Privacy Policy

Last updated: October 1, 2026

ArCut (“we”, “us”) provides an AI-assisted video editing service at arcut.pro. This policy explains what personal data we collect, why, and the rights you have over it. We operate from Spain and comply with the EU General Data Protection Regulation (GDPR).

ArCut uses YouTube API Services. Section 4 explains what that means for your data.

1. Data we collect

• Account data — email address, display name, hashed password (or your Google / Twitch account identifier if you sign in with OAuth), and how you heard about ArCut if you choose to tell us.
• Content you upload — video files, and data derived from them during processing: audio transcripts, extracted frames, detected moments, and editing decisions.
• Text you write in the video-essay tools — the topic and any notes or instructions you type. These are sent to web-search, page-retrieval and language-model providers (listed below) to research the subject and draft a script, and the narration you approve is sent to a text-to-speech provider.
• YouTube data — if you use ArCut’s YouTube features: a token that lets ArCut upload to your channel, and the details of each upload (section 4).
• Billing data — subscription tier and payment status. Card details are handled entirely by Stripe; we never see or store them.
• Usage data — token consumption, feature usage, and (only if you accept analytics cookies) product analytics events.
• Technical data — IP address and request logs kept for security and rate-limiting.

2. Why we process it (legal bases)

• To provide the service (contract) — processing your videos, storing your edits, rendering output.
• To bill you (contract / legal obligation) — subscriptions and invoices via Stripe.
• To keep the service secure (legitimate interest) — abuse prevention, rate limiting, error monitoring.
• To improve the product (consent) — analytics run only after you accept them in the cookie banner.

3. AI processing of your videos

When you upload a video, parts of it are processed by AI providers to detect highlights: audio is transcribed, selected frames are analyzed, and transcript excerpts may be sent to large-language-model APIs. Your content is used only to process your job — we do not use your videos to train AI models, and our providers are bound by terms that prohibit training on this data.

4. YouTube

ArCut uses YouTube API Services. When you use ArCut’s YouTube features, Google also handles your data, under the Google Privacy Policy.

ArCut uses YouTube for two things:

• Uploading your videos — when you ask, ArCut uploads a video you rendered in ArCut to your own YouTube channel, with the title, description and privacy setting you choose. It never uploads anything on its own.
• Researching video essays — ArCut searches YouTube for public videos about your essay’s topic (the search words go to YouTube) and shows you the ones it uses as sources.

What ArCut stores

• When you connect your channel — an encrypted token from Google that lets ArCut upload for you. ArCut never sees your Google password.
• For each upload — the title, description, privacy setting and any tags you chose, and the video’s ID and link on YouTube. After 30 days ArCut deletes the description, ID and link; the title, tags and privacy setting you chose stay with your project.
• For essay research — the chapter list of each public video it finds, with the video’s title, channel, publish date and link. Nothing else about the video is kept.
• For a person in an essay — if the person has a YouTube channel, ArCut may show the channel’s profile picture in the film. ArCut gets the picture through the YouTube API and keeps it with your project. It deletes the picture within 30 days of getting it, and at once if you disconnect YouTube or delete your account.

This is stored with Amazon Web Services in Frankfurt (EU). ArCut keeps YouTube API Data for at most 30 days, then deletes or refreshes it. The token stays until you disconnect, or until Google stops accepting it. Nothing from YouTube is stored on your device; section 8 lists what is.

How it is used and shared

ArCut uses this data only for the two features above. To draft an essay’s script, the titles and chapter lists it found may be sent to the language-model providers listed in section 5. ArCut does not sell YouTube API Data, does not use it for advertising, and shows no ads.

Removing ArCut’s access

• In ArCut — Settings → YouTube Publishing → Disconnect. ArCut deletes its token and the YouTube data above at once.
• At Google — remove ArCut on Google’s security settings page. ArCut then deletes the YouTube API Data it holds about you within 30 days.
• By email — ask privacy@arcut.pro to delete your YouTube API Data, and we do it within 7 days.
• Delete your account — ArCut deletes your YouTube data and token at once.

Deleting data from ArCut does not delete anything on YouTube. A video you uploaded stays on your channel until you delete it on YouTube.

Questions or complaints about how ArCut handles your YouTube data: privacy@arcut.pro.

5. Subprocessors

We share data with the following processors, only as needed to run the service:

6. Retention

• Videos and renders — deleted automatically per your plan: 7 days after upload on Free, 90 days after upload on Pro, and never on Studio. When a paid plan ends, its videos are kept 7 more days and then deleted. You can delete a job earlier at any time.
• Video essays — kept for 30 days after creation on Free. On a paid plan, kept until you delete them. When a paid plan ends, an essay is kept until 30 days after it was created or 7 days after the plan ended, whichever is later, and then deleted.
• YouTube API Data — at most 30 days, then deleted or refreshed. The token that lets ArCut upload to your channel is kept until you disconnect.
• Account data — kept while your account exists; deleted when you delete your account. Your video essays are then deleted within about 30 days. When you make a video essay, ArCut keeps a one-way scrambled copy of your email address with that essay’s ID and the date, only to remember that your free first video essay was used. It is kept after you delete your account, for as long as ArCut offers a free first video essay.
• Billing records — kept as required by tax law (up to 6 years).
• Security logs — up to 90 days.

7. Your rights

Under GDPR you can, at any time:

• access a copy of your personal data (data portability),
• correct inaccurate data,
• delete your account and all associated data (right to erasure),
• withdraw analytics consent (footer → Cookie settings),
• object to processing based on legitimate interest,
• lodge a complaint with your supervisory authority (in Spain: the AEPD, aepd.es).

To exercise any of these rights, contact us at privacy@arcut.pro. Data export and account deletion are also available directly in your account settings.

8. Cookies and storage on your device

ArCut sets one cookie of its own: an essential one that keeps you signed in. It also keeps a few things in your browser’s local storage so the app works:

• your cookie choice,
• uploads in progress, so they can resume after a dropped connection,
• small settings such as your undo history and which tips you have closed.

Analytics (PostHog) runs only after you accept it in the consent banner; it then keeps its own ID in your browser. You can change your choice any time via “Cookie settings” in the footer. Signing in with Google or Twitch, and connecting YouTube, happen on Google’s and Twitch’s own pages, which may set their own cookies.

9. Changes

We’ll post any changes to this policy here and update the date above. Material changes will be announced by email to registered users.

10. Contact

ArCut, Spain
privacy@arcut.pro