Privacy Policy

Effective 26 October 2026 · Orco App Studio · admin@orcoappstudio.com

This policy explains how Orco App Studio (“we”, “us”) handles personal data when you use Clipwine: the website at clipwine.jon.systems and the Clipwine iOS app (together, the “Service”). Clipwine turns long videos into short clips: you upload or import a video, and the Service prepares it for playback, transcribes it, suggests highlights and renders the clips you choose.

Orco App Studio is the controller of your personal data for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. You can contact us about anything in this policy at admin@orcoappstudio.com.

1. What we collect

Account data

• Your name, email address and a password, which we store only as a one-way hash. We never see or store your password in readable form.
• Sessions: when you sign in we create a session record holding a random session token, its expiry time, and the IP address and browser or device user agent it was created from.

Your content

• Videos you upload and their file details (name, size, type, duration, resolution).
• Videos you import by link from a streaming platform (for example Twitch or Kick): the link you paste and the video we fetch from it.
• Everything we make from your videos: playback versions, thumbnails, audio waveforms, transcripts, captions, AI-generated summaries, chapters, highlights and topic labels, AI title and caption suggestions, and the clips you render.
• How you organise content: campaigns, folders, names and descriptions, and who you share a campaign with.

Technical data

• Server logs: our hosting provider records requests to the Service (time, URL, IP address, user agent, response status). Our own service logs record events such as video and job identifiers and processing times. They are used to run, secure and debug the Service.
• We do not use analytics, advertising or tracking tools, and we do not use third-party cookies.

2. How we use it, and our legal bases

• To provide the Service you ask for: creating and securing your account, storing, processing, transcribing and analysing your videos, rendering clips and letting you download and share them (legal basis: performance of our contract with you).
• To keep the Service secure and working: preventing abuse, investigating problems, and enforcing our Terms of Service (legal basis: our legitimate interests in running a safe, reliable service).
• To respond to you and to rights-holder or legal requests (legitimate interests, or legal obligation where it applies).

We do not sell your personal data, we do not use it for advertising, and we do not use your videos to train AI models.

3. AI processing of your videos

To create transcripts, captions, summaries, chapters, highlights and title or caption suggestions, the audio and text of your videos are processed by AI services provided by Google, acting as our subprocessor. They are used only to produce these results for you. Under Google’s terms for these paid services, your content is not used to train Google’s models; request data may be held by Google for a short period while it is processed. The results are stored with your video in your account.

4. Where your data is stored, and who processes it

• Google Cloud hosts the Service: the database, video storage, video processing and rendering, and the content delivery network that streams your videos. Your data is stored in Google Cloud data centres in the United States (region us-central1). A backup speech-to-text step may process a portion of a video’s audio in the European Union.
• Google also provides the AI services described above.
• Cloudflare provides DNS for our domain (it does not see the content of your requests).
• Apple delivers the iOS app; standard App Store and iOS processing is governed by Apple’s privacy policy.

International transfers. Because our providers store and process data outside the UK, your personal data is transferred to the United States and the EU. We rely on our providers’ data processing terms, which include the safeguards UK law requires for such transfers (such as the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, or the UK–US data bridge where it applies).

5. Sharing

• People you share with. If you share a campaign by link, other signed-in Clipwine users who open that link can see and clip the videos in it. You can stop sharing at any time.
• Platforms you send clips to. When you share a clip to another app, you send it there yourself, and that platform’s own terms and privacy policy apply from then on.
• Legal reasons. We may disclose data if the law requires it, or to protect rights, safety or the Service (for example in response to a valid copyright notice).

We share nothing else with third parties.

6. TikTok

The Clipwine iOS app can send a clip you have saved straight to the TikTok app using TikTok’s Share Kit. When you choose to share to TikTok:

• the clip is passed from your device’s photo library to the TikTok app on your device, where you finish posting it in TikTok;
• TikTok returns only the result of the share (for example shared, saved as a draft, or cancelled) to the Clipwine app on your device, so that the app can tell you what happened;
• we do not receive or store your TikTok login, password, access tokens, profile, followers, videos or any other TikTok account data, and nothing from TikTok is sent to our servers;
• this is used only to let you share your own clips to your own TikTok account. It is never sold or used for advertising.

You decide each time whether to share. To stop, simply don’t use the TikTok option; you can also remove Clipwine’s access in TikTok’s settings if it is listed there, and remove photo library access from Clipwine in iOS Settings. If we add other TikTok features in future (such as signing in with TikTok), we will update this policy before they go live and ask for your permission in the app.

7. Cookies and similar technologies

We use only cookies that are strictly necessary for the Service, so no cookie consent banner is needed:

• Session cookie (__Secure-better-auth.session_token): keeps you signed in. It lasts up to 7 days and is renewed while you use the Service. Secure and HttpOnly.
• Media access cookie (Cloud-CDN-Cookie): lets your browser stream a video you are allowed to watch. It is limited to that video and expires after 6 hours.
• Local storage: the web player remembers your “data saver” setting in your browser. The iOS app keeps your sign-in session and settings on your device.

8. How long we keep data

• Account data and your videos (uploads, imports and everything made from them): for as long as you keep them in your account, until you ask us to delete them, or until your account is deleted.
• Rendered clip files: up to 30 days after they are rendered (you can render a clip again at any time). Temporary processing files: up to 3 days.
• Server logs: 30 days.
• Database backups: rolling backups are kept for up to 7 days, so deleted data disappears from backups within about a week.
• We may keep limited records longer where the law requires it or to deal with a legal claim or a copyright notice.

9. Deleting your account and data

To delete your account, or particular videos, email admin@orcoappstudio.com from the address on your account (or tell us which account it is if you no longer have access to it). We will delete your account, your videos and everything derived from them within 30 days and confirm when it is done; copies in backups expire within about 7 days after that. Signing out does not delete anything.

10. Your rights

Under UK data protection law you have the right to:

• access the personal data we hold about you and get a copy of it;
• have inaccurate data corrected;
• have your data deleted;
• restrict or object to our processing, including processing based on our legitimate interests;
• data portability: receive data you gave us in a commonly used format; and
• withdraw consent where we rely on it, without affecting earlier processing.

To use any of these rights, email admin@orcoappstudio.com. We will reply within one month. If you are unhappy with how we handle your data, please tell us first; you also have the right to complain to the UK Information Commissioner’s Office (ico.org.uk, 0303 123 1113).

11. Security

Data is encrypted in transit (HTTPS) and at rest in Google Cloud. Videos are private by default: playback and downloads use short-lived signed links or cookies that work only for content you are allowed to see. Passwords are stored only as hashes. No system is perfectly secure, so please use a strong, unique password.

12. Children

Clipwine is not intended for children. You must be at least 13 years old to use the Service, and if you are under 18 you need the permission of a parent or guardian. We do not knowingly collect personal data from children under 13; if you believe a child has given us personal data, contact admin@orcoappstudio.com and we will delete it.

13. Changes to this policy

We may update this policy as the Service changes. We will post the new version here with a new effective date, and if the changes are significant we will tell you in the Service or by email before they apply.

14. Contact

Orco App Studio · admin@orcoappstudio.com

See also: Privacy Policy · Terms of Service