This policy explains what Gafat Clips stores about you, why, who processes it for us, and how to have it deleted.
1.What we store
- Your account: your email address, your name if you give one, and your password as a one-way hash (argon2id), never the password itself. If you sign in with Google, we store your Google account ID and the email Google confirms.
- Your projects: the YouTube links you paste, the video's title, channel and length as YouTube reports them, the transcript, and the clips and their preview images.
- Your payments: the package, the amount, Telebirr or CBE, the receipt number or link you enter, and the answer of the service that checks the receipt.
- Your minutes: a ledger of the minutes added to and used from your account.
2.Why we store it
To run the service you signed up for: to sign you in, make your clips, check your payments and keep your balance, and to send the emails that go with them (verifying your address, resetting your password, telling you that clips are ready or that a payment went through).
Your IP address is used to slow down repeated attempts to sign in or pay. It is held in memory for a few minutes and not saved with your account.
We do not sell your data, show ads, or use your videos for anything but your clips.
3.Who processes it for us
- Google (Gemini API and YouTube Data API): the YouTube link and the audio of each clip are sent to Gemini to transcribe the video, choose moments and frame the speaker; the YouTube Data API tells us whether a video is public and how long it is.
- Google Sign-In: only if you choose to sign in with Google.
- Resend: delivers our emails, so it receives your email address and the message.
- PayVerify: checks Telebirr and CBE receipts, so it receives the receipt reference and the amount we expect.
- Our hosting provider: runs the servers that store the data above.
5.How long we keep it
- Clips and their preview images: 30 days from when they are made, or until you delete the project.
- Projects and your minutes ledger: until you delete the project or your account.
- Sign-in sessions: 30 days. Email links: 24 hours to verify an address, 1 hour to reset a password.
- Payment records: as long as accounting law requires, even after you delete your account.
6.Deleting your account
You can delete your account in the app's settings. We then remove your name, your password and your Google link, replace your email address, end your sessions, and delete your projects and clips. Payment records stay, as above. After your account is deleted we keep a one-way fingerprint of its email address, from which the address cannot be read back, only so that the free minutes are given once.
7.Security
The site is served over HTTPS. Passwords and sign-in tokens are stored only as hashes, and other accounts can never open your projects, clips or payments.
8.Children
Gafat Clips is not meant for children under 13, and we do not knowingly keep their data.
9.Changes and contact
If this policy changes in a way that matters, we will tell you by email or in the app. To ask what we hold about you, or to have it corrected or deleted, write to us at the address our account emails come from.