Trust & Security

Clipra accounts are protected by email and password sign-in and Google sign-in. Sessions use short-lived access tokens that are refreshed automatically.

Every request that reads or writes your data is authenticated on our server before it reaches the database. Row-level rules in the database ensure one user cannot read or modify another user's data.

All traffic to Clipra is served over HTTPS/TLS. Account data and project metadata are stored in our managed Postgres database; uploaded videos and generated clips are stored with our hosting and processing providers listed below.

Account data: email address, display name, and authentication identifiers.

Usage data: minutes processed, plan, and project history needed to operate the product.

Content: the videos you upload or link to and the clips Clipra generates from them.

We rely on the following providers to run Clipra:

• Lovable Cloud (hosting, database, authentication, storage)
• Stripe (billing and subscription management)
• Our video processing backend at api.clipra.bond (clip generation)

These providers process data only to deliver the service. We do not sell your data.

Account and usage records are retained while your account is active. Uploaded videos and generated clips are retained so you can access them from your dashboard; you can delete your account at any time by contacting us, and we will remove your account data and stored clips within a reasonable period thereafter, except where we are required to retain limited records (for example, billing history).

If you believe you've found a vulnerability or have a privacy concern, please reach out and we'll respond as quickly as we can. Please do not publicly disclose the issue before we've had a chance to investigate.

Contact: security@clipra.bond