PRIVACY POLICY
Last updated: September 1, 2026
1. Introduction
ChatClip is operated by Threadline Studio, Inc. ("we," "us," or "our"). This Privacy Policy explains how we collect, use, share, and protect your personal data when you use ChatClip, including the web application at chatclip.io, the chatclip.io marketing website, and related support and billing interactions (collectively, the "Service").
This policy applies to all users of the Service, regardless of location. If you are located in the European Economic Area, United Kingdom, or another jurisdiction with specific data protection requirements, additional provisions are noted throughout.
Contact: support@threadlinestudio.io
Address: Threadline Studio, Inc., 2021 Fillmore St PMB2396, San Francisco, CA 94115
2. What Data We Collect
Account Data
When you register, we collect your name, email address, profile details, sign-in identifiers, and authentication data supplied through Clerk. The Service supports Google Sign-In and other identity providers through Clerk. Billing information is processed by Stripe; we store subscription and transaction status and billing identifiers, not payment card details. We also collect information you provide when contacting support.
Customer Content
When you use the Service, you upload video and audio. ChatClip generates transcripts, timing data, speaker labels, proxy files, clips, captions, graphics, exports, and related metadata (such as file name, size, duration, and technical probe data) from that content. We also store the prompts and chat instructions you provide within a project and the edit history of each clip.
Customer Content includes all data that you upload, create, or cause to be generated within a project, as defined in our Terms of Service.
Voice and Speaker Data
The Service analyzes audio to identify speaker turns and the dominant speaker within a video. This produces speaker labels, timing, and confidence data used to build clips.
If you opt in to voice print, we additionally collect voice samples of your own voice from video you upload, create a voice model from those samples, and store the voice model identifier, your consent record, feature settings, and the speech generated from the model. A voice recording, voice model, or voice-derived representation can be personal information and may be sensitive or biometric information under some laws. Section 4 describes how we handle it.
Service Data
We collect data generated through your use of the Service that is not part of a specific project's Customer Content, including:
- Usage analytics and interaction data: Features used, session behavior, navigation patterns, and AI actions taken.
- Chat prompts and responses: Records of the instructions you give and the responses generated, as a record of feature use.
- Structural edit metadata: Data about editing decisions, such as cut timings, pacing, and selection patterns.
- Operational logs: Processing logs, error data, job metadata, model identifiers, token counts, and performance metrics.
- Billing and allowance data: Records of plan status, top-up purchases, earned projects, and projects and exports consumed.
Technical Data
We automatically collect your IP address, browser type, device information, operating system, and cookie or similar identifiers when you access the Service.
Marketing Website Data
When you visit chatclip.io, we collect visitor interaction data through the analytics and advertising technologies described in Section 10, subject to your cookie consent where required by applicable law.
3. How We Use Your Data
We use your data for the following purposes:
- To provide the Service: Storing, transcribing, analyzing, cutting, rendering, and exporting your content; responding to chat instructions; generating captions, graphics, and titles; and, where you have opted in, creating and operating your voice model.
- To maintain your account: Authentication, billing, allowance management, and communication about your account.
- To improve and develop the Service: Analyzing usage patterns and Service Data, and using Customer Content and data derived from it to develop, train, fine-tune, evaluate, and improve ChatClip and the models and systems that power it, as described in the license in our Terms of Service. Voice samples and voice models are excluded from this use.
- To promote the Service: Displaying clips you export on ChatClip's websites, social media accounts, advertising, and marketing materials, as described in our Terms of Service.
- To provide support and ensure security: Accessing project data to resolve reported issues, investigating suspected violations of our Terms, detecting abuse and errors, and responding to voice misuse reports.
- To comply with law: Meeting legal obligations, including tax and financial reporting requirements.
- To communicate with you: Sending service notifications, updates, and, with your consent, marketing communications.
- To measure marketing: Understanding how visitors reach and use chatclip.io and measuring advertising effectiveness, subject to consent where required.
Retention of derived data: Data derived from Customer Content for service improvement and model development may be retained after the underlying project or account is deleted.
