Privacy Policy

Last updated: July 2026

This Privacy Policy describes how Klipto (operated by Sabai Wave LLC) collects, uses, and protects your information when you use our service. By using Klipto, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

Account information: Email address and name provided during sign-up. Our authentication provider also collects IP address, device type, and browser information as part of the sign-in process.

Channel configurations: Voice IDs, YouTube channel preferences, and content style settings you configure in Klipto.

Pipeline run data: Topics you submit, research results, generated scripts, voice MP3 files, and YouTube video metadata produced during pipeline runs.

YouTube OAuth tokens: When you connect a YouTube channel, we store your OAuth access and refresh tokens encrypted in our database. These are used solely to publish videos on your behalf and are never exposed client-side.

Payment information: Payment is processed by Stripe. We do not store card numbers or full payment details. Stripe may collect billing name and payment method metadata per their privacy policy.

Usage data: Pipeline run counts, ElevenLabs character quota usage, and subscription status to enforce plan limits.

Error and performance data: When errors occur, diagnostic information (stack traces, request context, browser version) is collected for debugging via our error monitoring and logging services.

2. What We Do Not Collect

We do not collect passport numbers, date of birth, physical address, or any government-issued identification numbers. We do not store payment card numbers — those are handled entirely by Stripe. We do not sell your personal information to third parties.

3. How We Use Your Information

We use the information we collect to:

• Run your content pipeline (research, script generation, voice synthesis, YouTube publishing)
• Manage your subscription and enforce plan quota limits
• Send transactional emails (welcome, billing receipts, account-related notices)
• Improve the reliability and performance of the service
• Comply with legal obligations

4. Third-Party Service Providers

We share data only with service providers necessary to operate Klipto. These providers process data under their own privacy policies and are not permitted to use your data for other purposes.

AI processing provider — topic and research content are sent to generate scripts
Web research provider — topic is sent to gather structured sources from the web
Voice synthesis provider — script text is sent to generate MP3 narration
Google / YouTube — Klipto uses YouTube API Services to publish videos to your channel using your OAuth credentials. Your use of YouTube features is also subject to Google's Privacy Policy.
Authentication provider — manages sign-up, login, and session security (email, name, device info, IP address)
Stripe — payment processing (billing info and subscription management)
Database and storage provider — stores all account, config, and run data
Error monitoring service — collects anonymized error context and stack traces for debugging
Server logging service — collects operational logs and request metadata
Email delivery service — sends transactional emails on our behalf

5. Data Retention

We retain your account information and channel configurations for as long as your account is active. Pipeline run data (scripts, research, MP3 references) is retained indefinitely to allow you to review past runs. Generated MP3 files stored in Supabase Storage are retained for 90 days by default. YouTube OAuth tokens are retained until you disconnect your channel or delete your account. You may request deletion of your data at any time by contacting us.

6. Your Rights (GDPR / EEA Users)

If you are located in the EU or EEA, you have the following rights under the GDPR:

Access — request a copy of the personal data we hold about you
Rectification — request correction of inaccurate data
Erasure — request deletion of your account and associated data
Portability — request your data in a machine-readable format
Restriction — request that we limit processing of your data
Object — object to processing based on legitimate interests

To exercise any of these rights, contact us via our contact form. We will respond within 30 days.

7. California Privacy Rights (CCPA)

If you are a California resident, you have the right to know what personal information is collected about you, request deletion of your personal information, and opt out of the sale of your personal information. We do not sell your personal information. To exercise your rights, contact us via our contact form.

8. Cookies

We use session cookies required for authentication (Clerk). We do not use advertising cookies or third-party tracking cookies.

9. Security

All data is encrypted in transit. YouTube OAuth tokens are encrypted at rest. Access to stored data is restricted via Row Level Security policies on our database. We do not expose user data to the client beyond what is necessary to render your account.

10. Changes to This Policy

We will notify registered users of material changes to this policy via email. Continued use of the service after changes constitutes acceptance of the revised policy. The “Last updated” date at the top of this page reflects when the policy was last revised.

11. Contact

Privacy questions? Contact us via our contact form or email privacy@klipto.ai.