Privacy Policy

Angeles Crest Partners, Inc., a Delaware corporation ("we", "us", or "our"), is committed to respecting your privacy and protecting the security of data processed through our web-based software-as-a-service (SaaS) automated video processing platform accessible at www.ClipIt.me (the "Service").

This Privacy Policy explains how we collect, use, disclose, retain, and safeguard personal information and technical data when you visit www.ClipIt.me, utilize our guest or account-based video-clipping software, interact with shareable "View Video" links, or communicate with us.

1. Scope & Global Compliance

This Privacy Policy applies globally to all visitors, anonymous guest users, registered account holders, and third parties who view hosted media links via www.ClipIt.me. It is designed to comply with applicable privacy laws, including the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), US State Privacy Laws (including VA, CO, CT, UT, TX, DE), the European Union General Data Protection Regulation (EU GDPR), the UK GDPR, and the Children's Online Privacy Protection Act (COPPA).

2. Categories of Information We Collect

Depending on how you interact with the Service (as an anonymous guest or registered user), we may collect the following categories of data:

2.1 Information Voluntarily Provided by You

• Contact Identifiers: If you register an account, purchase a subscription, or contact support, we collect your first and last name, email address, mailing address, and phone number.
• Financial Transaction Data: If you purchase paid services, our third-party payment processor, Stripe, collects payment card numbers, billing addresses, and transaction histories. Angeles Crest Partners, Inc. does not store full credit card numbers on its servers.
• User Communications: Feedback, support tickets, or emails sent to support@clipit.me.

2.2 Automatically Collected Technical & Telemetry Data

• System Identifiers: Your Internet Protocol (IP) address, browser type and version, operating system, device language, domain names, referring web pages, and access timestamps.
• Usage & Session Analytics: Interactions within the SaaS application, feature clicks, clip generation metrics, rendering errors, and session duration captured via Google Analytics and PostHog.
• Cookies & Tracking Technologies: Session cookies, local storage objects, and functional tokens used to manage anonymous guest sessions, security verification, and platform performance.

2.3 Uploaded Video Media & Metadata (Ephemeral Data)

• Source Content & Audio: Video and audio files uploaded for automated clipping, transcoding, and processing.
• Media Metadata: File names, duration, frame rates, audio bitrates, and automated text transcripts generated during video processing.

3. Express Disclaimer on Biometric Data & Facial Recognition

ANGELES CREST PARTNERS, INC. DOES NOT INTENTIONALLY COLLECT, EXTRACT, STORE, OR PROCESS "BIOMETRIC IDENTIFIERS", "BIOMETRIC INFORMATION", "FACEPRINTS", OR "VOICEPRINTS" AS DEFINED UNDER ILLINOIS BIPA, CALIFORNIA CIPA, OR SIMILAR STATUTES.

While our automated algorithms analyze video frame sequences and audio waveforms solely to identify scene changes, visual action, and speech pauses for clipping purposes, our software DOES NOT scan facial geometry, identify individual human faces, or construct unique biometric profiles. To the extent automated processing touches upon human image or voice data, such processing occurs ephemerally on secure cloud infrastructure and is subject to automated 7-day deletion.

4. How We Use Your Information (Purposes of Processing)

We use the collected information for the following specific business and legal purposes:

• Executing SaaS Services: To transcode, process, clip, render, and host your requested video files;
• Facilitating Public "View Video" Links: Hosting generated video clips for playback via unique URLs;
• Payment Processing: Managing subscriptions, invoicing, and fraud prevention via Stripe;
• Platform Optimization: Analyzing system performance, crash logs, and feature adoption via PostHog and Google Analytics;
• Security & Legal Compliance: Detecting cyberattacks, enforcing our Terms of Service, preventing prohibited/illegal uploads (e.g., CSAM), and complying with valid subpoenas or legal process.

5. Legal Bases for Processing (EU/UK GDPR)

If you reside within the European Economic Area (EEA) or United Kingdom, our legal basis for collecting and processing your personal data depends on the specific context:

• Performance of a Contract: Processing necessary to deliver the SaaS services, guest sessions, or subscription plans requested by you under our Terms of Service;
• Legitimate Interests: Processing necessary for platform security, system diagnostics, product improvement, and fraud prevention, provided such interests are not overridden by your privacy rights;
• Legal Obligation: Processing required to comply with statutory law, tax requirements, or lawful law enforcement requests.

