Privacy policy

Clipio, [Adresse à compléter — rue, NPA localité, Suisse], is responsible for the data processed through Clipio. Questions about your data: hello@clipio.ch.

Our representative in the European Union (art. 27 GDPR): [Représentant UE à désigner — nom, adresse, pays].

• Account: email address, language, usage mode (business or personal) and, if you sign in with Google, the name and profile picture Google shares.
• Content: the descriptions you enter, the photos you upload to animate and the videos generated.
• Ready-to-post versions: the voice-over script, the synthetic voice created from it and the contact details shown on the end card (phone, website, address), kept in your brand kit for your next videos.
• Brand kit, if you fill it in: display name, logo, colours and font of your posts.
• Credits and payments: packs bought, amounts, payment status and credit history. We never receive your card or TWINT details: Payrexx processes them directly.
• Technical data: IP address, browser type and logs needed to run and secure the service.

We process your data for the following purposes. For people in the EU, the legal basis (art. 6 GDPR) is given in brackets:

• Create and secure your account, and sign you in (performance of the contract).
• Generate your videos and keep them in your gallery (performance of the contract).
• Creating the ready-to-post version when you ask for it: suggesting a voice-over script, reading it with a synthetic voice and editing the video with captions, music and an end card (performance of the contract).
• Manage your credits and payments, and meet our accounting obligations (performance of the contract, legal obligation).
• Prevent abuse and keep the service secure (legitimate interest in a safe and lawful service).
• Answer your support requests (performance of the contract, legitimate interest).

We do not sell your data, do not run targeted advertising and do not train AI models with your data ourselves. Higgsfield, our generation provider, may however use your descriptions, photos and videos to improve its own models under its terms, so do not include sensitive personal data in your descriptions or upload photos that reveal any. We do not use your videos for our own promotion without your consent.

Some tasks are handled by providers that process data on our behalf and on our instructions:

• Supabase — database, sign-in and storage of videos, uploaded photos and your logo. Data hosted in Switzerland (Zurich).
• Higgsfield — video generation. Receives the text of your description (with the activity entered under “My brand”, never your contact details) and, if you upload any, your photos through a temporary link; passes them to the provider of the model used and may use descriptions, photos and videos to train its models; processed outside Switzerland, notably in the United States.
• Kuaishou (Kling model), Alibaba (Wan model) and ByteDance (Seedance model) — providers of the video models, called through Higgsfield. The provider of the model in use receives the text of your description and any photos; processed outside Switzerland and the EU, notably in China, including in countries without an adequate level of protection.
• Infomaniak (AI) — drafting the suggested voice-over script and translating a post’s script into another language, only when you ask for it. Receives your business description or the text to translate. Processing in Switzerland.
• Microsoft (Azure Speech) — synthetic voice of the post. Receives the voice-over script. Processing in Switzerland (Switzerland North region).
• Creatomate — editing the post. Receives the clip, the voice-over, the music and your logo through temporary links, plus the caption text, the end-card contact details and your brand colours and font. Company based in the Netherlands; processing in the EU and at its hosting providers.
• Payrexx — TWINT and card payments. Switzerland (Thun).
• Vercel — web app hosting and audience measurement. Processes requests and technical logs, notably in the United States and the EU. Audience measurement counts page views without cookies or storing your IP address: each visit is recognised by an anonymous fingerprint renewed every day.
• Sentry (Functional Software) — tracking of technical errors in the app. Receives the error message, the page concerned, the browser and operating system, without your name, email, IP address or cookies; signed links and tokens are masked before sending. Data hosted in the EU (Germany); company based in the United States.
• Infomaniak — sending emails such as the sign-in link. Switzerland.
• Google — only if you choose to sign in with Google.

Switzerland benefits from an adequacy decision of the European Commission. When data is transferred to a country without an adequate level of protection, we rely on appropriate safeguards, notably recognised standard contractual clauses or the Data Privacy Framework where the provider is certified.

• Account, descriptions and videos: until your account is deleted.
• Brand kit and end-card contact details: until you change them or delete your account. Voice-overs and posts: like videos.
• Uploaded photos: deleted automatically 30 days after upload.
• Copies at Higgsfield: generated files expire there after about 7 days; we keep a copy in our own storage.
• Payment records: 10 years (art. 958f CO), where applicable with our payment provider.
• Technical logs: a few weeks, unless there is a security incident.

You can ask to access, correct, erase or receive your data in a common format, or to restrict its processing, and you can object to processing based on our legitimate interest. To exercise these rights or delete your account, email hello@clipio.ch. We usually reply within 30 days.

Our moderation filters may reject a description or a photo automatically. You can ask for a person to review the decision and give your point of view.

You can also contact the Federal Data Protection and Information Commissioner (FDPIC) or, if you live in the EU, the data protection authority of your country.

We only use strictly necessary cookies and local storage. Vercel audience measurement works without cookies and does not follow you across sites; no third-party advertising or tracking tools.

• NEXT_LOCALE (session cookie) — remembers your language.
• Supabase session cookie (sb-…-auth-token) — keeps you signed in; removed when you sign out.
• theme (local storage) — remembers the light or dark theme.

Payrexx payment pages and Google sign-in apply their own rules.

Connections are encrypted (HTTPS), your videos and photos are kept in private storage and each account can only reach its own data. Photos are re-encoded on upload, which strips their metadata (GPS location, device), and only reach the provider through a link that expires after one hour. Provider access keys stay on our servers.

The service is for people aged 18 and over.

We may update this policy. The current version is published on this page with its date.