Privacy Statement – Clippter

Introduction

Clippter (a trade name operated by Movie Moose Holding B.V., hereafter referred to as ‘Clippter’, ‘we’, or ‘us’) is committed to protecting the privacy and security of your personal data. This privacy statement describes how we manage (personal) data we collect through our website https://clippter.com and the Clippter platform, and explains how that information is used, maintained, shared, and protected.

Below are our official contact details:

• Company: Movie Moose Holding B.V. (operating under the trade name Clippter)
• Address: Thierensweg 8, 1411EX Naarden, The Netherlands
• Chamber of Commerce (KvK-nummer): 88876926
• Email: support@clippter.com

1. Personal data we collect about you

We collect personal data from you in the following situations:

• If you create an account or use our services: We ask for your name, email address, company name, password (stored securely and encrypted), and billing/payment information (processed securely via our third-party payment provider) in order to perform our contract and manage your subscription.
• If you contact us or book a demo: If you contact us with a question, request, or book an onboarding/demo call, we ask for your name, email address, and any details you provide. We use this information to communicate with you and help you get started with Clippter.
• If you use our platform (Usage Data): We automatically collect certain technical and usage data when you interact with our website and platform. This may include your IP address, browser type, device type, and information about how you navigate and use Clippter (e.g., features used, pages viewed) to help us optimize and improve our software.
• If you apply for a job: If you apply for a job or staffing opportunity at Clippter, you will be asked to submit your resume and contact information. We use this to consider you for the opening and potential future opportunities.

Data Controller vs. Data Processor: Please note that when you use Clippter to manage your video agency (such as entering information about your own leads, clients, rates, and crew), you act as the Data Controller for that workspace data, and Clippter acts as the Data Processor. Our processing of that specific workspace data is governed by our Data Processing Agreement (DPA), which is part of our Terms and Conditions. This Privacy Statement primarily covers situations where Clippter acts as the Data Controller.

2. The use of your personal data

We can only use your personal data if we have a proper reason for doing so. According to the law, we can only use your data for one or more of these reasons:

• To perform a contract with you: To provide you with access to the Clippter platform, manage your account, handle billing, and provide customer support.
• If we have a legal duty to use your data: For example, keeping financial and invoice records for tax authorities.
• When it is in our legitimate interests: This applies to analyzing how our platform is used so we can improve features, securing our systems and website against misuse, and marketing our services to business users.
• When you consent to it: For example, when you sign up for our marketing newsletter, book a demo call, or accept non-essential cookies.

We endeavor to collect only such information that is reasonably necessary. You are responsible for ensuring that the information you provide is accurate and current. If you wish to use our platform, providing certain data (like your email and billing info) is a contractual requirement; without it, we cannot provide our services to you.

Clippter is not intended for, and does not knowingly collect data from, persons under 16 years old. If we learn that we have collected information from someone under 16 without verifiable parental consent, we will take steps to delete it immediately.

3. Sharing of your personal data

Clippter does not sell your personal data. We only share your personal data with third parties outside of our organization when necessary to conduct our business operations, provide our services, or when obliged by law. This includes sharing data with:

• Supabase — database, authentication, and related backend services (primary region: Frankfurt, Germany / EEA).
• Vercel — application hosting and delivery (European infrastructure, including Frankfurt).
• Bunny.net — review video encoding and streaming (primary storage: Germany).
• Cloudflare (R2) — object storage for approved media library files, review images, and comment snapshots (Western Europe).
• Stripe — subscription and payment processing.
• Resend — transactional and service emails.
• Sentry — error monitoring and application reliability.
• Analytics providers (such as Google Analytics / Google Tag Manager) — to help us understand website and platform usage, where enabled.

A short overview of hosting locations and security practices is also available on our Security & Data page.

Whenever we transfer personal information from the European Economic Area (EEA) to countries outside the EEA that do not offer the same level of data protection, we implement GDPR-compliant safeguards (such as European Commission Standard Contractual Clauses) to ensure your rights and protections remain intact. Primary workspace data and media storage are hosted in the EEA as described in section 4.

4. Where we store data

Clippter is operated by a Dutch company and is designed for EU/EEA use under the GDPR (AVG). Primary production locations for platform and media data are in the EEA:

• Application database and authentication: Frankfurt, Germany (Supabase / eu-central-1).
• Review video: Germany (Bunny Stream).
• Approved media library, review images, and comment snapshots: Western Europe (Cloudflare R2).
• Application hosting: European infrastructure (Vercel), including Frankfurt.

Clippter does not currently offer generative AI product features. We do not use Customer Data or client portal content to train artificial intelligence or machine learning models, and we do not share that content with third parties for AI training or model improvement.

When clients use the client portal, they access a separate invite-only environment for shared projects and review. Portal users do not access the agency workspace (CRM, rates, finance, or internal tools). Upload is one-way (agency → Clippter → client): portal users can review and interact with shared video, but cannot upload anything into the portal (no documents, PDFs, media, or other files).

5. How we secure your personal data

Clippter highly values the security of your data. We have implemented appropriate technical and organizational security measures to protect your data from unauthorized access, loss, or alteration. These measures include data encryption in transit and at rest, regular security hardening of our infrastructure, firewalls, strict access controls, and concluding Data Processing Agreements (DPAs) with all sub-processors who handle your data. Our policies are regularly reviewed and updated to meet technological changes and industry standards. See also our Security & Data page.

6. How long we will keep your personal data

We will retain your personal information for as long as your Clippter account is active or as needed to fulfill the purposes outlined in this privacy statement.

If you terminate your subscription or delete your account, we will delete or anonymize your personal data and workspace data within a reasonable timeframe (typically within 30 days), unless a longer retention period is required by law. For instance, we are legally required to retain financial invoices and accounting data for a period of 7 years to comply with Dutch tax regulations (fiscale bewaarplicht).

7. Cookies

Cookies are small text files downloaded to your device when you visit a website or application. Clippter uses functional/necessary cookies to keep you logged into your account and to ensure the platform functions correctly. We may also use analytical cookies (such as Google Analytics or privacy-friendly alternatives) to track general, non-identifiable usage statistics so we can improve our product. You can manage or disable cookies through your browser settings, though some parts of the platform may not function correctly without them.

8. Your privacy rights and our contact information

We respect your right to access and control your personal information. Under the GDPR, you have the following rights:

• The right to access information: You can request a copy of the personal data we hold about you.
• The right to correct and update: You can request that we update or correct inaccurate or incomplete data.
• The right to erasure (‘right to be forgotten’): You can request that we delete your data, provided we do not have a legal obligation or overriding legitimate interest to keep it.
• Restriction of processing: You can request that we temporarily limit the processing of your data under certain conditions.
• Withdrawal of consent: If we process data based on your consent (e.g., newsletters), you can withdraw it at any time.
• The right to data portability: You can request a structured, commonly used machine-readable copy of the data you provided to us.
• The right to object: You can object to the processing of your data based on legitimate interests or for direct marketing purposes.

To exercise any of these rights, we will need to verify your identity to ensure data security. You can send your request to support@clippter.com. We aim to respond within one month.

9. Right to lodge a complaint with the Data Protection Authority

If you feel that we have not handled your personal data correctly, you have the right to lodge a complaint with the Dutch Data Protection Authority:

Autoriteit Persoonsgegevens (Postbus 93374, 2509 AJ Den Haag, The Netherlands).

10. Changes to this privacy statement

This privacy statement may be updated from time to time to reflect changes in our platform, technology, or legal requirements. Changes become effective immediately upon being published on the website.