Privacy policy

Accounts and sign-in

We process account information, session credentials and recovery information to provide access to your workspace. Essential sign-in cookies keep the browser associated with its authenticated account and help protect sign-in requests.

When email sign-in is enabled, we process your mailbox, verification challenge and abuse-control information. Cloudflare Email Sending delivers the verification code.

When Google sign-in is enabled, we use your Google account identifier to recognize your account. Google may also supply email and profile information. Google, email and legacy accounts are not automatically merged. Linking is an explicit action from your existing signed-in account.

Media and generation

Cloudflare hosts the application and private media storage. Application access to stored files is associated with the owning account.

When you confirm an available generation request, your product image and reference media are provided to HiAPI for processing. The provider's storage and handling rules may differ from this service's rules. Upload only material you are permitted to share for that purpose.

Browser clip merging is a separate local tool. The merge workflow processes the selected clips on your device rather than uploading them for AI generation.

Availability and retention

Media files are normally available for 7 days. Files needed for unfinished work may be kept longer, and expired objects can remain stored until cleanup. Download a copy of results you need to keep.

That availability window is not a deletion deadline for account, payment or provider records. Access, billing, recovery and unfinished work can require records for different periods.

Payments

When payments are enabled, Stripe handles hosted payment checkout. The application maintains order and credit records to confirm purchases, prevent duplicate fulfillment and handle payment status changes.

Questions and requests

Contact support@aiclonecut.com about your information or an access, correction or deletion request. Include enough information to identify the account, and keep passwords, verification codes and recovery credentials private.