Privacy Policy

Effective date: October 1, 2026. Last updated: October 25, 2026. We train AI on Your Content uploaded on or after October 1, 2026, unless you opt out, and on content uploaded before that date only with your yes, as AI training explains. To opt out, email support@usecutai.com with the subject "AI opt-out". Content uploaded before October 1, 2026, is used to find and fix problems only, unless you give consent for more.

Who we are and what this covers

CUTAI LLC, a Florida limited liability company ("CutAI," "we," "us"), provides the CutAI iPhone app, usecutai.com, and related editing, account, billing and support services (the "Services"). We are responsible for the personal information we handle as described in this policy. Our mailing address is 1484 W Gateway Heights Loop, Sedro-Woolley, WA 98284, United States. Contact us at support@usecutai.com.

This policy covers visitors, account holders, subscribers, affiliate applicants, people who contact us, and people whose information appears in content submitted to the Services. It explains our practices, including when we use other companies to process information. Those companies may also process information under their own policies.

A short summary

• We collect account, payment, device, usage and support information, and the videos, audio, images, transcripts, edits and related data you submit or generate through CutAI.
• Editing sends content to cloud storage, transcription, AI and processing providers. Some editing features also run on your device.
• We use content and app data to find and fix bugs and to improve CutAI. Content uploaded before October 1, 2026 is used this way only to find and fix problems, unless you give consent for more.
• When you accept our Terms, you allow us to train AI on your content uploaded on or after October 1, 2026, unless you opt out, and only to teach CutAI editing styles and methods. We train on content uploaded before that date only with your yes. We never use your content to identify you or to make AI images, videos or voices of anyone. We do not sell or license your content to other companies.
• We use analytics, advertising and attribution services. Advertising disclosures can be a "sale" or "sharing" under US state privacy laws, even without money changing hands.
• You can opt out of AI training at any time by emailing support@usecutai.com with the subject "AI opt-out" from the email on your account, or naming that email in your message. See Your Privacy Choices for this and other rights.
• We do not currently delete uploaded original videos automatically, so they may remain until you delete your account. We may change how long we keep content, including deleting older content, and will update this policy when we do. Deleting an edit does not necessarily delete its server files. Account deletion removes account data and associated uploads, subject to the retained records and copies explained below.

Information we collect

Information you give us

We collect your email address, account name and other profile details you choose to provide, such as a TikTok handle, language and onboarding answers about your work or editing needs. Authentication includes passwords or sign-in tokens, depending on how you sign in. You can use email, Apple or Google sign-in; the available methods depend on where you sign in.

When you subscribe, we and our payment providers process purchase and subscription details, including your plan, price, currency, transaction and customer identifiers, payment status, renewals, cancellations, refunds and purchase channel. Payment details you enter into Stripe or Apple's payment systems are handled by those providers.

When you email us, use the in-app report feature, or send a form, we collect what you send. Our refund request form at usecutai.com/refund collects your name, email, purchase channel, reason and any details you add. Our contact form at usecutai.com/contact collects your name, email, topic and message. Our affiliate application form, hosted on Google Forms, collects the answers you give, such as your name, contact details and social media accounts. When you rate CutAI in the app, we collect your rating and any comment you write. In-app reports can include account and editing identifiers, device and app details, diagnostics, and existing transcript, editing or error information associated with the reported cut.

Your content

We collect videos, audio, images and other material submitted for processing, as well as associated filenames, titles, language, duration, settings and metadata. We generate or receive transcripts, editing decisions, previews, edited results and other data derived from that material. "Your Content" in this policy includes these inputs, outputs and derived data.

Uploads can include your original videos and copies or parts of them that the app prepares for editing, including audio. Original video may leave your phone, including for backup. Video files can also contain details your camera or phone saved in them, such as when and where they were recorded, which can be a precise GPS location if location was on when you filmed. When the app uploads a file as it is, without re-encoding it, those details go with it. Some projects and editor assets remain local unless a feature uploads or shares them. We access your camera, microphone and photo library through device permissions for recording, importing and saving media. We collect a push token if you enable notifications.

Your Content and messages can reveal information about you or others, including faces, voices or sensitive matters you choose to include. Please submit only material you have the right and permission to use.

Information collected automatically

We collect online identifiers, IP addresses, approximate location derived from IP or network information, device and browser details, operating system and app versions, locale, time zone, referrers, page URLs, campaign and ad-click parameters, and cookies or similar identifiers. We also collect interactions with pages, buttons and features; onboarding, authentication, editing, upload and export events; subscription activity; experiment assignments; and errors, performance and diagnostic information.

