Scope
This notice covers the LudeClips website, accounts, AI video studio, billing, support, and transactional messages. It does not replace the separate notices of Apple, Google, Stripe, model providers, or a third party whose content you choose to submit.
Data we process
- Account data: name, email, password verifier, linked sign-in provider, account identifiers, and profile image where supplied.
- Security data: session identifiers, IP address, user agent, timestamps, authentication events, and limited application/error logs.
- Studio data: prompts, enhanced prompts, generation settings, uploaded images, provider/job identifiers, error details, generated clips, thumbnails, folders, sharing status, and edit history.
- Billing data: plan, credit ledger, Stripe customer/subscription/payment references, purchase status, and policy acceptance evidence. Stripe receives and controls payment-card details; LudeClips does not store full card numbers.
- Communications: notification preferences, in-app notices, delivery status, and messages you send to support or privacy contacts.
Purposes and legal bases
- To create your account, generate/store clips, maintain credits, provide paid features, and answer service requests: performance of our contract or steps you ask us to take before a contract.
- To secure accounts, prevent abuse, diagnose failures, enforce terms, and defend legal claims: our legitimate interests, balanced against your rights.
- To keep invoices, transaction evidence, and required records: legal obligations.
- To send optional completion emails: your chosen preference. You can switch these off in Settings; essential account, billing, security, and legal notices are not marketing.
We do not sell personal data or use submitted prompts or clips for unrelated advertising. We do not make decisions producing legal or similarly significant effects solely by automated means.
AI content and other people
Prompts and input media are sent to the model provider selected for the generation. Do not submit confidential, health, biometric, sexual, or other sensitive personal data. If content identifies another person, you must have a lawful basis and the permissions required to submit and generate it. Non-consensual intimate imagery, deceptive impersonation, exploitation, and unlawful surveillance are prohibited.
Recipients and processors
LudeClips uses the following categories where configured: OVHcloud for application/media hosting; Neon for PostgreSQL; LudeAuth and its Apple or Google sign-in paths for authentication; OpenRouter and fal.ai for image/video generation; ElevenLabs for an audio feature; Stripe for payment and billing; and the LudeHQ mail service for transactional email. Details and conditional use appear on the subprocessors page.
We may disclose limited data to professional advisers, courts, regulators, or law enforcement where legally required, or in a genuine business transfer subject to appropriate safeguards and notice.
International transfers
Core hosting is intended to remain in the European Economic Area. Authentication, AI, payment, or support providers may process data in other countries. Before production use we require an applicable adequacy decision, Standard Contractual Clauses or another lawful transfer mechanism, plus supplementary safeguards where needed. AI processing remains limited to ordinary creative content until provider contracts and transfer evidence are approved.
Retention
- Accounts and user-controlled clips remain until you delete them or close the account. Account closure removes primary account/content data after storage deletion succeeds.
- Completed prompt/job content is minimised after 90 days. Failed-job records and notification history are deleted after 90 days unless a security or dispute hold applies.
- Expired sessions and verification records are purged automatically. Routine identifiable logs are targeted for 30 days and security events for no longer than 12 months.
- Billing/tax evidence is retained for the period required by Cyprus law, generally at least six years and, where applicable, seven years.
- Deleted data leaves backups as protected backup generations rotate. A restore must not reintroduce a deleted account into production.
Security
We use encrypted transport, password hashing, authenticated media access, role-limited administration, secret-managed provider access, signed webhook verification, and database-enforced ownership checks. No system is risk-free. Please report suspected account or data exposure immediately.
Your rights
Subject to applicable conditions, you can ask for access, correction, deletion, restriction, portability, or information about recipients; object to legitimate-interest processing; and withdraw a consent without affecting earlier lawful processing. You can export account data or request deletion from Settings, or use the privacy-request page. We normally respond within one month and may verify identity proportionately.
You may complain to the Office of the Commissioner for Personal Data Protection in Cyprus, or to the supervisory authority where you live or work. Please contact us first if you want us to address a concern.
Cookies and browser storage
LudeClips uses essential authentication/session storage and a local theme preference. It does not currently deploy advertising, behavioral analytics, or session-replay trackers. We will request prior consent before enabling non-essential tracking.
Changes
The version date identifies this notice. Material changes affecting an account or paid service will be communicated in the service or by email where appropriate. A new purpose incompatible with the original one requires a new legal assessment and notice before processing.
Controller and contact
The controller is LudeHQ (controller identity pending configuration), at Larnaca, Cyprus (full service address pending configuration). Contact contact@ludehq.com.