Privacy Policy

This Privacy Policy explains how Trueclip handles personal information when a brand uses the service, a customer opens an invitation or submits a story, or someone visits a Trueclip page or embedded widget.

The brand that sent an invitation also decides how it uses customer content outside Trueclip. Its own privacy policy may apply to that use.

• Account data, including name, email, profile image, Google account identifiers, sessions, IP address, and device or browser information.
• Brand data, including brand name, website, logo, invitation prompts, and invitation recipients.
• Customer submissions, including name, email, video and audio, optional review and rating, signature, consent choices, and submission time.
• Payment-related data, including encrypted receiving-bank details, payment method, reference, receipt, amount, and license record.
• Product activity, including invitation visits, upload and processing status, email delivery events, edits, and license actions.
• Messages or other information you send when asking for help or giving feedback.

A recording naturally contains a person’s image and voice. Trueclip does not use recordings for facial recognition or create biometric templates.

We receive information directly from account holders and customers, from a brand when it sends an invitation, from Google during sign-in, from service providers that report delivery or processing events, and automatically when a browser connects to the service.

We use personal information to:

• authenticate accounts and secure the service;
• create invitations and receive, process, edit, host, and deliver customer content;
• record signed permissions, direct-payment declarations, receipts, and license periods;
• send invitations, payment receipts, service messages, and support replies;
• measure invitation activity and diagnose reliability or security problems;
• enforce our terms, prevent abuse, and comply with law; and
• improve the service using operational feedback and aggregate patterns.

Where data-protection law requires a legal basis, we process information as needed to perform our contract, act on a customer’s consent and signed choices, comply with legal obligations, and pursue legitimate interests such as securing, operating, and improving Trueclip. You may withdraw consent for future processing where consent is the basis, but that does not make earlier lawful processing invalid or erase records we must keep.

Customer submissions and consent records are shared with the brand that issued the invitation. If the customer selects paid-ad use, encrypted bank details are made available only to that brand so it can pay the customer directly. Public hosted videos and website widgets show content selected by the brand within the recorded permission.

We use service providers for hosting, storage, databases, authentication, email, and media processing, including Vercel, Cloudflare R2, Google, and Resend. If a brand requests AI transcription, the necessary media is sent to the configured transcription provider for that request. We may also disclose information to comply with law, protect people or the service, investigate abuse, or complete a business transfer with appropriate safeguards.

We do not sell personal information or share it for cross-context behavioral advertising.

Trueclip uses essential cookies for sign-in and security. Recording pages use a temporary browser identifier to avoid counting the same visit more than once in a browser session. We do not use third-party advertising cookies or invisible email-open tracking pixels.

Google may set its own cookies when you choose Google sign-in. Its privacy practices are governed by Google’s policies.

We keep account and brand data while the account is active and as needed to provide the service. Unlicensed videos may lock after the advertised free-storage period. Brands can delete unlicensed videos in the dashboard. Hosted access ends when a license expires.

We may retain signed consent, license, security, payment-declaration, and receipt records as reasonably needed for legal obligations, dispute resolution, fraud prevention, and enforcement. Temporary uploads and orphaned files are deleted on a rolling basis. Removal from backups may take additional time.

We use private object storage, signed media links, access controls, and encryption for bank details. OAuth tokens are encrypted. No system can be guaranteed completely secure, so please use a secure Google account and report suspected unauthorized access promptly.

Trueclip and its providers may process information in countries other than yours. Where required, we use legally recognized safeguards for those transfers.

Depending on where you live, you may have rights to know or access, correct, delete, restrict, object to processing, or receive a portable copy of personal information. You may also withdraw consent for future use and complain to your local data-protection authority.

California residents may also have rights to know, correct, delete, and receive information without discrimination. Because Trueclip does not sell personal information or share it for cross-context behavioral advertising, there is no sale or sharing to opt out of under this policy.

To make a request, email privacy@trueclip.io. We may need to verify your identity. A customer can also contact the inviting brand about that brand’s separate use of a submission.

Trueclip is not intended for children under 18, and brands must not use it to request recordings from children. If you believe a child submitted personal information, contact us so we can investigate and remove it.

We may update this policy as the service changes. The effective date will show when the latest version applies, and we will provide additional notice when required.

Privacy questions and requests can be sent to privacy@trueclip.io.