Privacy Policy

1. What we process and why

From you (account data). Email address and authentication identity (Google sign-in or an email one-time code, processed by ClipKraken directly), the accounts, keywords, and countries you register, timezone and language preferences, subscription status, and email delivery events (sent, delivered, bounced, opened). Purpose: operating your account, delivering digests, billing, and support. Legal basis: performance of our contract with you.

From platforms (public content). Publicly available posts, videos, captions, and engagement counts from YouTube, X, Instagram, and TikTok — limited to the accounts and keywords our users register. We access only content that is public without signing in: never private accounts, never through logged-in sessions. Purpose: producing the marketing analysis our users subscribe to. Legal basis: our legitimate interest in providing a competitive-intelligence service, balanced against the interests of the people who posted that content (see section 5).

Card details are handled entirely by Lemon Squeezy, the merchant of record for all purchases. We never see or store them.

2. Retention and deletion

• Original post text and video transcripts are deleted within 30 days. They exist only to be analyzed and to allow reprocessing if a job fails.
• Kept long-term: aggregate metrics (volume, engagement, sentiment), our own AI-generated summaries, and permalinks to the original posts. Author identifiers are not stored in long-term tables.
• Account data is deleted when you delete your ClipKraken account, together with your registrations and digest history.
• When content is deleted or made private on the source platform, we remove it from our processing within 24 hours of detection.

3. Sharing and processors

We do not sell personal data and do not share it for advertising. We use these processors to run the service: Cloudflare (hosting, database, storage), Resend (email delivery), Lemon Squeezy (billing, as merchant of record), Nvidia NIM (AI analysis of collected public content), Google Cloud Run (caption extraction), and data-access vendors that retrieve public platform content on our behalf (Apify, TikHub, HikerAPI). Processors act under our instructions and our minimization policy.

These providers operate in the United States and other countries, so running the service involves international transfers of the data described above.

4. Your rights

You may request access to, correction of, or deletion of your personal data, restrict or object to processing, withdraw consent where processing relies on it, and receive a copy of the data you provided. You may also lodge a complaint with your supervisory authority. Account data can be deleted directly from your settings page.

5. If your public content appears in our processing

If you posted content publicly on a supported platform and it appears in our analysis, you may ask us for the source and purpose of the processing, request that we stop processing it, or request its removal — including under Article 20 of the Korean Personal Information Protection Act and Articles 15–21 of the GDPR. We honour removal requests, and you do not need a ClipKraken account to make one. Write to contact@clipkraken.com.

We assessed and documented the balance between our interest in this processing and the rights of the people whose content we analyze before starting it, and we re-examine that assessment when the service or the applicable law changes.

6. Security

Data is encrypted in transit and at rest by our infrastructure providers. Access to production systems is restricted to the operator and gated by single sign-on with access policies. Vendor credentials are stored as platform secrets and never in source control.

7. Cookies

We use only cookies that are strictly necessary to keep you signed in and to operate the site. We do not use advertising or cross-site tracking cookies.

8. Privacy contact and changes

Privacy enquiries and data subject requests: contact@clipkraken.com. The operator of Goyo Studio is responsible for personal data protection and responds to verified requests without undue delay.

If we change this policy we will update the effective date above, and for material changes we will notify subscribers by email before the change takes effect.