Privacy Policy

MusicClip.ai LLC ("Company," "we," "us," or "our") operates the MusicClip.ai website and platform (the "Service"). This Privacy Policy describes how we collect, use, store, and protect your personal information when you use our Service.

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the Service.

1. Who We Are and How to Reach Us

MusicClip.ai LLC is the data controller for the personal data described in this policy. That means we decide why and how your data is processed.

Postal address: 30 N Gould St Ste R, Sheridan, WY 82801, United States. The fastest way to reach us about privacy is the contact page — please write "Privacy" in the subject so it is routed correctly.

We aim to answer privacy requests within 30 days. If a request is complex we may extend that by a further two months and will tell you why within the first month.

2. Information We Collect

2.1 Account Information

When you create an account, we collect information you provide directly, including:

• Name and display name
• Email address
• Password (stored in hashed form)
• Profile information you choose to provide

2.2 Uploaded Files and Content

When you use the Service, we collect and process files you upload, including:

• Audio files (MP3, WAV, and other formats) for music video generation
• Video files for the Short Maker and video editor
• Images and other media you upload for use within the Service

Uploaded files are stored on our servers for the purpose of processing and delivering the Service. We process audio files through speech recognition technology to extract lyrics and analyze musical content.

2.3 Usage Data

We automatically collect certain information when you access and use the Service, including:

• IP address and approximate geographic location
• Browser type, version, and operating system
• Pages visited, features used, and actions taken within the Service
• Date and time of access, session duration
• Referring URL and exit pages
• Device type and screen resolution
• Credit usage and transaction history
• Video generation history, settings, and preferences

2.4 Payment Information

When you make a purchase, payment information (such as credit card number, billing address, and related details) is collected and processed directly by our payment processor, Stripe. We do not store your full credit card number on our servers. We receive and store transaction confirmations, payment amounts, and the last four digits of your payment method for record-keeping purposes.

2.5 Cookies and Tracking Technologies

We use cookies and similar tracking technologies to operate and improve the Service. These include:

• Essential Cookies: Required for the Service to function properly, including session management and authentication.
• Analytics Cookies: Help us understand how users interact with the Service so we can improve it.
• Preference Cookies: Store your settings and preferences for a better experience.

You can control cookies through your browser settings. Disabling certain cookies may limit your ability to use some features of the Service.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Providing the Service: To process your uploads, generate videos, create subtitles, provide YouTube analytics tools, and deliver all other features of the Service.
• Account Management: To create and manage your account, authenticate your identity, and process transactions.
• Service Improvement: To analyze usage patterns, diagnose technical issues, and improve the performance, functionality, and user experience of the Service.
• Communication: To send you service-related notices, updates, security alerts, and support messages. We may also send promotional communications if you have opted in, which you can opt out of at any time.
• Security: To detect, prevent, and address fraud, abuse, security risks, and technical issues.
• Legal Compliance: To comply with applicable laws, regulations, legal processes, or governmental requests.
• AI Model Improvement: We may use anonymized and aggregated data to improve our AI models and algorithms. We do not use your individual uploaded content to train third-party AI models without your explicit consent.

4. Legal Bases for Processing

If you are in the European Economic Area or the United Kingdom, we must have a legal basis for every use of your personal data. Ours are:

• Performance of a contract. Creating and running your account, storing your uploads and outputs, processing generation jobs, tracking credits, and providing support. Without this we cannot deliver the Service you signed up for.
• Legal obligation. Keeping invoices, tax records and payment evidence, and responding to lawful requests from authorities.
• Legitimate interests. Keeping the Service secure, preventing fraud and abuse, debugging failures, understanding aggregate usage so we can improve the product, and defending legal claims. We balance these against your rights, and you can object — see your rights below.
• Consent. Analytics cookies, marketing email where required, and any optional feature that asks you first. Where we rely on consent you may withdraw it at any time, and withdrawing it is as easy as giving it. Withdrawal does not affect processing that already happened.

