Privacy Policy

This policy explains what data wiskr (operated by 1Cut Media) collects, why, and what we do with it. We try to keep this in plain English and only collect what we actually need to run the Service. If anything is unclear, email noah@1cutmedia.com.

1. What We Collect

From your account

• Email address (via Clerk, our authentication provider)
• Name and avatar, if you sign in with Google
• A unique account ID
• Plan tier and subscription status (free, paid)
• Account creation date

From your activity

• Videos you upload, plus metadata (filename, duration, format)
• Render output files we generate from your uploads
• Settings and templates you save
• Job history (start time, completion status, processing options)
• Standard server logs (IP address, user agent, request timestamps) used for debugging and security

From payments

• Stripe handles all payment processing. We never see your card number, only the last four digits and expiration that Stripe displays in your customer portal.

What we don’t collect

• We don’t use third-party analytics, ad pixels, or session-replay tools.
• We don’t sell or rent your data.
• We don’t use your videos to train AI models.
• We don’t track you across other websites.

2. How We Use Your Data

• To run the Service: store your uploads, process videos, deliver outputs.
• To enforce limits: count uploads against your plan’s daily quota.
• To bill you (paid plans only): pass your email to Stripe so they can send receipts.
• To send transactional emails: account confirmations, password resets, render-complete notifications, billing receipts.
• To debug problems and prevent abuse: review server logs, investigate suspicious activity.

3. Third-Party Processors

We use these vendors to run the Service. Each is contractually bound to handle your data only as instructed:

• Clerk — authentication, account management. (privacy policy)
• Neon — Postgres database for account and job records. (privacy policy)
• Cloudflare R2 — encrypted object storage for video files. (privacy policy)
• Railway — backend hosting. (privacy policy)
• Vercel — frontend hosting. (privacy policy)
• Stripe — payment processing for paid plans. (privacy policy)
• OpenAI — used by some AI features (e.g., transcription). Audio sent only when you trigger an AI feature. (privacy policy)
• Anthropic — used by some AI features (e.g., Smart Edit). Transcripts sent only when you trigger an AI feature. (privacy policy)
• Resend — transactional email delivery. Only your email address is shared, plus the message contents we’re sending. (privacy policy)

4. Where Your Data Lives

Your data is stored on infrastructure hosted in the United States. If you use the Service from outside the US, your data will be transferred to and processed in the US, which may have different data-protection laws than your home country.

5. Retention

• Videos and render outputs: kept for as long as your account is active. We may auto-delete uploads older than 30 days on free plans to manage storage costs (we’ll notify in advance if we enable this).
• Account data: kept while your account is active.
• Server logs: kept for up to 30 days, then deleted.
• Billing records: kept for 7 years where required by tax law.
• When you delete your account, we delete your videos and account data within 30 days, except records we’re legally required to keep.

6. Security

• All traffic is encrypted in transit (HTTPS/TLS).
• Files in Cloudflare R2 are encrypted at rest.
• Database connections to Neon are encrypted and use SSL.
• Authentication is handled by Clerk; we never see or store your password.
• We don’t store payment card details. Stripe handles all payment data and is PCI-DSS Level 1 compliant.

No system is perfectly secure. If you discover a vulnerability, please email noah@1cutmedia.com.

7. Your Rights

Depending on where you live, you may have rights to:

• Access a copy of the personal data we hold about you
• Correct inaccurate data
• Delete your account and associated data
• Export your data in a portable format
• Opt out of any data sale (we don’t sell data, but the right is yours regardless)
• Lodge a complaint with your local data-protection authority

To exercise any of these, email noah@1cutmedia.comfrom the address tied to your account. We’ll respond within 30 days.

8. California Residents (CCPA/CPRA)

If you’re a California resident, you have the rights listed in Section 7. We don’t sell or share personal information for cross-context behavioral advertising. You won’t be discriminated against for exercising your privacy rights.

9. EU/UK Residents (GDPR)

Our legal bases for processing your data are: (a) contract — we need your data to provide the Service you signed up for; (b) legitimate interests — debugging, security, fraud prevention; (c) consent — for any processing that requires it (you can withdraw consent at any time). You have the rights listed in Section 7 plus the right to object to processing based on legitimate interests.

10. Cookies

We use a small number of strictly-necessary cookies, primarily for authentication (Clerk session cookies). We don’t use advertising or tracking cookies. We don’t need a cookie banner because we don’t place any non-essential cookies.

11. Children

The Service is not directed to children under 13. We don’t knowingly collect personal information from children under 13. If you believe a child has provided us personal information, email noah@1cutmedia.comand we’ll delete it.

12. Changes to This Policy

We may update this policy occasionally. If changes materially affect how we use your data, we’ll email you at least 14 days before they take effect. Continuing to use the Service after the effective date means you accept the updated policy.

13. Contact

Questions about this Privacy Policy or your data? Email noah@1cutmedia.com.