Privacy Policy

Extraits Pod is a personal tool that cuts videos into short clips and publishes them to its user's own YouTube, Instagram and TikTok accounts, at the user's request.

Controller

The controller of the data described here is [to be completed], [to be completed], [to be completed] (contact: github.com/Geckolaso88/video_clipper/issues; see the legal notice).

Data we use

• Platform connection: when the user connects an account, the tool receives an access token. For TikTok: basic profile info (user.info.basic), video upload (video.upload) and the list of published videos (video.list), used only to publish clips and display their statistics.
• Videos: source videos and the clips produced from them.
• Public statistics of published videos (views, likes…), for the dashboard.
• Workspace: the login email address and the workspace settings.

Use and sharing

This data is used only to operate the tool for its user: publishing their clips and tracking their performance (performance of the contract, Article 6(1)(b) GDPR). It is never sold, rented or used for advertising, and never shared with third parties other than the technical providers that run the service (see “Recipients”). Videos are processed, and access tokens stored, on the password-protected server that hosts the user's workspace (OVH SAS, in France); transcription and AI features run on that server, without sending anything to a third-party AI service.

Retention and deletion

Data is kept while the account stays connected. The user can disconnect a platform at any time from the tool or from the platform's settings; the token is then deleted. Videos can be deleted from the dashboard. Order and invoicing data is kept for ten years, as required by accounting rules (Article L123-22 of the French Commercial Code); withdrawal and cancellation requests are kept until the applicable limitation periods expire (generally five years).

Payment

Payments are processed by Stripe. Extraits Pod never receives or stores your bank or card details: only your name, email address, billing address and subscription status are passed on to us, for invoicing and access to the service.

Your order also records the following with Stripe, together with the payment:

• the language of the page you ordered from, so that checkout, the confirmation and your customer area are shown in that language;
• the date and time of your consent to the service starting right away (the checkbox before payment, see the right of withdrawal), so that we can prove this request and confirm it to you on your receipt or invoice;
• the attribution code of the link you followed to reach the site, if it contained one (the code of an ad or campaign, of our link page, or the referral code of a customer who recommended Extraits Pod to you): it is used to know which campaign or referral brought in the order and, where applicable, to give the referrer the benefit offered. Our sales statistics keep only this code, the plan, the language, the amount and the date, never your name or email address;
• your VAT number, only if checkout asks for it and you enter it (purchase for a business), to calculate VAT and issue the invoice.

This data is processed to perform your order (language, VAT number), to meet our legal obligations regarding proof and invoicing (time of your consent, VAT number) and for our legitimate interest in knowing which campaigns and referrals bring in customers (attribution code).

Storage in your browser

The sales site sets no cookies. It only keeps, in your browser:

• the attribution code of the link you followed, if it contained one, for the duration of your visit (session storage, sessionStorage, cleared when you close the tab), so that it can be added to your order if you go on to checkout;
• the language you chose with the language switcher or banner (localStorage), so that you are not offered another version of the site again; you can clear it along with the site data in your browser settings.

None of this stored data is sent anywhere, except the attribution code, which is added to your order when you go on to checkout.

Visiting the site

The sales site is hosted by Vercel Inc.. On each visit, this host processes technical connection data (IP address, date and time, requested page, browser) to serve the pages and protect the site against abuse (legitimate interest, Article 6(1)(f) GDPR). We use no audience measurement tool and no targeted advertising. The “Our clips” page shows the thumbnails of published videos, loaded from the platforms' servers (YouTube, TikTok, Instagram), which then receive your IP address.

Online withdrawal and cancellation

When you use the “Withdraw from contract here” or “Cancel contracts here” buttons, we process the details you enter (name, email address, order number, contract, type of cancellation and requested end date, reason for a termination for cause) to find your order, carry out your request and send you the acknowledgement of receipt. The date and time of the request (and, for a termination for cause, its reason) are recorded with your order at Stripe; the acknowledgement of receipt and a copy of the request for our customer service are sent by email. Legal basis: our legal obligations (Article 6(1)(c) GDPR) and the performance of the contract (Article 6(1)(b)).

Recipients

Only the people who run Extraits Pod have access to this data, along with the technical providers that run the service, each for its own part:

• Vercel Inc. (United States): hosting of the sales site and its functions (checkout, withdrawal, cancellation);
• OVH SAS (France): server hosting the customer workspaces and processing the videos;
• Stripe Payments Europe, Ltd. (Ireland): payments, invoices and order data; Stripe also processes some data as a separate controller (fraud prevention, legal obligations);
• our email delivery provider, for acknowledgements of receipt and our replies;
• YouTube (Google), Instagram (Meta) and TikTok, when the user connects an account and publishes: they receive the clips and the information needed to publish them, under their own privacy policies.

Transfers outside the European Union

Vercel Inc. is established in the United States, and Stripe may transfer data to Stripe, Inc. in the United States. These transfers rely on the European Commission's adequacy decision for the EU–US Data Privacy Framework for certified companies or, failing that, on the standard contractual clauses adopted by the European Commission.

Your rights

You can ask for access to your data, its rectification or erasure, the restriction of its processing and its portability, and object to processing based on our legitimate interest (Articles 15 to 21 GDPR), by writing to us (contact below). You can also lodge a complaint with the French data protection authority, the CNIL (cnil.fr), or with the data protection authority of your country of residence. Providing your order details is necessary to conclude the contract; no decision based solely on automated processing that produces legal effects concerning you is made.

Contact

For any question or deletion request: github.com/Geckolaso88/video_clipper/issues.