Privacy Policy

Last updated: 30 August 2026

This Privacy Policy explains what personal data CutPause ("CutPause", "we", "us") collects, why we collect it, how long we keep it, and what rights you have.

CutPause is a web service that removes pauses and repeated takes from video recordings. It is operated by Vladyslav Humeniuk (Ukraine), the data controller for the purposes of the EU General Data Protection Regulation (GDPR) and the UK GDPR.

Contact for any privacy question or request: decebel1995@gmail.com

1. Data we collect

1.1 Account data. When you create an account we store your email address and, if you sign in with a third-party provider, the display name and avatar URL that provider returns. Passwords are never stored by us in readable form; authentication is handled by Supabase (see section 4).

1.2 Content you upload. The video files you submit for processing, and the intermediate artefacts derived from them: extracted audio, transcripts, detected speech boundaries, cut lists, and the rendered result file.

1.3 Usage data. Counters and records needed to operate quotas and show your history: number of processed videos per period, source and result duration, number of cuts, job status, and timestamps.

1.4 Technical data. Server logs generated automatically when you use the service: IP address, user agent, requested URL, response status, and error traces. These are produced by our hosting provider and are used for security and debugging.

1.5 Payment data. We do not receive or store your card number, CVC, or billing address. Payments are processed by Creem (see section 3). From Creem we receive only a customer identifier, a subscription identifier, subscription status, and period dates.

1.6 Local browser storage. We store your last processing results, interface preferences, and language choice in your browser's localStorage. This data stays on your device, is not transmitted to us, and can be cleared at any time from the interface or by clearing site data in your browser.

We do not use advertising cookies, analytics trackers, or third-party marketing pixels. The only cookies and local storage we set are required for you to stay signed in and for the interface to remember your settings.

2. Why we process your data, and on what legal basis

PurposeDataLegal basis (GDPR Art. 6)
Providing the service (processing your video)Uploaded content, account dataPerformance of a contract
Account creation and sign-inAccount dataPerformance of a contract
Enforcing plan quotasUsage data, account dataPerformance of a contract
Billing and subscription managementAccount data, payment identifiersPerformance of a contract
Security, abuse prevention, debuggingTechnical dataLegitimate interests
Responding to your support requestsAnything you send usLegitimate interests
Complying with tax and accounting lawTransaction recordsLegal obligation

We do not sell your personal data. We do not share it for behavioural advertising. We do not use your uploaded content to train our own models.

3. Payments and Merchant of Record

Purchases of paid plans are handled by Creem (Armitage Labs OÜ, Estonia), which acts as the Merchant of Record. This means Creem is the seller of record for the transaction, is responsible for charging you, issuing invoices, collecting and remitting VAT and sales taxes, and handling refunds and chargebacks.

When you buy a plan, your payment details are collected by Creem on their own systems, under their own privacy policy: https://www.creem.io/privacy. We never see them.

4. Processors and sub-processors

We use the following providers to run the service. Each of them processes data only on our instructions and under a data processing agreement.

ProviderRoleData it seesLocation
Vercel Inc.Hosting, serverless functions, file storageAll request data, uploaded files, resultsUSA / global edge
Supabase Inc.Authentication and databaseAccount data, usage data, subscription recordsEU / USA
Creem (Armitage Labs OÜ)Payments, Merchant of RecordEmail, payment data (collected directly by them)EU (Estonia)
Speech recognition providerTranscribing the audio track of your videoAudio extracted from your uploadUSA
Language model providerDetecting repeated takes in the transcriptTranscript textUSA

The current speech recognition and language model providers are Groq, OpenRouter, and the model vendors reachable through them. These providers process the data to return a result to us and, under their business terms, do not use API inputs to train their models. If we change providers we will update this list.

International transfers. Some of these providers are located in the United States. Transfers outside the European Economic Area are made under the European Commission's Standard Contractual Clauses or an equivalent adequacy mechanism offered by the provider.

5. How long we keep data

DataRetention
Uploaded source filesDeleted automatically approximately 1 hour after upload
Rendered result filesDeleted automatically approximately 48 hours after processing
Transcripts and intermediate artefactsDeleted together with the source files
Account dataUntil you delete your account
Usage counters and job historyUntil you delete your account
Subscription and transaction recordsAs required by tax law, normally up to 7 years
Server logsUp to 30 days

Deletion of files happens on a schedule, so the actual moment of removal may be a short time after the stated window.

6. Your rights

If you are in the EEA, the UK, or a jurisdiction with comparable law, you have the right to:

  • access the personal data we hold about you;
  • rectify inaccurate data;
  • erase your data ("right to be forgotten");
  • restrict or object to processing based on legitimate interests;
  • data portability — receive your data in a structured, machine-readable format;
  • withdraw consent where processing is based on consent;
  • lodge a complaint with your national data protection authority.

To exercise any of these, write to decebel1995@gmail.com. We will respond within 30 days. We do not charge for this unless a request is manifestly excessive.

Deleting your account. Write to decebel1995@gmail.com from the address registered on the account. We delete the account, profile, usage records, and job history. Transaction records required by tax law are retained; records held by Creem are subject to Creem's own policy.

7. Automated decision-making

The service applies automated processing to your video — speech detection, transcription, and detection of repeated takes — in order to produce the edited result you asked for. This processing has no legal or similarly significant effect on you within the meaning of GDPR Article 22. Every decision it makes is about where to cut a video, and every result is yours to accept or discard.

8. Children

The service is not directed at children under 16. We do not knowingly collect data from them. If you believe a child has provided us data, write to decebel1995@gmail.com and we will delete it.

9. Security

Data is transmitted over TLS. Access to production systems is restricted to the operator. Authentication tokens are signed and short-lived. We nonetheless cannot guarantee absolute security; no online service can. If a breach occurs that is likely to result in a risk to your rights, we will notify you and the competent supervisory authority as required by GDPR Article 33 and 34.

10. Changes to this policy

We may update this policy. The "Last updated" date at the top always reflects the current version. If a change materially reduces your rights, we will notify registered users by email at least 14 days before it takes effect.

11. Contact

Vladyslav Humeniuk
Ukraine
Email: decebel1995@gmail.com

The English version of this document prevails in case of any discrepancy with a translation.