Privacy Policy

Last updated 27 October 2026

This policy explains how Cutbite Video Editing LLC (“Cutbite”, “we”, “us”) collects, uses and protects personal data when you use Cutbite at https://cutbite.ai and its studio. We do not sell your personal data, we show no advertising, and we do not train AI models on your content. Wherever you live, you have the rights described in section 9.

1. Who we are

Cutbite Video Editing LLC, a Florida limited liability company, at [To be filled in before launch: the company’s registered business address], is the controller of your personal data: we decide how and why it is used. Write to us about anything in this policy at hello@cutbite.ai.

Our representative in the European Union: [To be filled in before launch: the EU representative (GDPR Article 27 and Digital Services Act Article 13), once appointed]. Our representative in the United Kingdom: [To be filled in before launch: the UK representative (UK GDPR Article 27), once appointed].

2. What we collect

Your request to join: your name, email address, company or channel, and the note you write.
Your account: your email address, name, and, if you give them, your company and YouTube channel; your password, which our sign-in provider stores in a form we cannot read; and, if you turn it on, your two-step sign-in. Your workspaces, and the role you have in each.
Your content: the videos you upload and their sound; the example videos you give for themes; your pictures, clips, logos and music; the names, notes and directions you write; and what the service makes from them (transcripts, edits, captions, animations, b-roll, music, themes, styles and exports).
What the service works out from your videos: what is said and when, and where a person or a face is in the frame. We find where people are, never who they are (see section 5).
How you use the service: what you make and when, the Bites it counts, and security records of sign-ins, invitations and changes to accounts. A security record keeps the email address it concerns (including one typed at a failed sign-in) and a keyed one-way hash of the IP address, never the IP address itself.
Technical data: your IP address and your browser’s details, in the requests our host receives; the counters that stop abuse (an IP address, or a one-way hash of an email address, kept from about 20 minutes to two days); and the signals of the bot check on the sign-up, sign-in, invitation and password pages.

Your name and email address are needed for an account, and your content is needed to make your edits: without them we cannot provide the service. Your company, YouTube channel and note are up to you.

We do not take payments yet, so we hold no payment details. We do not use advertising or analytics cookies (see our Cookie Policy).

3. How we use it, and why we may

What we use it for	Our legal basis
To decide on your request to join.	Steps you asked us to take before a contract, and our legitimate interest in knowing who uses the service.
To run your account and workspace, and to make your edits: storing, transcribing, reading and changing your videos and other content, with the services that do it for us.	Performing our contract with you.
To keep the service and its accounts safe: sign-in checks, the bot check, rate limits and security records.	Our legitimate interest in protecting the service and the people who use it, and legal obligations where they apply.
To show an edit you share, with your first name and your YouTube channel, to everyone signed in.	Your consent, given when you turn sharing on. Turn it off to withdraw it.
To send the emails the service needs: invitations, password resets and “your password was changed”.	Performing our contract with you, and our legitimate interest in keeping your account secure.
To fix problems and improve how the service works, from records of what was made and how it went.	Our legitimate interest in a service that works well.
To follow the law, answer lawful requests, and enforce our terms.	Legal obligation, and our legitimate interest in protecting our rights and those of others.

Where we rely on our legitimate interests, you may object (section 9).

4. AI and your content

Cutbite uses AI services to make your edits: to write down what is said, to plan and write captions, cuts, animations and b-roll, to read your themes, to make pictures move, and to make music. To do so, they receive your video’s sound, its transcript, frames and pictures, and the words you give, as our AI and Data Processors page lists. Most of them run as part of making an edit, without a separate step from you: the searches for pictures and logos, the clips made from pictures, music when no track in the library fits, the cut-out that lets graphics sit behind you (at export, whenever a piece is placed behind you), and a web search that checks how names said in your video are spelled.

These are tools you direct, and you review what they make. No decision with legal or similarly significant effects is made about you by automated means alone. We do not train AI models on your content; what each AI service may do with what it receives is set by its terms with us.

5. People in your videos

Your videos may show or name other people. We process their images, voices and names only to make your edits for you. To place captions and graphics, to cut you out of the background, and to tell who is talking when two people share the frame, the service finds where each person and each face is, and whether a mouth is open. It keeps only those positions and outlines: nothing is compared or matched to work out who anyone is, and no face template is kept. You are responsible for having the permissions you need from the people in your videos. If you appear in a video on Cutbite and have a question about it, write to us at hello@cutbite.ai.