5. Third-Party Services

We use the following third-party services to operate and enhance the Service. Each third-party service has its own privacy policy governing the use of your information:

5.1 Stripe (Payment Processing)

We use Stripe to process payments. When you make a purchase, your payment information is transmitted directly to and processed by Stripe. Stripe's use of your data is governed by the Stripe Privacy Policy.

5.2 Kling AI (Video Generation)

We use the Kling AI API to generate AI-powered video content. When you use AI video generation features, text prompts derived from your content may be sent to Kling AI's servers for processing. We do not send your original audio or video files to Kling AI. Kling AI's use of data is governed by their own privacy policy and terms of service.

5.3 YouTube API Services

Our YouTube tools (Deep Search, Keyword Research, Trend Scanner, Competitor Tracker, Title & Thumbnail Analyzer) interact with YouTube's data through publicly available information and APIs. By using these features, you also agree to be bound by the YouTube Terms of Service and the Google Privacy Policy.

5.4 Whisper AI (Speech Recognition)

We use OpenAI's Whisper speech recognition model, hosted on our own servers, to transcribe audio and extract lyrics from uploaded music files. Your audio data is processed locally on our infrastructure and is not transmitted to OpenAI or any external speech recognition service.

5.5 AI Language Models

We use locally hosted AI language models to generate video prompts, analyze content, and provide intelligent features within the Service. These models run on our own infrastructure, and your data is not transmitted to external AI providers for this purpose.

6. Data Sharing and Disclosure

We do not sell your personal information to third parties. We may share your information in the following limited circumstances:

• Service Providers: With third-party vendors who assist us in operating the Service (e.g., payment processing, hosting, analytics), subject to confidentiality obligations.
• Legal Requirements: When required by law, regulation, legal process, or governmental request, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business Transfers: In connection with a merger, acquisition, reorganization, bankruptcy, or sale of all or part of our assets, your information may be transferred as part of that transaction.
• With Your Consent: We may share your information with third parties when you explicitly authorize us to do so.

7. Faces, Voices and Likeness

The performers you can select in the Service are AI-generated characters. They are not photographs of real, identifiable people, and we do not maintain a database of real people's faces for matching or recognition.

We do not run facial recognition, face matching, or biometric identification on any content you upload, and we do not create face templates or voiceprints from it.

If a feature ever lets you supply a reference image or voice sample of a real person, you are responsible for having that person's permission, and material you supply is used only to produce your output — never to train models that serve other users, and never shared with third parties for their own purposes. Depending on where you live, such material may be treated as biometric or sensitive data, in which case we will ask for your explicit consent before processing it.

You must not upload images or recordings of anyone else without their consent, and you must not use the Service to create sexual, defamatory or deceptive depictions of real people. See the Terms of Service for the full rules.

8. Data Retention

We retain your information for as long as necessary to:

• Provide the Service and maintain your account.
• Comply with legal obligations and resolve disputes.
• Enforce our agreements and protect our rights.

Specific retention periods include:

• Account Data: Retained for as long as your account is active. Upon account deletion, we will delete or anonymize your account data within 30 days, except where retention is required by law.
• Uploaded Files: Audio, video, and media files you upload are retained while your account is active. Temporary processing files (e.g., intermediate transcriptions, analysis data) may be deleted sooner. After account deletion, uploaded files are deleted within 30 days.
• Generated Content: Videos and other content generated through the Service are retained while your account is active. You may delete generated content at any time through your dashboard.
• Transaction Records: Payment and credit transaction records are retained for a minimum of 7 years as required for tax and accounting purposes.
• Usage Logs: Server logs and analytics data are retained for up to 12 months before being anonymized or deleted.

9. Retention Periods at a Glance

We keep personal data only as long as we need it for the purpose it was collected for, then delete or anonymise it. In practice:

Deleting a video removes it from the Service immediately. It can persist in backups for a short period until those backups rotate out, and we do not restore deleted content from backup.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using TLS/SSL (HTTPS).
• Secure password hashing using industry-standard algorithms.
• Malware scanning of uploaded files using ClamAV antivirus.
• Access controls limiting employee access to personal data on a need-to-know basis.
• Regular security assessments and monitoring of our systems.
• Secure server infrastructure with firewall protection.