Backup retention: Following deletion of your data, residual copies may persist in secure backups for a limited period before being automatically overwritten. Backup data is not actively processed or accessible.
Vendor-side retention: Data processed by our third-party service providers may be retained in those providers' systems subject to their respective retention policies.
4. Voice Print and Voice Models
Voice print is optional. We do not create a voice model unless you enable the feature and give affirmative consent at the point of enrollment. We do not treat a general upload permission or acceptance of our Terms of Service as consent to create a voice model.
What we collect: Voice samples of the dominant speaker from video you upload; the resulting voice model and its identifier; your consent record (user identifier, timestamp, consent version, and the upload it was tied to); feature settings; and generated speech.
Who processes it: ElevenLabs creates the voice model and generates speech on our behalf. We store the voice model identifier and consent record.
Purpose: Generating short spoken bridges and framing lines within your own projects. Nothing else.
What we never do: We do not use your voice samples, voice model, or any voice-derived representation to train, fine-tune, or improve AI models. We do not use your voice model to generate speech for any other account or purpose. We do not sell, license, or disclose your voice model to anyone other than our voice provider for the purpose above.
Owner only: You may enroll only your own voice. We rely on your representation that you are the speaker.
Retention and deletion: Your voice model is retained until the earliest of: your deletion request through account settings or support@threadlinestudio.io; closure of your account; or three years after you last used voice print. On deletion, we remove the voice model from our systems and request deletion from our voice provider. Deletion is typically completed within 30 days. Your consent record is retained for three years after deletion as a compliance record.
Your controls: You can view the status of your voice model, see when it was created, review the consent text, and delete the model at any time in account settings.
Reporting misuse: If you believe a voice model or clip on the Service uses your voice without your consent, email support@threadlinestudio.io with the subject line "Voice misuse report." Our response process is described in our Terms of Service.
Legal basis (EEA and UK): Explicit consent, which you may withdraw at any time by deleting your voice model. Withdrawal does not affect the lawfulness of processing before withdrawal.
5. Legal Basis for Processing (EEA and UK Users)
If you are located in the European Economic Area or United Kingdom, we process your data on the following legal bases:
- Contractual necessity: Account data, content processing, allowance management, and export delivery are necessary to perform the contract between you and Threadline Studio, Inc.
- Legitimate interest: Analyzing usage patterns, retaining Service Data, using Customer Content to develop and improve the Service, promoting the Service using exported clips, maintaining security, and preventing abuse are pursued as legitimate interests of Threadline Studio, Inc. We have assessed that these interests are not overridden by your rights. You may object to processing based on legitimate interest as described in Section 9.
- Consent: Voice print, marketing communications, and non-essential cookies are processed based on your consent, which you may withdraw at any time.
- Legal obligation: Retaining billing and financial records as required by law.
6. Data Sharing
Third-Party Service Providers
We use third-party service providers to help deliver the Service. These providers process data on our behalf and are contractually required to protect your data. A current list of our sub-processors, including provider names, purposes, processing locations, and links to their privacy policies, is maintained at:
We will update the sub-processor list when providers change and notify registered users of material changes by email or through the Service.
Third-Party AI Providers
AI features are delivered through third-party providers. Customer Content or excerpts (including transcript text, video frames, prompts, and project metadata) may be sent to these providers to perform transcription, visual analysis, content analysis, embeddings, and generation. Voice samples are sent to our voice provider only where you have enabled voice print. We aim to send only the portion of content necessary for each feature. Processing by these providers is subject to their respective terms and privacy policies. The current list of providers is on the sub-processor page.
We Do Not
- Sell your personal data to third parties
- Share your uploaded content with third parties except as needed to provide, improve, and promote the Service as described in this policy and our Terms of Service
- Allow third-party advertising within the ChatClip application. Advertising tracking technologies are used on our marketing website, chatclip.io, subject to cookie consent; no advertising tracking occurs within the authenticated application.
