Privacy Policy

1. Introduction

Subclip ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our video editing application and web services (collectively, the "Service").

By using our Service, you consent to the data practices described in this Privacy Policy. If you do not agree with this Privacy Policy, please do not use our Service.

2. Information We Collect

2.1 Information You Provide

• Account Information: When you create an account through Google Sign-In, we collect your email address, name, and profile picture from your Google account.
• Payment Information: Payment processing is handled by our third-party payment processor, Polar.sh. We do not store your payment card details.
• Communications: Information you provide when contacting our support team.

2.2 Information Automatically Collected

• Usage Data: Information about how you use our Service, including license activation data and device identifiers for license management.
• Log Information: Server logs that may include IP address, browser type, and access times.
• Analytics Data: Anonymized usage statistics to improve our Service.

2.3 Information We Do NOT Collect

• Video Content: All video processing occurs locally on your device. We do not upload, store, or access your video files.
• Personal Data in Desktop App: The desktop application operates independently and does not transmit personal information beyond license validation.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Service
• Process and manage your account and license
• Authenticate your identity through Google Sign-In
• Communicate with you about your account or our Service
• Provide customer support
• Comply with legal obligations
• Detect, prevent, and address technical issues and security threats

4. Information Sharing and Disclosure

We may share your information in the following circumstances:

4.1 Third-Party Services

• Google OAuth: We use Google Sign-In for authentication. Google's privacy policy governs their handling of your data.
• Polar.sh: Our payment processor for license management and billing. They handle payment information according to their privacy policy.
• Analytics Providers: We may use analytics services to understand how our Service is used (with anonymized data).

4.2 Legal Requirements

We may disclose your information if required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Subclip, our users, or others.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

4A. YouTube API Services — Google API Disclosure

Subclip's Social Media Scheduler feature uses YouTube API Services. By connecting your YouTube account, you agree to be bound by the YouTube Terms of Service and acknowledge Google's Privacy Policy.

YouTube OAuth Scopes We Request

When you connect your YouTube channel, Subclip requests the following Google OAuth scopes. Each scope is necessary for a specific feature:

• youtube.readonly — Allows Subclip to read your channel name, channel ID, profile thumbnail, and list your existing videos. This is used to display your connected channel in the dashboard and to let you search and reference your existing videos when generating AI metadata for new uploads.
• youtube.upload — Allows Subclip to upload video files to your YouTube channel on your behalf at the date and time you schedule. This scope is only exercised when you explicitly schedule a video for publishing.
• youtube — Allows Subclip to set and manage video metadata (title, description, tags, category, privacy status, and custom thumbnail) when publishing a scheduled video. This scope is required because the YouTube Data API requires it to write video metadata alongside an upload.

We do not use these scopes to delete your videos, modify existing videos you did not schedule through Subclip, access your comments or subscribers, or perform any action outside of what is described above.

What YouTube Data We Access & How We Use It

How Your YouTube Data Is Protected

• Encryption at rest: OAuth tokens and channel data are stored in a secured, encrypted database. Tokens are never exposed in client-side code or logs.
• Encryption in transit: All communication between Subclip, Google's servers, and your browser uses TLS (HTTPS).
• Minimal retention: Video files you upload for scheduling are temporarily stored in a private, encrypted cloud storage bucket. Once a video is successfully published to YouTube, the file and its thumbnail are automatically deleted from our storage.
• No third-party sharing: We never share, sell, or transfer your YouTube data to any third party. Your data is used exclusively to provide the scheduling service you requested.
• No advertising use: We do not use your YouTube data for advertising, profiling, or any purpose unrelated to the Subclip features you use.
• Access controls: Only authenticated server-side processes can access your tokens. No Subclip employee has routine access to your OAuth credentials.

YouTube Data Storage & Retention

• OAuth Tokens: Stored for as long as your YouTube channel remains connected. Immediately deleted when you disconnect.
• Channel Metadata: Cached for display purposes. Deleted when you disconnect your channel.
• Scheduled Video Files: Temporarily stored until the video is published to YouTube, then automatically deleted. If a scheduled video is cancelled, the file is deleted at that time.
• Schedule Records: Retained for your scheduling history. Deleted when you disconnect your channel or delete your Subclip account.

Revoking YouTube Access

You are in full control of your YouTube connection. You can revoke access at any time using either of these methods:

• From the Subclip dashboard: Navigate to Social Media in the sidebar and click the Disconnect button next to your YouTube channel. This immediately deletes all stored tokens, cached channel metadata, and any pending scheduled videos from our systems.
• From Google directly: Visit Google Account Permissions, find "Subclip" in the list of third-party apps, and click Remove Access. This revokes our OAuth tokens at the Google level. We recommend also disconnecting from the Subclip dashboard to remove any locally cached data.

After revocation, Subclip will no longer be able to upload videos, read your channel information, or perform any actions on your YouTube account.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication requirements
• Secure handling of license data with machine-specific binding

However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as necessary to provide our Service and fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. When you delete your account, we will delete your personal information, except for information we are required to retain for legal or regulatory purposes.

7. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information:

• Access: Request access to your personal information
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information
• Portability: Request a copy of your data in a portable format
• Objection: Object to certain processing of your information
• Restriction: Request restriction of processing under certain circumstances

To exercise these rights, please contact us using the information provided in the "Contact Us" section below.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure that such transfers comply with applicable data protection laws and implement appropriate safeguards to protect your information.

9. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete personal information, and the right to opt-out of the sale of personal information. We do not sell personal information.

10. European Union Rights

If you are located in the European Union, you have rights under the General Data Protection Regulation (GDPR), including the rights described in Section 7. Our lawful basis for processing your information includes contract performance, legitimate interests, and consent where applicable.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Your continued use of the Service after any changes constitutes acceptance of the updated Privacy Policy.

12. Account Deletion

You have the right to request deletion of your account and associated personal information at any time. To delete your account:

• Send an email to contact@subclip.app with the subject line "Account Deletion Request"
• Include your registered email address in the request
• We will process your request within 30 days
• Once deleted, your account and personal information will be permanently removed from our systems

Please note that account deletion is irreversible. Any active licenses will be deactivated and cannot be recovered after deletion.

13. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us at:

We will respond to your inquiry within 30 days.