While we strive to protect your personal information, no method of transmission over the Internet or method of electronic storage is completely secure. We cannot guarantee absolute security.

11. Children's Privacy

The Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13 without parental consent, we will take steps to delete that information as soon as possible.

If you are a parent or guardian and believe that your child under 13 has provided us with personal information, please contact us at support@musicclip.ai so we can take appropriate action.

Users between the ages of 13 and 18 may use the Service only with the consent and supervision of a parent or legal guardian.

12. Your Rights

Depending on your location and applicable law, you may have the following rights regarding your personal information:

12.1 Right to Access

You have the right to request a copy of the personal information we hold about you. You can access much of your data directly through your account dashboard.

12.2 Right to Correction

You have the right to request that we correct any inaccurate or incomplete personal information. You can update your account information directly through your account settings.

12.3 Right to Deletion

You have the right to request that we delete your personal information. You can delete your account and associated data by contacting us at support@musicclip.ai. Please note that we may retain certain information as required by law or for legitimate business purposes.

12.4 Right to Data Export (Portability)

You have the right to request a copy of your data in a structured, commonly-used, and machine-readable format. This includes your account information, generated videos, and uploaded content. To request a data export, contact us at support@musicclip.ai.

12.5 Right to Object

You have the right to object to certain processing of your personal information, including processing for direct marketing purposes. You can opt out of marketing emails at any time using the unsubscribe link in each email or through your account settings.

12.6 Right to Restrict Processing

In certain circumstances, you have the right to request that we restrict the processing of your personal information.

To exercise any of these rights, please contact us at support@musicclip.ai. We will respond to your request within 30 days. We may ask you to verify your identity before processing your request.

13. Additional Rights in the EEA and the UK

If you are in the EEA or the UK you have the following rights. They are free to exercise, and we will not treat you differently for using them.

• Access. Ask whether we hold data about you and receive a copy of it.
• Rectification. Have inaccurate data corrected and incomplete data completed.
• Erasure. Ask us to delete your data — the "right to be forgotten". We will do so unless we must keep something for a legal reason, such as invoices, and we will tell you if that is the case.
• Restriction. Ask us to pause processing while a dispute about accuracy or lawfulness is resolved.
• Portability. Receive the data you gave us in a structured, commonly used, machine-readable format, or have us send it directly to another provider where technically feasible.
• Objection. Object to processing based on our legitimate interests, including any profiling. We will stop unless we can show compelling grounds that override your rights.
• Withdraw consent. Where we rely on consent, withdraw it at any time — for cookies, use the reset button on the Cookie Policy page.
• Complain. Lodge a complaint with your local data protection supervisory authority. In the UK that is the Information Commissioner's Office. We would appreciate the chance to put things right first, but you do not have to contact us before complaining.

To exercise any of these, write to us through the contact page from the email address on the account. If we cannot verify that a request comes from you, we may ask for more information — this protects you from someone else obtaining your data.

14. Using the Service from Outside the United States

The Service is operated from the United States. If you are accessing the Service from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where our servers are located and our central database is operated.

By using the Service, you consent to the transfer of your information to the United States and acknowledge that data protection laws in the United States may differ from those in your country of residence.

European Economic Area (EEA) Users

If you are located in the EEA, we process your personal data based on the following legal bases under the General Data Protection Regulation (GDPR):

• Contract Performance: Processing necessary to provide the Service as agreed in our Terms of Service.
• Legitimate Interests: Processing necessary for our legitimate business interests (e.g., security, fraud prevention, service improvement) where those interests are not overridden by your rights.
• Consent: Where you have given explicit consent for specific processing activities (e.g., marketing communications).
• Legal Obligation: Processing necessary to comply with applicable laws.

EEA users have additional rights under GDPR, including the right to lodge a complaint with a supervisory authority. You may contact your local data protection authority for more information.

California Residents

If you are a California resident, you may have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to request deletion, and the right to opt out of the sale of personal information. We do not sell personal information. To exercise your CCPA rights, contact us at support@musicclip.ai.