7. Where it is processed

We are based in the United States, and our service providers process data in the United States and other countries. When we transfer personal data from the European Economic Area, the United Kingdom or Switzerland, we rely on an adequacy decision (such as the EU–US Data Privacy Framework, where the recipient is certified to it) or on the European Commission’s Standard Contractual Clauses (with the United Kingdom’s addendum), with the safeguards they need. Ask us for a copy at hello@cutbite.ai.

8. How long we keep it

Data	Kept
Videos you upload	14 days after the upload. Their transcripts, stills and person maps (where each person and face is), and the edits, animations and captions made from them, stay in your workspace.
An upload that never finished	About 6 hours (longer for a very large file, in proportion to its size).
Exported videos	14 days after the export is made.
Example videos for themes	Deleted at the nightly clean-up once the theme has been read from them, or 14 days after a read that failed (a theme made before 21 October 2026 may keep its video until the theme is deleted). The stills, frames and short preview clip read from them stay with the theme.
Your outline (the cut-out of you that lets graphics sit behind you)	With the video it was made from, and no longer than 90 days unused.
Files removed to an edit’s bin	14 days.
Draft edits never taken up	About a day.
Pictures, clips, logos and music you keep, and your themes and styles	Until you delete them, or up to 30 days after your workspace is closed.
Your account	While it is open, and up to 30 days after it is closed, except what the law makes us keep.
Requests to join	While we decide, then as the record of what we decided, until you ask us to delete it.
Security records (sign-ins, invitations and changes to accounts)	[To be filled in before launch: how long security records are kept (a period to choose, such as 12 months, with a clean-up to match)]
Rate-limit counters	From about 20 minutes to two days.
Our host’s request and error logs	[To be filled in before launch: how long our host (Vercel) keeps request and error logs on our plan]
Backups	Until they are overwritten in their normal cycle.

Download what you want to keep before it is deleted.

9. Your rights

Wherever you live, you may ask us to:

tell you what personal data we hold about you, and give you a copy;
correct it;
delete it;
give it to you, or to another service, in a common machine-readable form;
stop or limit using it, including where we rely on our legitimate interests; and
withdraw a consent you gave, at any time (this does not undo what was done before).

You can change your name, company, YouTube channel and password in Settings, and delete your videos, edits and files in the studio. For everything else, including closing your account, changing your email address or a copy of your data, write to us at hello@cutbite.ai from the email address on your account. We may ask you to confirm it is you. We answer within 30 days, or tell you why we need longer, as the law allows. We will not treat you differently for using your rights.

If you live in the European Economic Area, the United Kingdom or Switzerland, you may also complain to your data protection authority (in the United Kingdom, the Information Commissioner’s Office). We would be glad to hear from you first.

10. United States: your state privacy rights

This section adds to the rest of this policy for residents of California and the other US states with privacy laws. In the last 12 months we have collected these categories of personal information:

Category	What it holds here
Identifiers	Your name, email address, account and workspace ids, and IP address.
Customer records	Your company and YouTube channel, if you give them, and your request to join.
Internet or other electronic network activity	Requests to the site, what you make in the studio, the Bites it counts, and security records.
Audio, electronic and visual information	Your videos, their sound and transcripts, and the pictures, music and other content you upload.
Sensitive personal information	Your account login (your email address and password), used only to sign you in.

We collect them from you, from the members of your workspace (who may upload videos you appear in), from our team (who approve requests to join and send invitations), and from the services that work for us (section 6). We use them for the purposes in section 3, keep them as section 8 says, and disclose them for business purposes only to our service providers, and to other users when you share. We use sensitive personal information only to provide the service, and not to infer anything about you.

We do not sell or share personal information (as California law defines those words), we do not use it for targeted advertising or for profiling that produces legal or similarly significant effects, and we have no actual knowledge of selling or sharing the personal information of anyone under 16. Because there is nothing to opt out of, a Global Privacy Control or Do Not Track signal changes nothing here; we treat one as your choice anyway.

You have the rights in section 9: to know and access, to correct, to delete, and to a copy, and you will not be treated differently for using them. An agent you authorise in writing may ask for you; we may ask you to confirm the request with us. If we decline a request, you may appeal by replying to our answer; we answer an appeal within the time your state’s law sets, and if you are not satisfied you may contact your state’s Attorney General.

11. Security

We protect your data with encrypted connections, a sign-in provider that never stores passwords in readable form, optional two-step sign-in, access limited to each workspace, and signed links to your files that expire. No service is perfectly secure; if a breach affects your personal data, we will tell you and the authorities as the law requires.