Legal Requirements
We may disclose your data if required by law, legal process, or governmental request, or to protect the rights, safety, or property of Threadline Studio, Inc., our users, or the public.
Business Transfers
In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. We will notify you of any such transfer and any resulting changes to this Privacy Policy.
7. International Data Transfers
Threadline Studio, Inc. is based in the United States. If you are located outside the United States, your data will be transferred to and processed in the United States.
For users in the European Economic Area and United Kingdom, we rely on appropriate transfer mechanisms as provided by our sub-processors, including Standard Contractual Clauses where applicable. You may request information about the specific transfer mechanisms used by contacting support@threadlinestudio.io.
By using the Service, you acknowledge that your data will be transferred to the United States using the mechanisms described above.
8. Data Controller and Data Processor Roles
Threadline Studio, Inc. acts as the data controller for:
- Account data and billing information
- Service Data
- Voice consent records
- Marketing website data
- Customer Content and derived data used to develop, improve, and promote the Service
- Voice models, to the extent we determine the purposes and means of their processing
Threadline Studio, Inc. acts as a data processor for Customer Content to the extent we process it on your instructions to deliver the Service to you.
If you upload content that contains personal data of other people, you are responsible for ensuring that you have obtained appropriate consent or have another legal basis for providing that data to us for processing.
9. Your Rights
Depending on your location, you may have the following rights regarding your personal data:
- Access: Request a copy of the personal data we hold about you.
- Rectification: Request correction of inaccurate personal data.
- Erasure: Request deletion of your personal data, subject to legal retention requirements and the retention of derived data described in Section 3.
- Data portability: Request a copy of your data in a portable format.
- Restrict processing: Request that we limit how we use your data.
- Object to processing: Object to processing based on legitimate interests.
- Withdraw consent: Where processing is based on consent, withdraw that consent at any time.
We will not discriminate against you for exercising a privacy right.
For California Residents (CCPA/CPRA)
You have the right to know what personal information we collect, the right to delete your personal information, the right to correct inaccurate personal information, the right to limit the use of sensitive personal information, and the right to non-discrimination for exercising your rights. We do not sell personal information. We share personal information with advertising partners (Meta) for cross-context behavioral advertising through tracking technologies on our marketing website only. No advertising tracking occurs within the authenticated application.
Categories of personal information collected in the preceding 12 months:
| CCPA Category | Examples from ChatClip | Sold? | Shared? |
|---|---|---|---|
| Identifiers | Name, email address, account ID, IP address | No | Yes (Meta Pixel on marketing site only) |
| Commercial Information | Plan status, top-up purchases, billing records | No | No |
| Internet or Electronic Network Activity | Feature usage, session behavior, navigation patterns, error logs | No | No |
| Audio, Electronic, Visual, or Similar Information | Uploaded media, transcripts, clips, generated speech | No | No |
| Sensitive Personal Information (biometric) | Voice samples and voice models, only where you opt in to voice print | No | No |
| Inferences | Content analysis, speaker detection, usage patterns | No | No |
"Shared" means disclosed for cross-context behavioral advertising under the CPRA. Sharing occurs only on our marketing website through Meta Pixel, subject to cookie consent.
To opt out of sharing, use the "Do Not Sell or Share My Personal Information" link on chatclip.io or contact support@threadlinestudio.io. To limit use of sensitive personal information, delete your voice model in account settings; we use voice data only for the purpose described in Section 4.
Exercising Your Rights
To exercise any of these rights, contact us at support@threadlinestudio.io. We will respond within the timeframe required by applicable law (30 days under GDPR and UK GDPR, 45 days under the CCPA). We may need to verify your identity before responding.
10. Cookies and Browser Storage
Cookies are small text files stored on your device when you visit a website. Browser storage (such as localStorage) serves similar purposes. We and our providers use these technologies for sign-in, security, preferences, analytics, and, on the marketing website, advertising measurement.
