YOUR WORKSPACE, YOUR INFORMATION

Privacy

Draft updated October 26, 2026

ClipForward is a workspace for editing videos, organizing projects, and connecting social accounts. Scheduling and social publishing are in development. This notice covers the information used by the features available today.

Information in your workspace

• Account information. Google sign-in supplies your name, email address, profile image, and account identifier. We use this information to create your account and keep you signed in. Google sign-in is separate from permission to access a YouTube channel.
• Project drafts. We store the titles, notes, status, and creation/update dates of projects you create, along with edit instructions, text, and transcripts. Signed-in media uploads and rendered exports are stored privately by the service. Originals, edits, and media backups may also be cached in your browser.
• Connected accounts. When you authorize a connection, the platform supplies account or channel identifiers, display names, available profile images, audience counts when available, granted permissions, and authorization credentials. Access and refresh credentials are stored encrypted on the server.
• Workspace membership. We store workspace names, owners, member roles, and invitations, including the recipient email address, inviting account, and invitation status. Invitation secrets are stored as hashes. Members can access the projects, media, transcripts, exports, and connected-channel details in their shared workspace. Social authorization credentials remain on the server and are not shown to members.
• Billing information. Stripe handles payment details through its hosted checkout and customer portal. We retain the customer/subscription identifiers, selected plan, billing interval, status, and period information needed to manage your access. Card numbers are not handled or stored by this application.
• Service and support information. The hosting and service providers may process technical request information to deliver and secure the service. If you contact support, the operator receives the information you include.

How that information is used

Account and project information supports your signed-in workspace. Connected-account information identifies the channel you selected and displays its connection status. Subscription records determine your project and connection limits. A shared workspace uses its owner's subscription. Owners and admins manage invitations and social connections; the owner manages billing and administrator access. When email is configured, your name and email address are used to send an account welcome message.

The current social connections request read-only account/channel access for YouTube, Instagram, Facebook Pages, TikTok, Threads, and X. They do not publish, edit, or delete social posts. Future publishing features will require additional permissions and a new authorization from you where needed.

Services involved

Google provides sign-in; Neon stores account, session, draft, subscription, and encrypted connection records; Stripe processes payments and subscription management; and Resend delivers the welcome email when enabled. A connected social platform processes the authorization and profile requests you initiate. The deployment's hosting provider delivers the website and server requests.

The configured private object-storage provider stores uploaded media and exports; a separate processing worker renders your videos. Automatic speech transcription runs on your device. The first use downloads a model and runtime from Hugging Face and jsDelivr, which receive the network information needed to deliver those files. Audio is not sent to those services for transcription. Browser preview mode stores media and edits on your device, without a cloud account.

Optional Google Analytics measures visits to public marketing pages after you allow analytics. Private workspace routes and authorization callbacks are excluded from this measurement, and page-location query strings are removed. Search Console uses a public ownership-verification tag; that tag is not an additional visitor-tracking script.

These providers also process information under their own policies. See Google, Neon, Stripe, and Resend for their privacy information.

Cookies and analytics choices

Session cookies keep you signed in, a workspace cookie remembers your selected workspace, and temporary authorization cookies protect account-connection requests. The website also remembers your analytics preference in your browser. Optional Google Analytics is not loaded until you choose to allow it.

You can change your choice through the analytics preferences control in the website footer when analytics is enabled. Declining analytics does not change your workspace access. Your browser controls can remove existing cookies and local website data.

Managing and deleting information

Workspace members can edit or delete shared project drafts. Owners and admins can remove a social connection on the Connections page, revoke invitations, and manage members within their role permissions. Non-owner members can leave a workspace. Removing a membership ends that account's access; it does not delete the shared content. Disconnecting deletes this application's stored credentials and connection record. It does not revoke the platform-wide authorization grant; you can also remove ClipForward in the connected platform's app-permission settings. For Google connections, use your Google account connections.

There is no automatic account-deletion or data-export feature in this foundation. To request access, correction, export, or deletion of account information, contact the operator through the support contact below and identify the account concerned. The operator must verify the request and coordinate the account records, connected grants, and any billing records. Cancel a paid subscription separately through Billing; deleting a draft or disconnecting a channel does not cancel billing.

The operator must publish the actual retention, backup, request-handling, and deletion timeframes before public launch. No completed account-erasure workflow or fixed deletion deadline is promised by this draft.

Security and changes

Connections use the platforms' authorization screens instead of asking for your social passwords. Access credentials stay on the server and are encrypted in the database. Access to workspace records requires a signed-in account. These measures reduce risk; they are not a guarantee that a service or account can never be compromised.

This notice should be updated when the operator, providers, or uses of information change. Additional data uses or permissions must be explained before they are introduced. Review the terms for the current service and billing scope.

Contact

For privacy and account requests, email andrew@clipforward.com.

The operating legal entity and its address have not yet been provided. This draft must be completed before it is relied upon for public customer onboarding or provider approval.