Privacy Policy

1. What we collect

We collect only what we need to run the service:

• Account info — email address, display name, and (if you sign in with Google) a profile photo URL. Stored via Firebase Authentication.
• Uploaded content — the videos you upload for discovery, plus derived artefacts (transcript, thumbnails, segment scores, rendered output). Stored in Google Cloud Storage in our project.
• Usage logs — what discovery sessions you ran, when they ran, and how much time was metered. Stored in Firestore.
• Payment metadata — your subscription plan, charge history, and provider (Razorpay / PayPal) transaction IDs. We never see or store your card / UPI / bank details — those live with the payment provider.
• Cookies— strictly necessary cookies for auth + checkout. We don't set marketing cookies; we don't use third-party trackers for advertising.

2. How we use it

Your data is used to:

• Run the discovery + render pipeline on your uploads.
• Enforce plan limits (discovery minutes, coin balance, refund eligibility).
• Process payments, refunds, and chargebacks with Razorpay / PayPal.
• Send transactional emails (charge receipts, password resets, ticket replies).
• Diagnose service issues and improve quality (aggregate, never identifiable).

We do not sell your data, share it with advertisers, or use your uploaded content to train third-party AI models. The transcription + scoring models we invoke (OpenAI, ElevenLabs, etc.) process your audio under their respective enterprise no-retention terms and do not retain it beyond the request.

3. Third-party processors

We rely on a small set of vendors to run the service. Each is contractually bound by data protection terms:

• Google Cloud Platform — compute, storage, Firestore, BigQuery (data lives in asia-south1 + multi-region buckets).
• Firebase Authentication — sign-in.
• Razorpay — INR payments (India).
• PayPal — USD payments (rest of world).
• ElevenLabs — transcription (audio passed through, not retained).
• OpenAI — segment scoring + layout heuristics (transcript text passed through, not retained or trained on).
• RunPod — GPU inference for face detection + smart-zoom rendering.

4. Where it's stored

Primary storage is in Google Cloud's asia-south1 (Mumbai) region with multi-region replication for disaster recovery. Source video originals are kept on GCS; derived artefacts (transcript, segments, thumbnails) live in Firestore.

5. How long we keep it

• Source video uploads: retained while your account is active; deleted within 30 days of account closure.
• Rendered outputs: same retention as source.
• Payment records: retained for 7 years per Indian tax/audit requirements.
• Logs & aggregate analytics: 24 months rolling.

6. Your rights

You can, at any time, write to us at support@natyakraft.com to:

• Get a copy of the personal data we hold about you.
• Correct any data we hold about you.
• Delete your account and the data attached to it (subject to legal-retention windows).
• Export your discovery sessions and outputs in a portable format.
• Object to specific processing activities.

EU/UK users have GDPR rights; Indian users have rights under the DPDP Act 2023. We honour both, whichever is more protective for you.

7. Security

All traffic is TLS-encrypted in transit. Storage is encrypted at rest (Google-managed keys). Access to production data is restricted to a small number of engineers and is audit-logged. We do not store passwords; sign-in is delegated to Firebase / Google / Apple.

8. Children

ClippingPro is not intended for children under 13 (or 16 in the EU/UK). We don't knowingly collect data from children below those ages. If we discover such data, we delete it promptly.

9. Changes

We'll notify you of material changes to this policy via email or the dashboard at least 14 days before they take effect.

10. Contact

Grievance officer: support@natyakraft.com. For payment / refund inquiries, mention your charge ID; for data-rights requests, include the email address tied to your account.