Trust Center

Security

Data is encrypted in transit (TLS 1.2+) and at rest (AES-256). Internal access to customer data is role-scoped and logged, and we run a responsible vulnerability disclosure program at security@clipcaptor.com. See our Security page for the full picture.

Compliance

Clipcaptor's data handling is designed around UK GDPR principles. Data Processing Agreements (DPAs) are available on Business plans; contact sales@clipcaptor.com to request one.

Data privacy

We don't sell personal information, and Source Content you upload is used only to provide and improve the Service, never to train general-purpose models shared outside Clipcaptor. Full detail is in our Privacy Policy.

Sub-processors

We rely on a small set of vetted sub-processors to run the Service:

• Cloudflare, Inc.: Website and application hosting, content delivery, security, and cookie-free web analytics. Location: United States (global network; UK and EU traffic may be processed in the US). Transfer safeguards: EU-U.S. Data Privacy Framework and its UK Extension, plus Standard Contractual Clauses and the UK Addendum in Cloudflare's Data Processing Addendum.
• Stripe Payments Europe, Ltd.: Payment processing. Location: Ireland, with processing by Stripe, Inc. in the United States. Transfer safeguards: EU-U.S. Data Privacy Framework and its UK Extension, plus Standard Contractual Clauses and the UK Addendum in Stripe's Data Processing Agreement.

Reliability

We target 99.9% availability, with incidents and maintenance windows communicated as they happen.

Responsible disclosure

If you've found a security issue, we want to hear about it before anyone else does. Email security@clipcaptor.com and we'll work with you to investigate and fix it.