PostHog helps us understand website, app and processing activity and may link it to your CutAI account identifier. Website collection includes page views and interaction capture. Where enabled, website session replay records page interactions with inputs masked; app replay may capture masked onboarding screens. Sentry may collect crash reports, traces, diagnostic context and masked screenshots, with your CutAI account identifier when you are signed in. Masking reduces exposure but is not a guarantee that every item of personal information is removed.

Information from others

Apple and Google provide sign-in identifiers and profile information when you choose their sign-in services. Apple, Stripe and RevenueCat provide transaction, subscription and entitlement information. Advertising, attribution and referral partners provide campaign, click, install and conversion information. We may combine this with information from your account, your use of CutAI and your communications with us.

How we use information

We use information to:

• Create and authenticate accounts, provide editing and storage, deliver results and notifications, and manage subscriptions, payments, refunds and entitlements.
• Answer questions, investigate editing problems, manage support requests and maintain internal bug and support records.
• Monitor reliability, prevent fraud and abuse, secure the Services, enforce our Terms, resolve disputes and meet legal, accounting and tax obligations.
• Find, investigate, reproduce and fix bugs, errors and crashes; analyze how the Services work and perform; check and improve the quality of edits; run experiments; and maintain, develop and improve CutAI. For these purposes we use Your Content and app data: your device model, operating system and app version, settings, actions in the app, error and crash reports, logs, performance data, and masked screen recordings and screenshots. For content uploaded before October 1, 2026, see the limit in How we use your content.
• Measure advertising and referrals, credit creators, understand which ads lead to installs or purchases, and help advertising partners deliver and measure relevant ads.
• Communicate about your account, service updates and changes to our terms or policies, and send promotional communications where permitted, subject to your choices.
• Train AI models that edit videos, unless you opt out, as explained in AI training.

How we use your content

Providing and evaluating editing

We and our processing providers store, copy, transmit, transcribe, analyze and otherwise process Your Content to make edits, deliver files, keep backups and provide support. Authorized team members may review content to investigate errors, assess quality, address abuse or legal issues and help you.

We also use examples in testing, evaluation and quality review. Our team keeps copies of some customers' videos, audio, transcripts, edits and AI answers on team computers and in our code repository, to investigate and reproduce problems, test fixes and check quality. These copies have no automatic expiry, and deleting an edit or your account does not automatically delete them. You can ask us to delete them. For Your Content uploaded before October 1, 2026, the limit in the next section applies to these copies too: we use them only to find and fix problems, unless you give consent for more. This policy does not retroactively authorize new uses of earlier content.

Finding and fixing problems, and improving CutAI

We collect and use Your Content and information about how you use the Services to find, investigate, reproduce and fix bugs, errors and crashes, to analyze how the Services work and perform, to check and improve the quality of edits, and to maintain, develop and improve CutAI. That information includes your device model, operating system and app version, settings, actions in the app, error and crash reports, logs, performance data, and masked screen recordings and screenshots of the app. Our team and service providers may view, copy and test Your Content and this information for these purposes, and we may keep copies as test material after a problem is fixed. This needs no setting.

For Your Content uploaded before October 1, 2026, we use it this way only to find and fix problems with the Services. Using that earlier content to analyze or improve the Services in other ways needs your consent. None of this is AI training, which AI training explains.

AI and processing providers' own practices

To make your edit, we process your video and audio, including transcribing speech and analyzing the picture. This sends audio, video, transcripts, prompts, editing instructions and outputs to other companies' AI and processing services: speech-to-text providers, AI model providers that analyze transcripts and video to choose edits, and cloud GPU providers, as listed in Companies we use and what they receive. These providers may retain and use the data they receive under their own terms, including to improve their services.

This processing is part of providing the editing service and is separate from CutAI's own AI training described in AI training. It does not change the choices in that section.

AI training

We train AI on Your Content unless you opt out. When you accept our Terms, you allow CutAI to use Your Content uploaded on or after October 1, 2026, to train AI models that edit videos, as described below, until you opt out. You can opt out at any time with one email, as "Opting out" below explains. Opting out costs nothing and changes nothing about your account.

For Your Content uploaded before October 1, 2026, we train only with your yes, given in writing, such as an email to support@usecutai.com. Without that yes, we do not use content uploaded before October 1, 2026, to train AI models. The separate "Help build auto zoom" opt-in, described below, covers only auto zoom.

