Privacy Policy

1. Introduction

Clipia.ai is a service operated by Clipia LLC, a Wyoming (USA) limited liability company ("we," "our," "the Company"), which acts as the controller of your personal data. Clipia LLC respects your privacy. This Privacy Policy explains how we collect, use, and protect your personal data when you use our Service, and describes your rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA/CPRA"), and other applicable U.S. privacy laws.

2. Data We Collect

2.1. Data you provide:

• Email and name during registration
• Payment information (processed through secure payment systems)
• Text prompts for generation
• Uploaded images and videos

2.2. Data collected automatically:

• IP address (stored in hashed form for security)
• Device and browser information
• Service usage statistics
• Cookies and similar technologies

On facial images. Images and videos you upload may contain depictions of faces. Such images are processed solely to provide the content generation and editing service. We do not use them to create a biometric identifier, faceprint, or template, and we do not use them to identify or verify any individual. Accordingly, we do not treat these images as biometric information for the purposes of the CCPA/CPRA or other applicable U.S. privacy laws.

CCPA categories. Under the CCPA/CPRA, the personal information above falls within the following statutory categories: identifiers (e.g., name, email, hashed IP address); commercial information (e.g., transaction and payment records); internet or other electronic network activity (e.g., usage and device information); visual information (e.g., images and videos you upload); and other user-generated content (e.g., text prompts). We collect this information directly from you and automatically through your use of the Service.

3. How We Use Your Data

• Providing and improving the Service
• Processing payments
• Content moderation and security
• Personalizing user experience
• Communicating with users
• Complying with legal requirements

4. Moderation and Safety

To ensure platform safety, we:

• Store prompt hashes — to detect repeat violations, we store SHA-256 hashes of prompts, but not the prompts themselves
• Log moderation events — violation category, timestamp, action taken
• Do not store prohibited content — images/videos that violate our policies are immediately deleted
• Maintain Trust Scores — a trust rating for each user

5. Data Retention

International data processing. Clipia LLC is the data controller. Personal data is processed and stored using infrastructure operated by our service provider located in the Russian Federation, under a data processing agreement that requires appropriate safeguards. By using the Service you consent to this processing location.

6. Your Rights

Under the CCPA/CPRA, California residents (and, where applicable, other U.S. consumers) have the following rights with respect to their personal information:

• Right to know / access — request the categories and specific pieces of personal information we have collected, the sources, the business or commercial purposes for collecting it, and the categories of third parties with whom we share it
• Right to delete — request deletion of the personal information we collected from you, subject to legal exceptions
• Right to correct — request correction of inaccurate personal information
• Right to opt out of sale or sharing — direct us not to sell or share your personal information. We do not sell or share your personal information as those terms are defined under the CCPA/CPRA
• Right to limit use of sensitive personal information — direct us to limit the use of any sensitive personal information to what is necessary to provide the Service
• Right to non-discrimination — we will not discriminate against you for exercising any of your privacy rights
• Right to data portability — receive a copy of your personal information in a portable, machine-readable format

To exercise any of these rights, contact us at legal@clipia.ai or privacy@clipia.ai. We will verify your request using the information associated with your account and respond within the timeframes required by applicable law. You may use an authorized agent to submit a request on your behalf.

7. Cookies

We use cookies for the following purposes:

• Essential — authentication and security
• Functional — remembering your preferences
• Analytics — improving the Service

You can manage cookies through your browser settings.

8. Disclosure of Personal Information to Third Parties

We disclose personal information to the following categories of third parties for business purposes only:

• AI model providers, to fulfill generation requests
• Payment processors, to handle transactions
• Stripe, which acts as the merchant of record for purchases charged in US dollars — to sell the order to you, take the payment, determine and remit applicable taxes, issue your receipt, and handle refunds and chargebacks
• Cloud and hosting providers, to store and process data
• Law enforcement or government authorities, upon a lawful request

Except as noted below, these third parties act as our service providers or contractors and are contractually restricted to using personal information only to perform services on our behalf. We do not sell your personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined under the CCPA/CPRA.

Stripe is an exception to that framing. As merchant of record it is the seller of your order, not our processor, and it determines the purposes and means of the payment data it collects — so for that processing it acts as an independent controller under its own privacy policy. Your payment details are entered directly on Stripe's hosted checkout page and are never transmitted to us; we receive only an anonymised customer identifier and the transaction result. Stripe does not receive your prompts, uploads or generated content, and plays no part in moderating them.

Because our processing infrastructure is located in the Russian Federation (see Section 5, International data processing), some disclosures involve the international transfer of personal information. Additional detail about foreign recipients and destination countries is available on request at legal@clipia.ai.

9. Security

We implement industry-standard security measures:

• Encryption of data in transit (TLS/SSL)
• Encryption of data at rest
• Regular security audits
• Restricted access to personal data

10. Controller and contacts

10.1. Personal data controller details

10.2. Contacts

• Privacy requests and legal notices: legal@clipia.ai
• General personal data queries: privacy@clipia.ai

10.3. How to lodge a complaint

If you believe your privacy rights have been violated, you may lodge a complaint with the applicable regulator. In California, this is the California Privacy Protection Agency (cppa.ca.gov) or the California Office of the Attorney General (oag.ca.gov/privacy). We encourage you to contact us first at legal@clipia.ai so that we can address your concern.

10.4. Business purposes for processing

Consistent with the CCPA/CPRA, we collect and process personal information for the following business purposes:

• to provide, maintain, and improve the Service, and to perform our contract with you;
• to process payments and prevent fraud;
• to secure the platform, moderate content, and enforce our terms;
• to comply with legal obligations and respond to lawful requests.

Where we rely on your consent (for example, for the processing location described in Section 5), you may withdraw it at any time by contacting legal@clipia.ai, without affecting processing carried out before withdrawal.