Privacy Policy

1. Who We Are

ClipMixAI ("we", "us") is an AI-powered music video and song creation platform. We offer AI video generation, AI song composition, video editing, and social media publishing tools. Protecting your personal data is important to us.

2. Data We Collect

When using ClipMixAI, we collect the following data:

• Account details: email, name, encrypted password (bcrypt hash)
• Uploaded files: audio files (MP3/WAV/FLAC/AAC/OGG) and photos for video creation
• Usage data: job history (status, creation date, video size)
• Technical data: IP address (only for rate limiting, not stored), country (detected via Cloudflare headers for analytics)
• Behavioral data: pages visited, navigation journey, session duration, device type, screen resolution, browser language, and referral source — collected to understand how visitors use our site and improve the experience
• Demographic data (via Google Analytics): aggregated age bracket, gender, and interest categories — only collected when you consent to analytics cookies and Google Signals is enabled. This data is anonymized and aggregated by Google; we do not receive individually identifiable demographic information
• Support chat data: conversation messages exchanged through our live support chat, including any email address you voluntarily provide for follow-up. Support conversations are stored and may be reviewed by our team to improve service quality
• AI content inputs: song lyrics, theme descriptions, musical preferences, and text prompts provided for AI song generation and voiceover scripts. These inputs are sent to third-party AI providers for processing and are not used to train AI models
• Face analysis data: when using Character mode, uploaded face reference photos are analyzed using age estimation technology to ensure compliance with our child safety policy. No biometric data is stored — the analysis is performed in real-time and discarded immediately
• Promotional data: coupon/promo codes used, newsletter subscription status, and email engagement preferences
• TikTok account data (when connected): when you connect your TikTok account via our integration, we access your TikTok display name, profile picture, and unique user identifier (open_id). This data is used solely to identify your TikTok account within our platform and display your profile information. TikTok authorization tokens are stored securely on our servers and are automatically refreshed

3. How We Use the Data

• Creating and managing your account
• Generating AI music videos and AI-composed songs
• Storing and delivering your videos
• Processing payments (via Stripe)
• Protection against abuse (rate limiting)
• Analyzing site usage to improve the service (with your consent)
• Understanding visitor journeys and behavior patterns to improve the user experience
• Aggregating demographic insights (age, gender, interests) to better serve our audience — only with your consent
• Providing live support and responding to your inquiries via our support chat
• Sending newsletters and promotional communications (only with your consent; you can unsubscribe at any time)
• Publishing videos to social media platforms (TikTok, Pinterest, Facebook, Instagram) on your behalf when you explicitly request it
• Video editing services (trim, text overlays, filters, cropping, speed adjustment)

4. Legal Basis for Processing (GDPR)

We process your personal data under the following legal bases:

• Contract: account management, video generation, and payment processing — necessary to provide the service you requested.
• Consent: analytics cookies (Google Analytics 4) are only activated after you give explicit consent through our cookie banner.
• Legitimate interest: security measures, fraud prevention, and service improvement.

5. Storage & Security

Your data is stored on secure servers (Hetzner, Cloudflare R2). Passwords are stored only as encrypted hashes (bcrypt). All communication is exclusively via HTTPS. Third-party authorization tokens (TikTok, Pinterest, Facebook/Instagram) are stored securely on our servers and automatically refreshed; they are permanently deleted when you disconnect your account or delete your ClipMixAI account.

6. Data Sharing

We do not sell or share your personal data with third parties, except:

• When required for payment processing (Stripe)
• When required for cloud storage and delivery (Hetzner, Cloudflare R2)
• When you consent to analytics (Google Analytics 4, including Google Signals for demographic insights)
• When required for AI-powered video and image generation (FAL.ai, Replicate) — only your uploaded images and prompts are sent; no personal identity data is shared
• When required for AI voiceover generation (ElevenLabs) — only your script text is sent for text-to-speech processing; no personal identity data is shared
• When required for AI song generation (Suno) — only your lyrics, theme descriptions, and musical preferences (genre, mood, duration) are sent; no personal identity data is shared
• When you choose to publish content to Pinterest via our integration, your video/image and description are sent to Pinterest on your behalf. This only happens when you explicitly request it
• When you connect your Facebook Page or Instagram account for publishing, we access your page list, page metadata, and Instagram business profile. Your videos and captions are sent to Facebook/Instagram on your behalf only when you explicitly request it. You can disconnect at any time from the Dashboard or by removing ClipMixAI from Facebook Settings → Apps and Websites
• When you consent to analytics cookies, we use the TikTok Pixel for conversion tracking and advertising measurement. TikTok may receive aggregated event data (e.g. page views, purchases) but no personal identity data is shared without consent
• When you choose to publish videos to TikTok via our Content Posting API integration, your video file and caption are sent to TikTok on your behalf. This only happens when you explicitly click 'Publish to TikTok' or 'Send to Drafts' and requires your prior TikTok authorization
• You can disconnect your TikTok account at any time from your Dashboard. Upon disconnection, we revoke the authorization token and delete all stored TikTok account data (display name, profile picture, open_id). You can also revoke access directly from TikTok's app settings. For more information about how TikTok handles your data, see TikTok's Privacy Policy at tiktok.com/legal/privacy-policy
• When required by law

7. Cookies & Tracking

We use a minimal set of cookies:

• Session cookie: a secure httpOnly JWT cookie for authentication. This is essential for the service and does not require consent.
• Language preference: stores your selected language. Essential.
• Analytics cookies (Google Analytics 4): used to understand site usage (pages visited, traffic sources, device info, demographics). With Google Signals enabled, Google may also collect aggregated age, gender, and interest data from users who have enabled Ads Personalization. These cookies are only activated after you give explicit consent through our cookie consent banner.
• TikTok Pixel: used for conversion tracking and advertising measurement. The pixel loads only after you consent to analytics cookies. It may collect page view events and purchase conversions. You can opt out by rejecting analytics cookies via our consent banner.
• Session tracking (sessionStorage): we store a temporary session identifier, pages visited, and session start time in your browser's sessionStorage. This data is automatically cleared when you close the browser tab and is used to understand navigation patterns. No consent is required as this is essential for service improvement and does not persist beyond the browser session.

How to manage cookies: When you first visit our site, you will see a cookie consent banner. You can accept or reject analytics cookies. If you reject, no analytics data will be collected. You can change your preference at any time by clearing your browser's local storage and revisiting the site.

For more about Google's data practices, see Google's Privacy Policy. We enable IP anonymization in Google Analytics. We also use Google Signals, which enables cross-device reporting and aggregated demographic data. You can opt out of Google Signals data collection by disabling Ads Personalization in your Google Account settings.

8. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the right to:

• Access: view the data we hold about you
• Correction: request correction of inaccurate data
• Deletion: delete your account and all your data through the Dashboard
• Portability: request your data in a readable format
• Objection: object to the processing of your data

For any request, contact us at support@clipmixai.com

9. Data Retention

Your data is retained as long as your account is active. Upon account deletion, all personal data, files, videos, and third-party authorization tokens (TikTok, Pinterest, Facebook/Instagram) are permanently deleted. Videos already published to third-party platforms remain subject to those platforms' own data retention policies.

10. Policy Changes

We may update this policy from time to time. We will notify you of significant changes via email.

11. Contact

For questions about the Privacy Policy: support@clipmixai.com