Overview & Scope
This Privacy Policy ("Policy") describes how Vidcipe ("we", "our", "us") collects, uses, and shares personal information when you visit our website, create an account, or use our AI recipe extraction service.
This Policy applies to all users regardless of location. If you are located in the European Economic Area (EEA) or California, additional rights described below apply to you.
Data We Collect
We collect different types of information depending on how you interact with Vidcipe:
- Full name and email address
- Profile photo (if provided)
- Password (stored as a salted hash — never in plain text)
- Subscription tier and billing details (processed by Stripe)
- Video URLs you submit for extraction
- Recipes saved, edited, or exported
- Feature interactions and click events
- Error logs and performance metrics
- IP address and approximate location
- Browser type, version, and OS
- Referring pages and session duration
- Cookies and local storage identifiers
How We Use Your Data
We use the information we collect for the following purposes — each one linked to a clear legal basis under applicable privacy law:
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Provide & maintain the Service | Account, Usage | Contract |
| Process payments & manage subscriptions | Billing (via Stripe) | Contract |
| Send transactional emails (receipts, alerts) | Email address | Contract |
| Product improvement & analytics | Usage, Device | Legitimate Interest |
| Marketing emails & newsletters | Email address | |
| Fraud prevention & security | Device, IP | Legitimate Interest |
| Legal compliance & obligations | All relevant data | Legal Obligation |
Data Retention
We retain your data for as long as necessary to provide the Service and comply with legal obligations. Specific retention periods are:
- Account data: Retained while your account is active and for 30 days after deletion to allow recovery
- Recipe library: Deleted immediately upon account deletion request
- Billing records: Retained for 7 years to comply with financial regulations
- Usage logs: Aggregated and anonymised after 12 months
- Support communications: Retained for 3 years
Your Rights
Depending on your location, you have the following rights regarding your personal data:
Request a copy of all personal data we hold about you
Update or correct inaccurate personal information
Request erasure of your data (right to be forgotten)
Export your data in a structured, machine-readable format
Object to processing based on legitimate interest or for marketing
Request that we limit how we process your data in certain circumstances
To exercise any of these rights, contact us at privacy@vidcipe.com. We will respond within 30 days (or 72 hours for urgent security matters).
Security
We implement industry-standard technical and organisational measures to protect your personal data, including:
- TLS 1.3 encryption for all data in transit
- AES-256 encryption for sensitive data at rest
- Passwords stored as bcrypt hashes with unique salts
- Regular security audits and penetration testing
- Role-based access controls limiting internal data access
Despite our best efforts, no system is completely secure. In the event of a data breach that affects your rights, we will notify you within 72 hours as required by applicable law.
Children's Privacy
Vidcipe is not directed to children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal data, we will take steps to delete it promptly.
If you believe a child has submitted data to us, please contact us immediately at privacy@vidcipe.com.
International Transfers
Vidcipe operates globally and your data may be transferred to and processed in countries other than your own. When we transfer data outside the EEA or UK, we ensure adequate protections are in place through:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Adequacy decisions where applicable
- Other legally approved transfer mechanisms
Contact & DPO
For privacy-related questions, requests, or to exercise your rights, contact us:
You also have the right to lodge a complaint with your local data protection authority if you believe we have violated your privacy rights.