This Privacy Policy explains how MomentCut (“we”, “us”, the “Service”) collects, uses, stores and deletes information when you use our website and app. By using the Service you agree to this policy.
Information we collect
- Account information. When you sign in with Google, we receive your name, email address and profile image. We use these to create and identify your account.
- Instagram connection. When you connect an Instagram account, we receive your Instagram user ID, username and profile picture, and an access token that lets us publish reels on your behalf. The access token is stored encrypted at rest and is never shared.
- Content you provide. Videos you upload or links you submit, and the reels, captions, thumbnails and transcripts the Service generates from them.
- Usage data. Job history, scheduling and quota information needed to run the Service.
- Payment data. Subscription billing is handled by our payment processor (Stripe). We do not store your full card details — Stripe processes them and we keep only a customer reference and subscription status.
How we use your information
- To provide the Service: transcribe videos, detect clips, render reels.
- To publish and schedule reels to your connected Instagram account at your direction.
- To manage your account, subscription and usage quota.
- To secure the Service and comply with legal obligations.
How we share information
We do not sell your personal data. We share data only with service providers that help us run the Service:
- Meta / Instagram — to publish reels via the Instagram API, in accordance with Meta’s Platform Terms.
- Google — for sign-in (authentication).
- Stripe — for payment processing.
- Cloud infrastructure & storage — to host the app and store your videos and rendered reels.
- Transcription provider — audio from your videos may be processed to generate transcripts and captions.
Data retention
- Rendered reels and their source media are automatically deleted after 7 days.
- Reviews/jobs that are never acted on are cleaned up within about 1 day.
- Account and Instagram-connection data are kept while your account is active. When you disconnect Instagram or delete your account, the related tokens and records are removed (see below).
Your rights and choices
- Disconnect any Instagram account at any time from the app — this deletes the stored token and its scheduled posts.
- Request deletion of your data at any time (see our Data Deletion page).
- Depending on your location (e.g. the EU/EEA under GDPR), you may have rights to access, correct, export or erase your personal data. Contact us to exercise these rights.
Security
We protect access tokens with encryption at rest and restrict access to your data. No method of transmission or storage is 100% secure, but we take reasonable measures to safeguard your information.
Children
The Service is not directed to children under 13 (or the minimum age in your jurisdiction), and we do not knowingly collect their data.
Changes to this policy
We may update this policy from time to time. We will revise the “Last updated” date above when we do.
Contact
Questions about this policy or your data? Email us at lucas.erlacher.29@gmail.com.