Strictly Necessary
These are essential for the Service to function and do not require consent.
| Category | Provider | Purpose |
|---|---|---|
| Authentication | Clerk | Session management, authentication tokens, and login state |
| Security | Cloudflare | Bot detection and security management (__cf_bm) |
Functional
These store your preferences and support upload recovery. They do not track you across sites.
| Category | Purpose |
|---|---|
| UI preferences | Interface settings stored in localStorage |
| Upload recovery | Browser storage used to recover interrupted file uploads |
Analytics
Within the authenticated application, product analytics are processed under our legitimate interest in improving the Service; you may opt out by contacting support@threadlinestudio.io. On the marketing website, analytics cookies are subject to consent where required by applicable law.
| Category | Provider | Purpose |
|---|---|---|
| Product analytics | PostHog | Feature usage, navigation patterns, error capture, and session recording with text and input masking. PostHog uses cookies and localStorage and receives user identifiers, email, and display name for authenticated users. |
| Web analytics | Google Analytics (Google LLC) | Visitor interaction analysis on chatclip.io (_ga, _ga_* cookies, up to 2 years). Subject to cookie consent. Not active until consent is provided where required by applicable law. |
Advertising
Used on the marketing website only to measure advertising effectiveness. Subject to consent where required by applicable law. Not active until consent is provided where required. No advertising tracking occurs within the authenticated application.
| Category | Provider | Purpose |
|---|---|---|
| Conversion tracking | Meta Pixel (Meta Platforms, Inc.) | Tracks conversions from ads on Facebook and Instagram on chatclip.io (_fbp, _fbc cookies, up to 90 days). |
Managing Your Preferences
You can manage cookies through your browser settings. Blocking strictly necessary cookies may prevent sign-in or core features from working.
To opt out of product analytics within the authenticated application, contact support@threadlinestudio.io.
For more information about how Google and Meta use your data, and to opt out:
- Google Analytics: Opt Out
- Meta: Ad Preferences
- Network Advertising Initiative: Opt Out
- Digital Advertising Alliance: Opt Out
When new non-essential cookies are introduced on the marketing website, consent will be requested before they are activated where required by applicable law.
11. Data Security
We implement appropriate technical and organizational measures to protect your data, including:
- Encryption of data in transit
- Data at rest protected according to our infrastructure providers' security standards
- Private media storage with time-limited, signed upload and download credentials
- Access controls limiting who can access user data
- Webhook signature verification for authentication, payment, and processing callbacks
- Session recording configured with text and input field masking
- Environment secrets managed through a dedicated secrets service
- Regular security assessments
No method of transmission or storage is completely secure. In the event of a data breach that affects your personal data, we will notify you and the relevant supervisory authority as required by applicable law. Under GDPR, notification to the supervisory authority will occur within 72 hours of becoming aware of a qualifying breach.
12. Data Retention
- Customer Content: Retained while the associated project exists. When you delete a project, its content is scheduled for deletion from active systems within 14 days. All remaining Customer Content is scheduled for deletion within 30 days of account closure. Data derived from Customer Content for service improvement may be retained after deletion.
- Voice models and samples: As described in Section 4.
- Voice consent records: Three years after the associated voice model is deleted.
- Service Data: Retained for as long as necessary for the stated purposes and periodically reviewed for continued relevance.
- Account data: Deleted within 30 days of account closure, except where retention is required by law.
- Billing records: Retained as required by law.
- Processing artifacts: Purged automatically upon processing completion.
13. Children's Privacy
The Service is intended for users aged 18 and older. We do not knowingly collect personal data from individuals under 18. If we become aware that we have collected data from a person under 18, we will delete that data promptly.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or through the Service at least seven days before they take effect, or longer where required by applicable law, except in situations requiring immediate updates for security, legal compliance, or the prevention of abuse. Your continued use of the Service after the effective date constitutes acceptance of the updated policy.
15. Contact Us
If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at:
Email: support@threadlinestudio.io
Address: Threadline Studio, Inc., 2021 Fillmore St PMB2396, San Francisco, CA 94115
For users in the European Economic Area or United Kingdom, you also have the right to lodge a complaint with your local data protection supervisory authority.