This Privacy Policy explains how ClipVerse ("we", "us", "our") collects, uses, and shares information when you use ClipVerse Director ("the Service"). By using the Service, you agree to the practices described here.
Inputs you upload — including reference images — are transmitted to and processed by our third-party AI providers in order to generate Outputs. To protect your own legal interests and the rights of others, please do not submit:
You are responsible for the content you submit. See our Terms of Service for the full list of prohibited uses.
| Purpose | Legal basis (GDPR) |
|---|---|
| Operate the Service, authenticate you, and deliver generations. | Contract |
| Process subscriptions, credit packs, and invoices. | Contract / legal obligation |
| Prevent fraud, abuse, and violations of our Terms. | Legitimate interest |
| Maintain security, diagnose errors, and improve reliability. | Legitimate interest |
| Improve features and develop new ones (using aggregated or de-identified data where feasible). | Legitimate interest |
| Send service announcements and respond to support requests. | Contract / legitimate interest |
| Send marketing communications (only with your consent where required). | Consent |
| Comply with legal obligations and enforce our rights. | Legal obligation / legitimate interest |
We do not sell your personal information. We share it only with the categories of recipients below, and only to the extent necessary:
We do not use your prompts, reference images, or Outputs to train our own foundation models, and we do not share them with third parties for their model training except as necessary to deliver the requested generation. Some AI providers may retain prompts for short periods for abuse monitoring under their own terms; consult their policies for details.
Automated decision-making. We do not engage in automated decision-making within the meaning of Article 22 of the GDPR — that is, we do not make decisions about your account, eligibility, pricing, or service tier solely by automated means in a way that produces legal or similarly significant effects on you. The AI models that generate images and videos are tools you direct; they do not make decisions about you. Our automated systems are limited to operational tasks such as content moderation, fraud detection, and abuse prevention, and significant outcomes (such as account suspension) are subject to human review on request.
6.1 Strictly necessary (always on). These keep you signed in, remember your preferences (language, billing cycle), operate checkout, and store your cookie-consent choice. They never track you across other sites and cannot be switched off.
cv_director_* prefix (your sign-in session). Cleared when you log out.6.2 Analytics (only with your consent). If — and only if — you accept analytics cookies in our cookie banner, we use third-party analytics providers (on this site and in the app, with data hosted in the EU) to understand which features are used and where people get stuck. These are tied to a random account identifier (your internal account ID), never your email, name, prompts, reference images, or generated content. If you reject, nothing is loaded and no analytics cookies are set. Your internal account ID is personal data under GDPR; it is de-linked from the analytics tools when you withdraw consent or close your account, and is covered by your access and erasure rights (Section 8).
6.2a Marketing (only with your consent — off by default). If — and only if — you turn on the Marketing category in our cookie banner, we use an advertising partner’s measurement pixel to gauge whether our advertising reaches people who find Director useful. It sets first-party cookies that recognise your browser (and, if you arrived from an ad, which ad you clicked) and shares page-visit and sign-up events with that partner. It never receives your email, prompts, reference images, or generated content. This category is off unless you enable it; if you leave it off or withdraw it, the pixel is not loaded and its cookies are cleared.
6.3 Cookies we may set:
| Name | Purpose | Category | Retention |
|---|---|---|---|
cv_director_consent / cv_consent | Remembers your cookie choice | Strictly necessary | ≤ 12 months |
cv_director_* | Sign-in session / preferences | Strictly necessary | Until logout |
_ga, _ga_* | Usage analytics | Analytics — set only after consent | ≤ 13 months |
ph_* | Usage analytics (EU-hosted) | Analytics — set only after consent | ≤ 12 months |
_fbp, _fbc | Advertising measurement | Marketing — set only if you enable it | ≤ 3 months |
cv_director_experiment / cv_exp | Remembers which site layout you were shown (A/B test) so it stays consistent | Strictly necessary | ≤ 12 months |
6.4 Managing & withdrawing. You can change your choice at any time via the Cookie settings link in our footer — withdrawing is as easy as granting, and turning analytics off clears the associated cookies. You can also clear cookies and local storage through your browser (this signs you out and resets preferences).
Do Not Track. Our Service does not respond to "Do Not Track" browser signals. Analytics and advertising cookies run only with your explicit, category-specific consent — advertising measurement is off unless you enable the Marketing category — so our processing is governed by the consent choices you make above.
We are based in the Republic of Korea, and our infrastructure and processors operate in multiple countries, including the United States and the European Union. When we transfer personal data from the European Economic Area or the United Kingdom to a country that has not been deemed to provide adequate protection, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
Depending on where you live, you may have the right to:
To exercise these rights, email support@clipverse.studio. We may need to verify your identity before responding.
The Service is not directed to anyone under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, contact us and we will delete it.
We use administrative, technical, and organizational measures designed to protect personal data, including encryption in transit (TLS 1.2+) and at rest, least-privilege access controls, and secure key management (AWS KMS). No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
If we become aware of a personal-data breach affecting your information, we will notify you and the appropriate supervisory authorities in accordance with applicable law — including, where required, within 72 hours of becoming aware of the breach under Article 33 of the GDPR.
We may update this Policy from time to time. We will post the updated version here and update the "Last updated" date. Material changes will be communicated through the Service or by email.
Privacy questions or requests: support@clipverse.studio.