15. International Data Transfers and Safeguards

We are based in the United States, and our servers and some of our service providers are located outside the EEA and the UK. If you use the Service from Europe, your data will be transferred to and processed in the United States and potentially other countries.

Where we transfer personal data out of the EEA or the UK to a country that has not received an adequacy decision, we rely on appropriate safeguards, principally the Standard Contractual Clauses approved by the European Commission, together with the UK International Data Transfer Addendum where the transfer is from the United Kingdom. We combine these with technical measures such as encryption in transit and access controls.

You may request a copy of the safeguards that apply to a particular transfer by contacting us. We will provide it, redacting commercial terms.

16. California Privacy Rights (CCPA / CPRA)

If you are a California resident, you have specific rights over your personal information. In the past 12 months we have collected the following categories: identifiers (such as name, username, email and IP address), commercial information (purchases and credit balances), internet activity (pages viewed, features used), audio and visual information (the audio you upload and the videos generated from it), and inferences drawn for the purpose of operating the Service.

We collect this from you directly, from your use of the Service, and from our payment processor. We use it for the business purposes described in this policy and disclose it only to the service providers listed here, under contracts that limit them to acting on our instructions.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We have not done so in the preceding 12 months, and we do not sell the personal information of minors.

You have the right to know what we collect and why, to request deletion, to request correction, to limit the use of sensitive personal information, and not to be discriminated against for exercising any of these rights. We do not charge different prices or provide a lower quality of service to people who exercise them.

Submit a request through the contact page. An authorised agent may submit on your behalf with written proof of authorisation.

17. Cookie Policy

Cookies are small text files placed on your device by websites you visit. We use the following types of cookies:

You can manage cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. Please note that blocking essential cookies may prevent you from using the Service.

18. Automated Decision-Making and Profiling

We do not make decisions that produce legal effects, or similarly significant effects, about you solely by automated means.

Automation is used inside the product for ordinary operational purposes: routing a generation job to an available GPU, planning scenes from your lyrics, estimating credit costs, flagging suspicious sign-up or payment patterns for review, and applying rate limits. Where automation flags an account for abuse or fraud, a person reviews it before the account is suspended, and you can contest the outcome by contacting us.

19. Service Providers and Sub-processors

We rely on a small number of providers to run the Service. Each is bound by a contract that limits them to processing data on our instructions, requires appropriate security, and prohibits them from using your data for their own purposes.

• Stripe — payment processing and invoicing. We never see or store your full card number.
• Hosting and storage providers — servers, GPU capacity and object storage for your uploads and generated videos.
• Third-party AI providers — used for some generation features. The current list appears in the Third-Party Services section above; prompts and derived data may be sent to them for processing.
• Email delivery — verification, password reset and service notices.
• Google Analytics — loaded only if you accept analytics cookies, with IP anonymisation enabled.

We review this list as the product changes. If we add a provider that materially changes how your data is handled, we will update this policy and, where the law requires it, tell you before the change takes effect.

20. Do Not Track Signals

Some browsers include a "Do Not Track" (DNT) feature that signals to websites that you do not want your online activity tracked. Because there is no uniform standard for interpreting DNT signals, the Service does not currently respond to DNT signals. We will update this policy if a standard for responding to DNT signals is established.

21. Third-Party Links

The Service may contain links to third-party websites or services that are not owned or controlled by us. We are not responsible for the privacy practices or content of such third-party sites. We encourage you to review the privacy policies of any third-party websites you visit.

22. Security Incidents and Breach Notification

If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority without undue delay and, where feasible, within 72 hours of becoming aware of it.

Where the breach is likely to result in a high risk to you, we will also tell you directly and without undue delay, describing what happened, what data was involved, what we are doing about it, and what you can do to protect yourself.

We keep an internal record of incidents, including those that do not require notification, so we can learn from them.

23. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by posting the updated policy on the Service and updating the "Effective Date" at the top of this page. We may also send you a notification by email if the changes are significant.

Your continued use of the Service after any changes to this Privacy Policy constitutes your acceptance of the updated policy. We encourage you to review this Privacy Policy periodically.

24. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We will make every effort to respond to your inquiries within 30 days.