Privacy Policy

Last updated: 13 September 2026

This policy describes the personal data processed by MomentCut, why, with which subcontractors, for how long, and your rights under the General Data Protection Regulation (GDPR). The French version prevails in case of discrepancy.

1. Data controller

2. Data processed and purposes

We do not sell your data and do not use it for advertising. No profiling or automated decision-making with legal effects is carried out.

3. Subcontractors and recipients

• Cloudflare (Cloudflare, Inc., United States, with infrastructure in the European Union): hosting of the application (Workers), database (D1) and storage of videos, transcripts and exports (R2). Transfers are governed by standard contractual clauses and the EU-US Data Privacy Framework.
• Hetzner Online GmbH (Germany): processing server that temporarily downloads the video to transcribe it and assemble exported clips. Working files are deleted at the end of each task.
• Brevo (Sendinblue SAS, France): sending sign-in and service e-mails.
• Google Gemini API (Google LLC / Google Ireland Ltd): analysis of transcripts to select the best passages and draft the suggested texts. When you explicitly start the “picture + sound” video analysis, the video itself is temporarily sent to Google for analysis, and the uploaded copy is deleted once the analysis ends. Under the terms applicable to the paid Gemini API we use, Google states that it does not use submitted content to train or improve its models; please refer to Google’s terms and privacy policy for details, which may change.
• Paddle.com: reseller (“Merchant of Record”) that processes payments, invoices and refunds. Paddle collects your billing data (name, address, country, payment method) directly, as controller for the transaction; MomentCut neither receives nor stores card numbers. See Paddle’s privacy policy.

Data may also be disclosed to authorities where required by law.

4. Retention periods

• Sign-in link: 15 minutes, single use. Session: 30 days after the last sign-in.
• Source video: automatically deleted 30 days after the project was last modified (clips, captions and texts are kept in the project), or as soon as you delete the project.
• Exported files: 7 days after creation.
• Copy of the video sent to Google for video analysis: deleted when the analysis ends.
• Projects, transcripts and account: until you delete them — immediately, from “My account” in the client area — or after 24 months without any activity on the account. A warning e-mail is sent 30 days before that inactivity deletion: simply signing in again keeps the account. An account with a running subscription or a running entitlement is never deleted for inactivity.
• Billing data: statutory retention period for accounting records (10 years in France), at Paddle and in our records.
• Technical logs: 90 days at most, automatic purge included — payment events received from Paddle once processed, the transcription and export job log, sign-in tokens, and the per-IP anti-abuse counters (which only hold a fingerprint of the address and are erased after 24 hours).
• Anti-abuse fingerprint of the sign-up address: kept with no time limit, including after the account is deleted, because it is the only thing that stops the free trial from being recharged by deleting and recreating an account. That row holds neither your address nor anything that could identify or contact you: only an irreversible cryptographic fingerprint of the address, the number of sign-ups and the trial minutes already used. Write to us if you believe you lost the benefit of the trial unfairly: we can erase that row.
• Administration action log (granted credit, granted plan, suspension, account deletion, trial restoration): 5 years. This log has evidential value — it lets us demonstrate that a request, in particular an erasure request, was actually carried out — and is therefore kept beyond the 90 days of the other logs. It holds the action, its date, its reason and the e-mail address concerned, never the content of your projects. Nobody can alter it from the interface.

5. Your rights

You have the right to access, rectify, erase, restrict and object to the processing of your data, the right to data portability, and the right to set instructions regarding your data after your death.

From your account, without writing to us: the “My account” section of the client area lets you download all of your data as a JSON file (account, projects and their metadata, transcripts, clips, usage, subscription; the video files themselves are not included and remain downloadable from the studio while they are still available) and permanently delete your account. Deletion is immediate and irreversible: uploaded videos, projects, transcripts, clips, exported files, sessions and subscription entitlements are erased. What remains carries no link to your identity: the minutes already used — attached to an anonymous account so that our counters stay accurate —, an irreversible fingerprint of your address together with the trial minutes already used (it keeps the free offer to one sign-up per address and cannot identify or contact you), the billing records for their statutory retention period, and the administration log entry evidencing the deletion. A confirmation e-mail is sent to you.

If a subscription is running, it must first be cancelled from the customer portal available in the client area: deleting the account does not stop the subscription, and Paddle would keep charging you. Deletion becomes available again as soon as the subscription is cancelled or has run out.

You may also exercise these rights by writing to contact@momentcut.co from your account’s e-mail address; we reply within one month. You may also lodge a complaint with the CNIL (cnil.fr) or the supervisory authority of your country of residence.

6. Cookies

MomentCut only uses strictly necessary cookies and storage: the mc_session session cookie (sign-in, 30 days, HttpOnly) and a language preference kept in your browser’s local storage. No advertising cookies or third-party analytics are set, so no consent banner is required. During checkout, Paddle may set its own cookies inside its checkout window, under its own policy.

7. Security

Traffic is encrypted (HTTPS), sign-in tokens are stored hashed, files are kept in a private space linked to your account and the processing server authenticates to the application with a dedicated secret. In the event of a data breach likely to result in a risk to your rights, we will inform you in accordance with the GDPR.

8. Minors

The service is intended for adults or minors with their legal guardian’s permission. We do not knowingly collect data from children under 15.

9. Changes

This policy may be updated; the date at the top of the page shows the latest version. Material changes are announced by e-mail or on the site.

10. Contact

For any question about your data: contact@momentcut.co.