kiriclip — Privacy Policy

Effective date: 2026-04-27 Last updated: 2026-04-27

1. Who we are

This Privacy Policy describes how Zynth LLC, a Wyoming limited liability company doing business as kiriclip ("kiriclip", "we", "us", or "our"), collects, uses, discloses, and safeguards personal information when you use our website at https://kiriclip.com, our API, or any other Service we provide (the "Services").

This Policy is incorporated into and forms part of our Terms of Service.

2. Scope and definitions

"Personal Data" or "personal information" means any information that identifies, relates to, or can reasonably be linked to an individual.

This Policy applies to information we collect through the Services. It does not apply to information collected by third parties whose websites or services link to or from ours.

3. Information we collect

3.1 Information you provide

• Account information. Email address, password (stored using industry-standard one-way hashing, never as plaintext), and any optional profile fields you fill in.
• Billing information. When you purchase a paid plan, our payment processor Stripe collects your payment-card details directly. We never see or store full card numbers; we receive a tokenized customer ID, the last four digits, expiration, and country.
• User Content. Video files you upload, the genre tag you optionally apply, and any free-text fields you submit (for example, webhook URLs).
• Support communications. When you contact us at support@kiriclip.com or privacy@kiriclip.com, we receive whatever information you include in your message.

3.2 Information collected automatically

• Device and connection. IP address, user-agent string, browser language, screen size, and operating system. We use these to operate, secure, and debug the Services.
• Usage data. Pages and features accessed and aggregate request timings. We use these to operate, secure, and improve the Services.
• Cookies and similar technologies. See Section 8.

3.3 Derived information

When we process your User Content through the Services, the system produces derived signals such as scene-type classifications, copyright-risk labels, and transcripts. These are stored alongside your User Content under your account.

3.4 Information we do not collect

• Face data and biometric identifiers. Face tracking runs in memory during a single processing job and is never persisted. We do not store face geometry, fingerprints, voiceprints, or any other biometric identifier.
• Sensitive categories. We do not knowingly collect special categories of data (racial origin, religious beliefs, health, sex life, sexual orientation, political opinions, trade-union membership, genetic data) under GDPR Article 9 or analogous U.S. state-level "sensitive personal information" categories. If you upload User Content that incidentally contains such data, you remain responsible for ensuring you have the right to do so.

4. How we use information

We do not:

• Sell your personal information.
• Share your personal information with third parties for cross-context behavioral advertising.
• Use your User Content (video, audio, transcripts) to train, fine-tune, or evaluate machine-learning models.

We may use aggregated, de-identified statistics (such as the count of clips produced per scene type per day) for service-quality analytics and public communication. These statistics cannot be linked back to you or to your User Content.

5. How we share information

We share personal information with the following categories of recipients, only to the extent necessary for the purposes listed in Section 4:

We require service providers to enter into contracts that obligate them to protect personal information consistently with this Policy.

We may share information in connection with a corporate transaction such as a merger, acquisition, financing, or sale of assets. We will notify users by email or by a prominent notice in the Services if their personal information becomes subject to a different privacy policy as a result.

6. Where we store and process information

We store personal information in the United States. If you access the Services from outside the United States, your information will be transferred to and processed in the United States.

For users in the European Economic Area (EEA), United Kingdom, or Switzerland, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission for cross-border transfers, together with our service providers' published transfer-impact safeguards.

7. How long we keep information

When you delete your account, we delete or anonymize personal information except for the limited categories above that we are required to retain.

8. Cookies and tracking

We use a small number of cookies and similar technologies. The current set is:

• Essential / strictly necessary. Authentication session token, CSRF protection, and load-balancer affinity. These cannot be turned off without breaking the Services.
• Functional. Local-storage entries to remember your UI preferences (for example, theme).
• Analytics and advertising. None at this time. If we add third-party analytics or tracking in the future, we will update this Policy and, where required, obtain your consent before any non-essential trackers are activated.

You can clear cookies and local storage at any time from your browser settings. Doing so will sign you out and reset preferences.

9. Your choices and rights

Subject to applicable law and verification of your identity, you may:

• Access. Request a copy of the personal information we hold about you.
• Correct. Update inaccurate or incomplete information from your account settings or by contacting us.
• Delete. Close your account and request deletion of your personal information (subject to the retention exceptions in Section 7).
• Export. Receive a copy of the User Content and account data you provided in a structured, commonly used, machine-readable format.
• Object / restrict. Object to or restrict certain processing.
• Opt out of marketing. Unsubscribe from marketing emails using the link at the bottom of any marketing email, or by contacting us.

To exercise any of these rights, email privacy@kiriclip.com from the email address associated with your account. We will respond within 30 days. We do not discriminate against users who exercise these rights.

If we cannot verify your identity, or if your request is manifestly unfounded or excessive, we may refuse the request or charge a reasonable fee, as permitted by law.

10. Children

The Services are not directed to children under 16. We do not knowingly collect personal information from children under 16. If you believe we have collected information from a child under 16, please contact us at privacy@kiriclip.com and we will delete it.

11. U.S. state-specific disclosures

If you are a resident of California, Colorado, Connecticut, Delaware, Iowa, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Texas, Utah, or Virginia, you may have additional rights under your state's privacy law, including the rights described in Section 9 above. We do not sell personal information or share it for cross-context behavioral advertising; we do not knowingly process sensitive personal information; and we do not engage in profiling that produces legal or similarly significant effects on you.

12. International users

We treat the data-subject rights in Section 9 as available to all users, including residents of the EEA, United Kingdom, and Switzerland. If you believe your rights under the GDPR or your local equivalent have been infringed, you may contact privacy@kiriclip.com or lodge a complaint with your local supervisory authority.

13. Security

We implement administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit and at rest, role-based access controls, managed-secret storage, and routine vulnerability monitoring. No system is perfectly secure; we cannot guarantee that unauthorized access will never occur.

14. Changes to this Policy

We may update this Policy from time to time. If we make material changes, we will notify you by email or by a prominent notice in the Services at least 14 days before the changes take effect.

15. How to contact us