ClipForge is operated by Bulsu Labs ("we", "us"). This policy explains exactly what we collect, why we collect it, who can see it, and what we never do. We wrote this in plain English on purpose. If anything is unclear, write to info@bulsulabs.com and we will explain.

What we collect

Account — your email address (used to sign in and to send transactional emails), an opaque user ID assigned by our auth provider, and an optional display name.
Source media — the YouTube or TikTok URLs you paste, or videos you upload directly. We store the source temporarily so the render pipeline can process it, and we store the rendered clips so you can re-download them from the app.
Usage data — your credit balance, plan tier, render job history, error logs, and crash diagnostics. We use this only to keep the service running and to troubleshoot when something goes wrong.
Device data — APNs push token (only if you grant notification permission), iOS version, and locale. This is used to deliver "your clips are ready" notifications.
Purchase history — which products you purchased via Apple In-App Purchase, tracked through Apple's subscription system and RevenueCat. We do not see your credit card.

What we never do

We never sell your data. There is no broker, no marketplace, no third-party data partner. ClipForge has zero advertising revenue.
We never use your uploaded videos to train AI models. Your content is yours.
We never read your camera roll, contacts, photo metadata, location, or messages. We do not request those permissions.
We never track you across other apps or websites. We do not use the IDFA.

How we use your data

To run the clip pipeline: download → transcribe → score → render → store.
To deliver subscription benefits and update your credit balance.
To send push notifications about jobs you started (only if you opted in).
To respond when you contact us at info@bulsulabs.com.
To detect abuse and fraud (e.g. someone trying to re-use a refunded purchase).

Sub-processors

We rely on a small set of trusted vendors. Each only sees the data they need to do their job, and each is bound by a data-processing agreement compatible with GDPR.

Supabase (EU region) — Postgres database, object storage, authentication.
OpenAI — Whisper for speech-to-text and GPT-4o-mini for moment scoring. OpenAI's API policy excludes input/output from training by default.
RevenueCat — subscription state, entitlement, and webhook handling.
Apple — App Store sign-in (if used), App Store In-App Purchase, and APNs.
Sentry — crash and error reporting (no PII, IPs are anonymized).
Coolify-managed VPS in Europe — application hosting and render workers.

Data retention

Source videos are deleted within 24 hours of the render finishing.
Rendered clips are kept while your account is active so you can re-download them.
Account data (email, profile, purchase history) is kept until you delete the account.
Crash/error logs are kept for 90 days then purged.

Your rights

You can export your account data or delete your account at any time from Settings → Account → Delete Account, or by emailing info@bulsulabs.com. Deletion is permanent and cascades across every service listed above; we will confirm by email within 7 days.

EU/UK residents have the additional rights described in GDPR Articles 15–22 (access, rectification, erasure, restriction, portability, objection). We honour these globally, regardless of where you live.

Children

ClipForge is rated 4+ on the App Store but is not designed for children under 13 and is not directed to them. We do not knowingly collect data from anyone under 13; if you believe a child has signed up, write to info@bulsulabs.com and we will remove the account.

Security

All traffic is TLS 1.2+. Database access requires service-role credentials kept in environment-variable secrets. Storage objects are protected by row-level security keyed to the user's UUID. OAuth tokens for social-publishing integrations are encrypted at rest with AES-256-GCM. We do not store credit-card numbers — payments are handled by Apple.

Changes to this policy

If we materially change what we collect or who has access to it, we will notify you in-app before the change takes effect. Minor wording fixes will not trigger a notice.

Contact

Bulsu Labs · ClipForge
info@bulsulabs.com
bulsulabs.com

Privacy Policy