Privacy Policy

1. Who we are

Cutfield (cutfield.app) is an AI video editor operated by Cutfield (“Cutfield”, “we”, “us”). For personal data processed to run the service, we are the controller under the EU/UK General Data Protection Regulation (GDPR). You can reach us about anything in this policy at [email protected].

2. What we collect

Information you give us

• Account details: your email address, name and profile picture (from Google if you sign in with Google), and your password (stored only as a secure hash by our authentication provider).
• Your content: videos, audio, images and links you upload or import, the prompts and chat messages you send to the AI editor, and the edits, captions, clips and exports created from them.
• Billing details: your plan, invoices and billing address. Card details are entered on Stripe’s secure pages; we never see or store your full card number.
• Messages to us: anything you send to support.

Information created when you use Cutfield

• Derived data: transcripts with word timings, speaker labels, silence and scene analysis, thumbnails, preview copies and AI-selected clip moments.
• Account activity: sign-ins, uploads, exports, credits spent and added, purchases, and errors, plus the cost of the AI and transcription services each action used.
• Technical data: IP address, browser and device type, and request logs, which our hosting and security providers process to deliver and protect the service.
• Website analytics: depends on your cookie choice. See Cookies and analytics.

3. How we use it, and our legal bases

4. AI processing of your content

To edit your videos, Cutfield sends the parts of your content each task needs to specialised AI providers: the audio track to ElevenLabs for speech-to-text, and transcripts, still frames and your prompts to Anthropic (Claude) to pick clips and carry out edits. These providers process the data to return a result to us, under their commercial terms for business customers.

We do not use your videos, transcripts or prompts to train our own AI models, and we don’t sell your content. AI output can be wrong or incomplete, so please review edits before you publish them.

5. Who we share it with

We use trusted service providers (“processors”) that handle data only on our instructions:

We may also disclose data if the law requires it, to protect our rights or users’ safety, or as part of a merger or sale of the business (we would tell you first). We do not sell or rent personal data, and we don’t share it for cross-context behavioural advertising.

6. International transfers

Some of our providers process data outside the European Economic Area, mainly in the United States. Where that happens we rely on the European Commission’s adequacy decisions (including the EU-US Data Privacy Framework where a provider is certified) or Standard Contractual Clauses, together with the providers’ security measures.

7. How long we keep data

• Projects and exports: until you delete them or close your account.
• Original videos imported from a link: deleted from our servers once processing finishes. We keep the processed preview copy, audio and thumbnails your project needs.
• Account data: for as long as your account is open. After you close it we delete or anonymise it within 30 days, except what we must keep by law.
• Billing records: as long as tax and accounting law requires (typically up to 10 years).
• Analytics: session replays for a limited period (typically up to 90 days); other analytics events for up to 24 months, then deleted or aggregated.
• Backups and logs: short-term, then overwritten in normal rotation.

8. Cookies and analytics

We keep cookies to a minimum:

• Essential cookies keep you signed in (authentication session) and remember your cookie choice. These are always on because the service can’t work without them.
• Analytics, only if you click “Allow analytics”: PostHog measures page views, clicks, page speed and errors, and records session replays to help us fix problems. Everything you type, your AI chat and file names are masked in replays.
• If you choose “Essential only”: we only count visits anonymously, without cookies or other storage on your device, using a privacy-preserving hash calculated on the analytics server. You can’t be identified from it and no replay is recorded.

You can change your choice at any time with Cookie settings in the website footer or in your account settings.

9. Your rights

Depending on where you live, you have the right to:

• access your personal data and get a copy of it;
• correct inaccurate data;
• delete your data (“right to be forgotten”);
• restrict or object to processing, including processing based on our legitimate interests;
• receive your data in a portable format;
• withdraw consent at any time (for example, switch analytics off), without affecting earlier processing;
• complain to a data protection authority, in particular in the EU country where you live or work.

To use these rights, or to close your account, email [email protected] from the address on your account. We reply within one month and may need to verify your identity first. Residents of California and other US states have similar rights to know, delete and correct their data; we don’t sell or share personal information as those laws define it.

10. Security

We protect data with encryption in transit (HTTPS), private storage that is only reachable through short-lived signed links, database access rules that limit each user to their own data, secrets kept out of the browser, and limited staff access. No system is perfectly secure; if a breach affects your data, we’ll notify you and the authorities as the law requires.

11. Children

Cutfield is not for children. You must be at least 16 years old to use it. If you believe a child has given us personal data, contact us and we’ll delete it.

12. Changes to this policy

We may update this policy as the service changes. We’ll post the new version here with a new effective date and, for significant changes, tell you by email or in the app before they take effect.