What we train for

We may train and fine-tune AI models so CutAI edits videos better. The models learn editing styles and methods, such as where to cut, pacing, pauses, retakes, captions, zooms, layout and sound. Training can use your videos, audio, transcripts, edits and data derived from them.

We do not train AI to generate, imitate or recognize anyone's face, body or voice, and we make no AI images, videos or voices of real people. Faces and voices are in the videos, so the training system may process them as part of the video. We never create faceprints or voiceprints, and we never use faces or voices to identify people.

Who does the training

We do not sell, share, sublicense or license Your Content to other companies for their own AI training or their own products. Service providers may host or run training for us under contract, only for CutAI, and may not use Your Content for themselves.

Opting out

To opt out, email support@usecutai.com with the subject "AI opt-out". Send it from the email on your account, or name that email in your message, so we can find your account. You can opt out at any time.

Once we process your opt-out, we add none of Your Content to new training, and we leave it out of training runs that start after that. Opting out does not undo training already done: models already trained are not retrained or made to forget. It costs nothing and does not change your access to CutAI. It does not stop the processing needed to make the edits you ask for, the problem fixing described in How we use your content, or processing required by law.

Record of your choice

We keep your opt-out email, or your written yes for earlier content, and a record of when we processed it. We keep these records so we can honor your choice and show what you chose.

Help build auto zoom

Some versions of the app may offer a separate opt-in, "Help build auto zoom," in Settings. It may be offered to some accounts only. It is a different choice from AI training, with its own switch, and it is off unless you turn it on. An AI opt-out email does not turn it off, and turning it on or off does not change your AI training choice. If you opt out of AI training and want auto zoom off too, turn it off in Settings.

While it is on, each video you export, and each edit you leave without exporting, sends us where and how much you zoomed, how your clips are cut, your edit history and the words spoken in the parts you kept. Our team may also watch the original video. This is linked to your account. We use it only to build, train and test CutAI's automatic zoom, and we never sell it or share it with other companies. We keep each example for up to 90 days.

You can turn it off at any time in Settings. We stop collecting right away and delete what you shared from our servers the next time you are online and signed in. Deleting a project deletes what it shared, and deleting your account deletes all of it. Zoom features already built with your edits are not changed.

How we share information

• Service providers: cloud hosting, storage, database, authentication, editing, transcription, AI processing, diagnostics, communications and support companies, and the AI, code hosting and other software tools our team uses to investigate problems and test fixes, receive information relevant to their work for us. Providers that host or run AI training for us receive the content we train on under contract, only for CutAI.
• Analytics providers: receive device, usage, account and subscription information to measure performance, understand activity and evaluate features.
• Advertising, attribution and referral partners: receive identifiers, activity and conversion data to measure campaigns, match activity across services, deliver advertising and credit referrals. Some of these disclosures are "sale" or "sharing" under state law.
• Payment providers: receive billing information and return purchase and subscription records to us. They also process data for their own payment, fraud prevention and legal purposes.
• At your direction: we share information when you ask us to, including when you export and share a video through another app or service.
• Business transfers: information may be disclosed during a proposed or completed merger, financing, acquisition, reorganization, sale of assets or similar transaction.
• Legal and protection purposes: we may disclose information to comply with law or valid legal process, enforce agreements, investigate fraud or abuse, or protect rights, safety and property.

Companies we use and what they receive

The information a company receives depends on the features you use and which services are enabled. This section describes the main companies and roles. We do not sell or license Your Content to other companies for their own AI training or products.

AI and processing providers

Making your edits, and our team's work on CutAI, sends personal information, including Your Content, to other companies' AI and processing services. We name these companies by category:

• Speech-to-text providers: audio from your videos, with its language and settings, to turn speech into text. Audio and finished videos from selected edits may also be used to test speech-to-text services for CutAI. They process data in the United States and may keep and use it under their own terms.
• AI model providers that analyze transcripts and video to choose edits: video, audio, transcripts, prompts and editing instructions, sent directly or through a service that routes AI requests, to decide what to keep and how to edit your video, and, for selected edits, to test changes to CutAI. They process data in the United States and may also process it in other countries, and they may keep and use it under their own terms.
• Cloud GPU providers: video, audio, transcripts, temporary file links, editing instructions and results, to process your media and render your edited video. They process data in the United States and may keep and use it under their own terms.
• AI tools our team uses for coding, testing and support: support emails and messages, and the account, billing, diagnostic and content information, including customer files and test material from selected edits, that our team works with while investigating problems, testing fixes and answering support requests. Our AI-assisted support workflow also uses them to sort mail and draft replies. Using these tools does not mean every editing upload is sent to them. They may process data in the United States and in other countries, and may keep and use it under their own terms.

