Privacy Policy

1. Information We Collect

• Account information — name, email address, and authentication details.
• Content you upload or link — videos, audio, images, and any URLs (e.g. YouTube/social links) you provide for processing, plus the transcripts, captions, clips, and thumbnails we generate from them.
• Voice content — when you use AI voice-over / dubbing, the text and audio sent to our voice provider.
• Payment information — handled directly by Stripe; we store only your subscription status, plan, and credit balance, never full card numbers.
• Whop campaign data (optional) — if you connect a Whop account: your Whop user ID, username, and email as returned by Whop; OAuth access and refresh tokens (stored encrypted at rest); the campaigns visible to your account and your activity on them within Skryber; the published post URLs and optional notes you record as campaign evidence; and records of submissions you assemble and send through Skryber (the links, caption, timestamps of your review and confirmation, and Whop's response). We collect this only when you connect Whop, and only under the permissions shown on Whop's consent screen. Each submission you send is transmitted only after your explicit confirmation, which we log.
• Usage & device data — feature usage, log data, IP address, approximate location (city/region/country derived from your IP), and (with your consent) analytics. We retain your most recent IP and approximate location for account security and administration.

2. How We Use Your Information

• To provide and operate the Service — transcribe, analyze, edit, render, and deliver your videos and clips.
• To process payments, manage your subscription, and enforce usage/credit limits.
• To send you service and support messages.
• To secure the Service, prevent abuse, and apply rate limits.
• To show you campaigns from your own Whop feed, assemble the submissions you review, transmit them to Whop only after your explicit confirmation, and keep an auditable record of what was sent and when.
• To improve the Service (analytics, only where you have consented).

2b. Our Legal Bases for Processing (EEA / UK)

If you are in the European Economic Area or the United Kingdom, we process your personal data only where a lawful basis under Article 6 of the GDPR applies:

• Performance of a contract — to create and run your account and to deliver the features you ask for: uploading and storing your videos, transcription, clip generation, Video Cleanup, exports, scheduling and publishing.
• Legitimate interests — to keep the Service secure and available, prevent fraud and abuse, enforce usage limits, meter consumption for billing accuracy, debug failures, and improve reliability. We balance these against your rights, and you may object at any time (see §8).
• Consent — for optional analytics and marketing cookies, and for optional integrations you connect (such as social accounts, Google Drive or Whop). You can withdraw consent at any time without affecting the lawfulness of processing already carried out.
• Legal obligation — to keep tax, accounting and payment records, and to respond to lawful requests.

We do not use your videos, audio or transcripts to train our own models, and our AI providers are contractually restricted to processing your content only to deliver the feature you requested.

3. Service Providers We Share Data With

We do not sell your personal information. To run the Service we share the minimum necessary data with the processors below, each under their own privacy terms. Your video and transcript content is sent to AI providers only to perform the feature you requested.

• Supabase — database, file storage, and authentication.
• Vercel — application hosting and serverless processing.
• Railway / Upstash — background video processing and rate-limiting.
• Deepgram — speech-to-text transcription of your audio/video.
• OpenAI and Anthropic — AI analysis of transcripts to select viral moments and generate titles/captions.
• ElevenLabs — AI voice-over and dubbing generation.
• Replicate — AI thumbnail / image generation.
• UnmarkAI — removal of captions and on-screen text when you use Video Cleanup. Source videos are held by UnmarkAI for up to 1 day and results for up to 7 days; they do not use your content to train their models.
• Stripe — payment processing.
• Resend — transactional and support email.
• Google — Analytics (consent-based, see §6) and the Google Drive picker if you import from Drive.
• Pexels and Freesound — stock video/audio you choose to add.
• Whop — third-party campaign marketplace (optional connection). When you connect Whop or submit to a campaign, your submission content (post URLs and caption) and identity are shared with Whop under Whop's own privacy policy. Skryber never shares your videos or transcripts with Whop.

We may also disclose information when required by law, to protect our rights or users, or in connection with a merger, acquisition, or sale of assets.

4. Links You Provide & Server-Side Processing

When you paste a video URL (e.g. a YouTube or social link), our servers fetch and download that media to process it. We only fetch public web addresses you supply for this purpose.

5. Data Retention & Deletion

We retain your account and content for as long as your account is active or as needed to provide the Service. You can delete individual videos, transcripts, and clips at any time from the app, and you can request deletion of your entire account and associated data by contacting us (see §10). We may retain limited records where required for legal, tax, or fraud-prevention purposes. Disconnecting Whop deletes our stored Whop tokens. Submission records and recorded evidence URLs are retained as part of your account history — because submissions are irreversible on Whop's side, we keep the record of exactly what you authorized and sent — and are deleted with your account. Deleting your Skryber account does not delete submissions already held by Whop; contact Whop for those.

6. Cookies & Analytics

We use essential cookies that are required to sign you in and run the Service. We also use Google Analytics to understand usage and improve Skryber — but only after you accept it in the cookie banner. If you decline, no analytics cookie is set. You can change your choice at any time by clearing your browser's site data for Skryber.

7. Clipperverse Feed Activity

Clipperverse is Skryber's community feed. When you scroll it, we record which posts appeared on your screen, whether you watched a video past two seconds, whether it played to the end, and how long each post was visible. We use this to count views for the creator who posted, and to decide what to show you.

What we do not record: we do not log what you type, what you hover over, how long you spend reading someone's profile, or anything you do outside Clipperverse. We do not sell this data, and we do not share it with advertisers.

Other members never see your activity. A creator sees how many people viewed their post — never who, and never how long any individual watched.

You can ask us to delete your feed activity at any time using the contact details below, and deleting your account removes it along with everything else.

8. Your Rights (GDPR & CCPA)

Depending on where you live, you have the right to:

• Access the personal information we hold about you and request a copy.
• Correct or update inaccurate information.
• Delete your account and personal data.
• Object to or restrict certain processing, and withdraw consent (e.g. analytics) at any time. Withdrawing consent does not affect processing already carried out.
• Receive the personal data you gave us in a structured, commonly used, machine-readable format, and ask us to transmit it to another provider where technically feasible (data portability).
• Not be sold your personal information — we do not sell it, and we do not use it for automated decisions producing legal or similarly significant effects about you.
• Lodge a complaint with your local data protection supervisory authority. In the EEA this is the authority for your country of residence; in the UK it is the Information Commissioner's Office (ICO).

To exercise any of these rights, contact us at the address in §10. We respond within one month, as required by the GDPR, and will tell you if we need longer for a complex request. We do not charge for these requests or make you give a reason.

9. Data Security & International Transfers

We apply appropriate technical and organizational measures — including database row-level security, encryption in transit, and access controls — to protect your information. No method of transmission or storage is 100% secure.

Skryber operates from the United States, and the providers listed in §3 may process data in the United States and other countries outside the EEA and the UK. Where we transfer personal data out of the EEA or the UK, we rely on the European Commission's Standard Contractual Clauses (and the UK Addendum where applicable), or on an adequacy decision where one covers the destination country. You may request a copy of the safeguards that apply to a specific transfer by contacting us at the address in §10.

10. Children's Privacy

Skryber is not intended for children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will delete it.

11. Contact Us

For privacy questions or to exercise your rights, contact:

12. Changes to This Policy

We may update this policy from time to time. We will post the new version here and update the "Last updated" date; material changes may also be notified by email or in the app.