Home

Privacy Policy

Last updated: October 16, 2026

Who is responsible

Nubri GmbH, Liebenowzeile 22, 12167 Berlin, Germany (info@nubri.co) runs ClipForge (clipforge.run) and is the controller for the personal data described here.

Information We Collect

  • Account: your name and email address, and your password stored only as a hash, or your Google account's id if you sign in with Google; your plan and credits; where you came from when you signed up (campaign tags, referring page).
  • Videos: the prompts you write, the settings you choose, and the videos made from them, stored in AWS S3.
  • TikTok: only if you connect it; see below.
  • Payments: handled by Stripe. We keep only your Stripe customer and subscription identifiers, never card details.
  • Emails: verification and password-reset emails, sent through Amazon SES.
  • Usage events: a random visitor id and which steps of the site you reached, with the campaign tags you arrived with. They tell us which pages work; they are not used for advertising.
  • Free credits: a one-way hash of your email inbox, so the free credits are given once per inbox; and for the free plan's limits, your IP address in memory for up to a day.
  • Contact form: your name, email address and message, sent to our inbox.

How We Use Your Information

To provide ClipForge under our contract with you (Art. 6(1)(b) GDPR): making videos, running your account, taking payments and, if you ask for it, publishing to TikTok. For security, abuse prevention and understanding how the site is used, on our legitimate interest (Art. 6(1)(f) GDPR). To keep records the law requires, such as invoices (Art. 6(1)(c) GDPR).

TikTok Integration

ClipForge integrates with TikTok's Content Posting API to let you publish videos you create in ClipForge to your own TikTok account. This section describes exactly what data is collected, why, and how it is handled.

Data Collected

When you connect your TikTok account, ClipForge requests the following OAuth scopes: user.info.basic, video.upload, and video.publish.

Under these scopes, the following data is retrieved from TikTok and stored in our database:

  • TikTok Open ID — TikTok's unique identifier for your account, used to associate your ClipForge account with your TikTok account.
  • Display name — Your TikTok username, shown in the ClipForge UI.
  • Avatar URL — A link to your TikTok profile picture, shown in the ClipForge UI.
  • OAuth access token and refresh token — Used to authenticate API requests to TikTok on your behalf. These are stored encrypted at rest and are never returned to the browser or included in API responses.

Before publishing a video, ClipForge also queries TikTok for your account's posting eligibility and privacy options (such as allowed visibility levels and interaction settings). This information is used only to construct the publish request and is not stored in our database.

Why We Collect This Data

The Open ID, display name, and avatar are collected to identify and display your connected TikTok account within ClipForge. The access and refresh tokens are required to publish videos to TikTok on your behalf.

ClipForge posts only to your own TikTok account, and only when you explicitly click Publish on a specific video. No content is ever posted automatically or without your direct action.

What We Do Not Do

  • –We do not sell or share your TikTok data with any third party.
  • –We do not post to TikTok without your explicit action.
  • –We do not access, read, or modify any TikTok account other than your own.
  • –We do not use your TikTok data for advertising, analytics, or any purpose beyond operating the publishing feature you requested.

Data Retention

Your TikTok Open ID, display name, avatar URL, and OAuth tokens are stored in our database for as long as your TikTok account remains connected to ClipForge. There is no fixed time-based expiry. Tokens are automatically refreshed before they expire to keep your account connected.

All TikTok data is permanently deleted when you disconnect your TikTok account (see Revocation below) or when you delete your ClipForge account.

Revocation and Disconnection

You can disconnect your TikTok account from ClipForge at any time from the app settings. When you disconnect:

  1. 1ClipForge sends a revocation request to TikTok's OAuth API to invalidate your access token.
  2. 2Your access token, refresh token, Open ID, display name, and avatar URL are permanently deleted from our database.

You can also revoke ClipForge's access directly in TikTok's settings under "Manage app permissions." If you revoke access through TikTok, we recommend also disconnecting in ClipForge to ensure stored tokens are removed from our database.

For data deletion requests or questions about your TikTok data, contact us at info@nubri.co.

Processors

These companies process data on our behalf, under data processing agreements:

  • Amazon Web Services — servers, video storage (S3), email (SES), and Anthropic's Claude on Amazon Bedrock, which turns your prompt into the video's script and scenes (region us-east-1, USA).
  • Google — sign-in with Google, and Veo, which makes the cinematic videos (USA).
  • Stripe — payments (USA and Ireland).
  • TikTok — publishing, only when you connect your account and press Publish (see above).

Transfers to the USA rely on the EU-U.S. Data Privacy Framework or the EU standard contractual clauses.

Data Retention

Your account and videos stay until you delete them. You can delete a video at any time, and your whole account in Settings: that cancels any subscription and removes your account, videos, stored files and TikTok connection. We keep only the hash of your inbox, so the free credits aren't given again, and usage events without any link to you. Stripe keeps payment records as the law requires.

Server logs

When you open any page, our web server records your IP address, the time, the address requested, the response and your browser's user agent. We use these logs only to keep the service secure and to find faults (Art. 6(1)(f) GDPR). They are deleted automatically after at most 8 days.

Cookies and local storage

ClipForge sets no cookies. Your sign-in is kept in your browser's local storage (clipforge_token, valid for 72 hours), with the random visitor id and the campaign tags you first arrived with; session storage remembers that the visit was counted.

Your rights

You have the right to access, correct, delete, restrict and port your data, and to object to processing based on our legitimate interest. Write to info@nubri.co. You can also complain to a data protection authority; ours is the Berlin Commissioner for Data Protection and Freedom of Information.