Clipwright
Sign inStart free

Clipwright Privacy Policy

Version 2026-10-16-draft

Draft, not reviewed by a lawyer. This policy describes how Clipwright works today. It will be reviewed by a lawyer before any paid launch. If a translation differs from the English text, the English text applies.

1. Who we are

Clipwright is operated by EMAVIC Global Concept ("we", "us"). Clipwright records tours of our customers' own web products, adds narration and captions, and posts the videos to the social media accounts our customers connect. Contact us at support@emavicglobalconcept.com for anything in this policy.

2. Two roles we play

  • For your account (your name, email, sign-in and the workspaces you belong to), we decide how the data is used: we are its controller.
  • For the content a workspace records and publishes (what its product shows, its videos, narration and captions), the customer company decides: it is the controller and we process that content only on its instructions, to provide Clipwright.

3. What we collect

  • Account: name, email address, password (stored only as a one-way hash), passkeys, two-step verification settings, the workspaces you belong to and your role in each.
  • Identity check: when an owner, admin or reviewer verifies their identity, our provider (Stripe) checks a photo ID and a live selfie. We receive and keep only the result, the legal name on the document, the date and an expiry. Your photos and ID number stay with Stripe.
  • Company: the company name, registration details and the domains it proves it controls.
  • What you create: tours, their steps, narration scripts, brand settings, music you upload, recordings of your own voice (only after you agree to it in the product), and the videos.
  • Product sessions: to record a tour, a workspace gives us a signed-in session for its own product. We store it encrypted and use it only to record that workspace's tours.
  • Connected social accounts: see section 5.
  • Browser extension: see section 6.
  • Technical data: IP address and device information in security logs, and an audit log of important actions (who approved, published or changed what, and when).

We do not use advertising or tracking cookies. The only cookies are the ones that keep you signed in and secure.

4. How we use it

To run Clipwright: sign you in, record and make videos, post them where and when you ask, verify companies and the people acting for them, keep the service secure and prevent abuse, answer support requests, and meet legal obligations. We do not sell personal data, and we do not use your data or your content to train AI models.

5. Social media accounts you connect

When a workspace owner or admin connects a social media account, they sign in on that platform's own page and grant Clipwright access. We never see the account's password.

What we access, for every platform: the account's id and public name (to show which account is connected), and permission to publish the videos you schedule. We store the access tokens encrypted and use them only to publish your scheduled posts and to confirm that a post was made. We do not read your private messages, your followers or other people's content, and we do not publish anything you did not schedule.

How long: until you disconnect the account in Clipwright (the tokens are deleted at once), the platform revokes the access, or the workspace is deleted.

Revoking access: disconnect the account on the Channels page in Clipwright, or remove Clipwright in the platform's own settings for connected apps:

Clipwright adds platforms one at a time; this list includes the ones we are preparing to support.

6. The Clipwright browser extension

The Clipwright extension for Chrome and Edge is optional. It does something only when you ask from the Clipwright web app and confirm in the extension's own window. It never contacts a server itself: it hands what you approved to the Clipwright tab that asked, and that tab sends it to your workspace.

  • Sign-in sharing: after you click Allow, it reads the cookies and local storage this browser holds for the product sites listed in that window, and nothing else. They become the workspace's product session (section 3), stored encrypted. Its access to those sites is removed right after.
  • Recording your clicks: in a tab you open for it, on your own product, it records each click, page change and the text typed into ordinary fields, with the visible words of what you clicked, to make tour steps. It never records password, one-time code or card fields, and nothing is shared until you click Finish.
  • Choosing what to blur: it shares only the rule describing what you clicked, never what the page says, and only when you click Done.

The extension holds no access to any website by default. While you decide, it keeps the request in the browser's session storage, and a result for at most 2 minutes until the Clipwright tab collects it; both are cleared when the browser closes. We use this data only to record your workspace's tours, under the same rules as the rest of this policy. Remove the extension at any time in your browser's extension settings.

7. Who we share it with

Only the service providers that run Clipwright for us, under contracts that limit their use of the data to that purpose:

  • Hosting and storage: Vercel (website), Railway (application and database), Fly.io (video recording), Cloudflare (file storage and network), Amazon Web Services (encryption keys).
  • Email: Brevo, for sign-in and notification emails.
  • Identity checks: Stripe.
  • Voices and writing help: ElevenLabs turns narration text into speech; Anthropic (Claude) drafts narration when you ask it to. They receive the narration text and the brand facts needed for it, never your product sessions or your recordings.
  • Sign-in with Google: Google, when you choose it.
  • The platforms you post to, which receive the videos and texts you schedule.

We also share data when the law requires it, or to protect people and the service against fraud and abuse.

8. Where your data is

Our providers process data in the United States and in other countries. Where the law requires it, transfers rely on safeguards such as the providers' standard contractual clauses.

9. How long we keep it

  • Your account: while you have it. Deleting a workspace removes its content, recordings, sessions and tokens 30 days after the deletion (it can be restored until then).
  • Recordings of your own voice: deleted at once when you withdraw your consent, and 30 days after no video can use them any more.
  • Identity check results: two years, then you verify again.
  • Social account tokens: until you disconnect the account (see section 5).
  • Audit and security logs: as long as the law and security require, at least one year.

10. Delete your data

  • Disconnect a social account on the Channels page: its tokens are deleted at once.
  • Delete a workspace in its Settings: its content is deleted for good after 30 days.
  • To delete your whole account and everything in it, or anything we hold about you, email support@emavicglobalconcept.com with the subject "Delete my data" from the address of your account. We confirm within 30 days, and we tell you anything we must keep by law.

11. Your rights

Depending on where you live (for example under the GDPR in Europe, the LGPD in Brazil or the CCPA in California), you can ask to see, correct, export or delete your personal data, object to or restrict its use, and withdraw consent you gave. Email us at the address above. You can also complain to your data protection authority.

12. Security

Two-step verification is required for every account. Sessions and tokens are encrypted, and every workspace's data is kept apart from every other's. Staff access is limited and logged. If a breach affects your data, we tell you and the authorities as the law requires.

13. Children

Clipwright is for businesses. It is not meant for anyone under 18, and we do not knowingly collect children's data.

14. Changes

When this policy changes in a way that matters, we update its version and date here and tell account owners in the product or by email before the change applies.