Privacy Policy

1. Information we may process

Depending on the features you use, CutPilot may process account details, uploaded video and audio files, file metadata, editing and publishing settings, technical logs, usage information, and information returned by connected social platforms after you authorize access.

2. Video and media content

What leaves your device depends on which part of CutPilot you use, and the difference is deliberate.

Studio. Your footage is decoded, analysed and rendered inside your browser. The video files themselves are not uploaded. What is sent to our servers is the measurement of each clip — its duration, and per candidate passage a score, a start and end time, average brightness, motion, colour, framing and whether a face was detected — together with a fingerprint derived from the file's name, size and modification date. That fingerprint lets us recognise a clip you have already analysed so the work is not repeated; it is not derived from the image content and cannot be used to reconstruct it. None of this data contains video or audio.

Semantic passage selection. One feature is an exception, and it is the reason this paragraph is not simply “nothing leaves your device”. When semantic passage selection is enabled, a single still frame from each clip — an actual image from your video — is sent to OpenAI so a model can propose which passage to use. The feature is off by default; while it is off, no image from your footage leaves your device in the Studio. When it is on, this page is the notice that it does.

Agentic and server-side rendering. These features do upload media. Source files and rendered outputs are stored in our cloud storage so that scheduled and automated publishing can run without your device being switched on. If you do not use these features, no media file is uploaded.

You can delete stored analyses and media, and the account itself, through the requests described in section 8. Disconnecting a platform removes the authorisation used to publish on your behalf.

3. Connected social accounts

If you connect a supported platform such as TikTok, CutPilot may receive identifiers, profile information, authorization scopes, access tokens, refresh tokens, publishing status and analytics made available by that platform. We use this information only to provide and maintain the connected features you authorize.

4. How information is used

Information may be used to operate the service, authenticate users, process and render media, execute requested schedules or publications, maintain integrations, diagnose failures, prevent abuse, improve reliability and, where enabled, provide analytics or content recommendations.

5. Legal basis and user control

Where applicable, processing is based on providing the service you request, your consent for optional connections, legitimate interests such as security and service reliability, and legal obligations. You can revoke third-party access through supported account controls or the relevant platform, subject to technical and legal retention requirements.

6. Sharing and subprocessors

CutPilot does not sell personal data. The providers below process data on our behalf, on our instructions, and for nothing else. Naming them is the point: “infrastructure providers” tells you nothing you could act on.

Data is also sent to a social platform when you explicitly ask us to publish something there.

7. Security

We design CutPilot to keep sensitive credentials server-side, restrict access to user data and protect connected-platform tokens. No system can guarantee absolute security, and production safeguards will continue to evolve with the service.

8. Your copy, and your erasure

Two rights are implemented rather than promised.

A copy of your data. GET /api/account/export, signed in, returns every row we hold about you as one JSON file, category by category, together with time-limited download links for your stored media. Access and refresh tokens for connected platforms are withheld from that copy — handing them over in plain text would be handing over the accounts themselves — but they are erased with everything else.

Erasure. POST /api/account/delete, confirmed by retyping your own email address, removes your media files first and then the account. Every table cascades from the account, so the rows go with it. The files go first on purpose: they do not cascade, and deleting the account before them would leave your footage in storage with nothing left pointing at it.

What we cannot reach: anything already published to a third-party platform lives there under that platform's own terms. Revoke the connection and delete the post from the platform itself.

Outside those requests, information is kept only as long as the service, security or a legal obligation requires.

9. International transfers

The providers listed in section 6 are established in the United States, so using CutPilot involves transferring data outside the European Union. These transfers rely on the safeguards in Chapter V of the GDPR — the European Commission's standard contractual clauses and, where the provider is certified, the EU–US Data Privacy Framework. You can ask us for a copy of the safeguards that apply.

10. Children

CutPilot is not intended for children who are not legally able to use the service or authorize the relevant processing under applicable law. We do not knowingly design the service to collect children's data without the permissions required by law.

11. Changes

This policy may change as CutPilot's production architecture, providers and integrations are finalized. Material changes will be reflected by an updated effective date and communicated where required.

12. Data controller

CutPilot is operated by musketeers, Société par actions simplifiée au capital de 10 €, registered under RCS Paris 109 116 061, with registered office at 47 rue Vivienne, 75002 Paris.

13. Contact and privacy requests

No contact address is published yet. CutPilot is not commercially available, and a monitored address for support and privacy requests will appear here — and be required — before it is.