6. Data Sharing & Third-Party Processors

ANGELES CREST PARTNERS, INC. DOES NOT SELL, RENT, OR SHARE PERSONAL INFORMATION OR USER MEDIA ASSETS WITH THIRD PARTIES FOR MARKETING, PROMOTIONAL, OR TARGETED ADVERTISING PURPOSES.

We share data exclusively with trusted operational Service Providers bound by strict data protection agreements (DPAs) and confidentiality obligations:

• Amazon Web Services (AWS): Cloud infrastructure, media storage buckets, rendering engines, and databases.
• Stripe, Inc.: Secure payment card processing and subscription management.
• PostHog & Google Analytics: Application usage diagnostics, web traffic telemetry, and performance tracking.
• Law Enforcement & Legal Disclosures: We may disclose data without notice if required by law, court order, subpoena, or in good faith belief that disclosure is necessary to protect human safety, report child exploitation (NCMEC), or defend our legal rights.

7. Automated Source Video Expiration & Data Retention

7.1 Automated Source Video Expiration (7-Day TTL): Uploaded raw source videos ("Source Content") are subject to an automated Time-To-Live (TTL) purging script and are permanently and irrevocably deleted from AWS cloud infrastructure seven (7) calendar days (168 hours) following upload. Processed and rendered short clips ("Generated Clips"), temporary processing logs, and associated public "View Video" viewing links are maintained to support user session management and playback, subject to platform storage limits, account status, and our discretionary retention policies.

7.2 Account & Transaction Retention: Personal account identifiers (email addresses, contact records) and transaction records are retained for as long as your account or active session remains active, or up to seven (7) years as required under applicable state and federal tax, audit, and legal recordkeeping obligations following account closure.

8. International Data Transfers

Angeles Crest Partners, Inc. is a Delaware corporation operating with AWS cloud data centers located within the United States. If you access the Service from the EU, UK, Canada, or other global regions, you acknowledge and agree that your personal data and uploaded video files will be transferred to, stored, and processed in the United States. Transatlantic data transfers are safeguarded using Standard Contractual Clauses (SCCs) and robust encryption protocols.

9. Data Security Measures

Angeles Crest Partners, Inc. employs rigorous industry-standard technical and organizational security measures to protect your information from unauthorized access, loss, or disclosure:

• Encryption in Transit: All data transmitted between your browser and www.ClipIt.me is encrypted using Transport Layer Security (TLS 1.2/1.3 / SSL);
• Encryption at Rest: Media files and database records stored on AWS are encrypted at rest using AES-256 cryptographic standards;
• Access Controls: Strict IAM role-based access policies restricting infrastructure access to authorized engineering personnel only.

However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

10. Your Privacy Rights (CCPA/CPRA, US States, & GDPR)

Depending on your jurisdiction, you possess the following legal rights regarding your personal data:

• Right to Know / Access: The right to request a copy of the personal data we hold about you;
• Right to Erasure / Deletion: The right to request permanent deletion of your personal data;
• Right to Rectification: The right to correct inaccurate or incomplete account data;
• Right to Opt-Out of Sale/Sharing: We do not sell your data; therefore, no opt-out is necessary.

To exercise any of these privacy rights, please submit a written request to support@clipit.me. We will verify your identity before fulfilling the request within forty-five (45) days.

11. Children's Privacy (COPPA Statement)

The Service is designed and intended strictly for use by adults. We do not knowingly collect personal information from children under the age of thirteen (13). If we learn that a child under 13 has submitted personal data or uploaded media without verifiable parental consent, we will immediately purge such data from our servers. If you believe a child under 13 has provided data to us, please contact support@clipit.me.

12. Changes to This Privacy Policy

Angeles Crest Partners, Inc. reserves the right to modify this Privacy Policy at any time. We will notify users of material changes by updating the "Last Updated" date at the top of this Policy, displaying a banner on www.ClipIt.me, or sending an email notification to registered account holders. Your continued use of the Service after such updates constitutes your acceptance of the revised Privacy Policy.

13. Contact Information

If you have questions, comments, or formal privacy requests regarding this Privacy Policy, please contact us:

• Address:
• Angeles Crest Partners, Inc.
• Attn: Privacy Officer
• PO Box 289
• Tujunga, CA 91043, United States

• Email Address:
• support@clipit.me