign-in and account management.
• File storage — Cloudflare R2 for storing your uploaded and rendered files using encrypted cloud object storage with access controls.
• Transcription — specialized third-party speech-to-text providers (located in the United States) for converting your audio into text.
• Email — Resend (Resend, Inc.) to send transactional and service-related emails, such as support replies and account notifications.
• Analytics — Google Analytics (Google) and Microsoft Clarity (Microsoft) to understand usage and improve the service. These run only if you consent (see Section 8).

Each provider has its own privacy policy governing how it handles data.

6. International Data Transfers

Some of our service providers — including our transcription providers, Cloudflare, Google (Firebase and Google Analytics), and Microsoft — are based in the United States. As a result, your personal data (including, for transcription, your audio) may be transferred to and processed in the United States, a country outside the European Economic Area. Where we transfer personal data to such providers, we rely on the European Commission's Standard Contractual Clauses (SCCs) and, where applicable, additional safeguards to ensure an adequate level of protection for your data.

7. Data Retention

We retain personal data only for as long as necessary for the purposes described in this policy:

• Account data — retained for as long as your account is active, and for up to 30 days after account deletion, unless a longer period is required by law.
• Uploaded videos and exported files — retained until you delete them or your account is terminated.
• Analytics data — retained only while your consent is valid and in accordance with the retention settings of the respective analytics provider.
• Aggregate measurement records — the cookieless page-view records described in Section 8 are deleted after 180 days. The pseudonymous identifier they contain can no longer be linked to a visitor after the day it was created, because the secret used to generate it changes every day.

8. Cookies & Analytics

We use cookies and similar technologies that are strictly necessary to operate the service, such as maintaining your session. These essential cookies do not require consent. We also use analytics cookies and similar technologies (Google Analytics and Microsoft Clarity), which are only set if you consent to them. You can grant, refuse, or change your choice at any time through the cookie settings on our website.

Cookieless audience measurement. Separately from the analytics above, we keep our own basic count of page views on our servers. This does not use cookies and does not store or read anything on your device, so it does not require consent. For each page view we record the page address, the website that referred you (the site name only, never the full address), your approximate country, whether you were on a phone, tablet or desktop, and your browser identifier.

We do not store your IP address. It is converted into a short pseudonymous code using a secret value that we change every day, and the address itself is then discarded. Because that secret changes daily, the code cannot be traced back to you, cannot be used to recognise you on a later day, and cannot be used to build a profile of you. These records are deleted after 180 days. The legal basis is our legitimate interest in understanding how our service is used (Art. 6(1)(f) GDPR), and you may object at any time under Art. 21 GDPR by contacting us at [email protected].

9. Support via WhatsApp

As an optional support channel, you can contact us via WhatsApp. This channel is entirely voluntary and only used when you initiate a conversation. If you do, your phone number, profile information, and message content are processed by WhatsApp Ireland Limited / Meta Platforms, Inc. under their own privacy policy, which may involve data transfers outside the EU. The legal basis for our processing of your messages is Art. 6(1)(b) GDPR (support related to the service) or Art. 6(1)(f) GDPR (our legitimate interest in responding to inquiries). If you prefer not to use WhatsApp, you can always reach us by email at [email protected].

10. Your Rights

Under the GDPR, you have the right to access, rectify, or erase your personal data, to restrict or object to its processing, and to data portability (a copy of the data we hold about you). Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out beforehand. To exercise any of these rights, contact us at [email protected].

You also have the right to lodge a complaint with a data protection supervisory authority. The authority competent for us is the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit), Alt-Moabit 59–61, 10555 Berlin, Germany. You may also contact the supervisory authority in your country of residence or place of the alleged infringement.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

12. Contact Us

If you have questions about this Privacy Policy, please contact us at [email protected].