Privacy Policy

Last updated: 21 June 2026

This Privacy Policy explains how AvaClip (“AvaClip”, “we”, “us”), operated by AVACLIP, PIKK 47, collects, uses, and protects your personal data when you use avaclip.shop and related services (the “Service”). We act as the data controller for this processing. If you have questions, contact us at hello@avaclip.shop.

1. Data we collect

• Account & identity: your email address, and the one-time codes used to verify it.
• Content you provide: the scripts you type, and any photos or videos you upload to generate or translate videos.
• Generated output: the videos created for you and related metadata (e.g. status, language).
• Billing: if you subscribe, your payment is processed by Stripe. We receive your subscription status and email, but we do not store your full card details.
• Technical & usage data: limited information such as IP address (used for rate-limiting and abuse prevention) and basic credit/usage records.
• Local storage: we store a session token and your email in your browser to keep you signed in (see our Cookie Policy).

2. How we use your data & legal bases

• To provide the Service and generate your videos — performance of a contract.
• To verify your email, prevent fraud and free-trial abuse, and secure the Service — our legitimate interests.
• To process subscriptions and payments — performance of a contract.
• To send you service-related emails (such as verification codes) — contract / legitimate interests.
• To comply with legal obligations where applicable — legal obligation.

3. Service providers we share data with

We use trusted third parties to operate the Service. They process your data only on our instructions:

• HeyGen — generates and translates your videos (receives your scripts, uploaded media, and generated output).
• Stripe — payment processing.
• Resend — sending verification emails.
• Upstash — storage of credits and account identifiers.
• Vercel — hosting and file storage.

Some of these providers may process data outside the European Economic Area (for example, in the United States). Where that happens, we rely on appropriate safeguards such as the EU Standard Contractual Clauses. We do not sell your personal data.

4. Retention

We keep your account data and content for as long as your account is active and as needed to provide the Service, then delete or anonymise it within a reasonable period, unless we are required to retain it (for example, for tax or legal reasons). You can request deletion at any time.

5. Your rights (GDPR)

If you are in the EEA/UK, you have the right to access, correct, delete, restrict, or object to the processing of your personal data, and the right to data portability. Where processing is based on consent, you may withdraw it at any time. To exercise any of these, email hello@avaclip.shop. You also have the right to lodge a complaint with your data protection authority (in Estonia, the Data Protection Inspectorate / Andmekaitse Inspektsioon).

6. Security

We use reasonable technical and organisational measures to protect your data, including signed session tokens and encrypted transport. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Children

The Service is not intended for anyone under 16 (or the age of digital consent in your country). We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.

8. Changes

We may update this policy from time to time. We will post the new version here and update the “last updated” date. Material changes may be communicated by email.

9. Contact

Questions or requests: hello@avaclip.shop, AVACLIP, PIKK 47.