Last updated · 27 August 2026

Privacy Policy

Short version: we take an email address, a short brief and your footage, we edit the video, we deliver it, and then we delete the files. We do not sell anything to anyone, and we do not use your footage to train models.

The controller for the data described here is Cutin24. For anything about your data — a copy, a correction, a deletion — write to hello@cutin24.com and we act within 30 days. Full registered details are available on request at the same address.

01

What we collect, and why

Order data. Your email address, the brief you write (hook, what the video is about, call to action, things to avoid), your style choices and any add-ons. We need it to do the work and to send you the result. There is no account and no password.

Payment data. Handled by Stripe. We receive a confirmation and a reference, never your card number.

Your footage. The files you upload, and the finished edit we produce from them.

Website usage. Basic server logs, and — only if you accept analytics — anonymised product events so we can see which parts of the site are used.

02

The part most policies skip: other people in your footage

UGC footage almost always contains an identifiable person — you, a creator you hired, or someone who happened to be in shot. That is personal data, and it is not yours by default.

For that footage, you are the controller and we are your processor. We only process it to produce the edit you ordered, on your instructions, and we delete it on the schedule below or sooner if you ask. We do not use it for anything else — not marketing, not samples, not model training — unless you separately say yes.

It is your responsibility to have the consent of the people who appear. If you need a written data processing agreement for your own compliance, ask and we will sign one.

03

Who else touches your data

We use a small number of providers. Each one only gets what it needs to do its job:

ProviderPurposeRegionWhat they see
StripePayment processingUS / EUYour name, email, billing country, card data (we never receive the card number)
Cloudflare R2Storage of your footage and the finished editConfigurable regionYour uploaded files and the delivered video
VercelHosting the websiteUS / global edgeIP address, request logs
SupabaseOrder databaseEUOrder record: email, brief text, choices, add-ons, status
ResendTransactional emailUS / EUYour email address and the message we send you
PostHogProduct analyticsEUAnonymised usage events, only if you accept analytics

Where an editor other than the operator works on your video, they get access to your footage for that order only, under a confidentiality agreement, and lose access when the order closes.

04

How long we keep it

Source footage: 30 days after delivery, then deleted.

The finished edit: 90 days, so you can re-download it, then deleted.

Order records (email, amount, date) are kept as long as tax and accounting law requires, which is longer than the files themselves.

Ask us to delete earlier and we will, unless we are legally required to keep a record.

05

Why we are allowed to process it

Order and footage data: because we need it to perform the contract you entered when you ordered.

Fraud prevention and basic server logs: our legitimate interest in running the service safely.

Analytics and any non-essential cookie: your consent, which you can withdraw at any time.

Invoices and accounting records: our legal obligation.

06

Your rights, and how to use them without an account

You can ask for a copy of your data, correction, deletion, a portable export, or object to processing based on legitimate interest. Where processing rests on consent, you can withdraw it.

Because there is no account, we identify you by the email address on the order. Write to hello@cutin24.com from that address and we will act within 30 days. If you think we handled it badly, you can complain to your local data protection authority.

07

Cookies and analytics

The site needs a small number of strictly necessary cookies to work — for example to keep your order together through checkout. Those are always on.

Analytics only runs if you accept it. Decline and the site works exactly the same; we just see less. We do not run advertising or cross-site tracking cookies.

You can change your mind at any time — your choice is stored in your own browser, not on our servers, so clearing site data resets it.

Current setting: Analytics declined

08

Transfers, security and children

Some providers above are based in the United States, so data may be transferred there under the appropriate safeguards, including standard contractual clauses.

Files are transferred over TLS and stored in private buckets. Download links are signed and time limited. Access is limited to the people working on your order.

The service is not for under-18s and we do not knowingly collect their data. If a video features a minor, that is your responsibility to have consent for — see the terms.

09

Changes

If we change how we use your data, we update this page and the date at the top. Material changes affecting existing orders are emailed to the address on the order.