We will tell you the specific companies on request. Email support@usecutai.com.

Other companies we use

• Supabase: account credentials and tokens, profile and subscription records, media and derived editing data, support reports, device tokens and operational records for authentication, database and file storage. Its infrastructure uses Amazon Web Services in the United States. We also use cloud storage providers in the United States for storing content.
• Fly.io: video, audio, transcripts, editing instructions, temporary file links, results and operational information to run our servers and processing. Fly.io servers are in the United States.
• Vercel and Cloudflare: website requests and network information for hosting, DNS and routing. Vercel hosts our website, handles submitted requests and provides approximate country information and web analytics. Cloudflare also provides network routing and secure access for internal review pages our team uses to watch edits, so content from selected edits passes through it.
• Google: sign-in information when you choose Google; and website/device/activity, campaign and transaction information for Google Analytics and Google Tag Manager. Our Google Analytics integration uses pseudonymous identifiers, not names, email addresses or card details. Google Workspace handles support email, including its contents and attachments. Google Forms hosts our affiliate application form and receives your answers.
• PostHog: online and account identifiers, IP-derived location, website/app interactions, onboarding and subscription activity, experiment assignments, performance and processing events; and masked replay where enabled. Account identifiers can connect activity across the website and app. Subscription analytics may also arrive through RevenueCat.
• Sentry (Functional Software): errors, crashes, diagnostic context, performance traces, editing or operation identifiers, your account identifier when you are signed in, and masked app screenshots where enabled.
• Stripe: website billing details, name, email, account and transaction identifiers, plan and subscription information, offers, referral and campaign information, and associated network/ad identifiers for payments and related records.
• Apple: sign-in information; App Store purchases, restores and subscription transactions; and push tokens, notification contents and routing identifiers for notifications. Some notifications may include your cut's title. Apple iCloud can store copies of files on our team's devices, including test videos taken from selected edits.
• RevenueCat: account identifiers, purchase, restore and subscription history, and attribution information where enabled, to manage app entitlements and subscription reporting. In app versions with Apple Ads attribution, the app gives RevenueCat Apple's attribution token, and Apple tells RevenueCat which Apple Ads campaign, ad group and keyword led to your install. We keep that with your account to measure our ads. It does not use App Tracking Transparency permission.
• Appstack: with App Tracking Transparency permission, install and account identifiers, app/device and campaign information, approximate location, install/open/signup events and subscription transaction information for advertising attribution.
• Meta (Facebook and Instagram): website/device information, IP address, browser and click identifiers, account/event identifiers, activity, plan and conversion details, and hashed email addresses or names for matching. The app SDK receives install/open and purchase information, app/device details and IP address; some purchase paths can include receipts and transaction history. The app does not collect the advertising identifier through this SDK.
• TikTok: website/device information, IP address, browser and click identifiers, account/event identifiers, activity, plan and conversion details, and hashed email addresses or names for matching. Our website uses TikTok advertising tools.
• Tolt: referral and campaign information, click and account/customer identifiers, email addresses for referred leads, and subscription/payment information associated with affiliate commissions.
• Notion Labs, Inc. and Linear: support messages, reports and related details for support boards, internal notes and bug tracking. Refund and contact form submissions are stored in Notion in the United States, and our team reads them and replies by email. See Notion's privacy policy.
• GitHub (Microsoft): our code repository and the test material kept in it, which can include transcripts, AI answers and audio from selected edits.

Our AI-assisted support tools run from the team's own computer and use models from the AI tools described above to sort email, draft replies and send them. Support replies may be written and sent with AI help. A person on our team sets the rules these tools follow, checks their work and handles anything that needs a decision, such as refunds and account changes. Drafts and the support board are kept in Notion; relevant messages may also be copied to Linear or internal Notion notes.

Advertising, tracking and App Tracking Transparency

Our website uses Meta and TikTok pixels and server-side conversion reporting, Google Analytics through Google Tag Manager, PostHog, Tolt and Vercel Web Analytics. Advertising partners may combine information from CutAI with information from other services. Meta and TikTok automatic advanced matching may collect names or emails entered on the website in hashed form. Our server reporting also sends hashed identifiers and, for some partners, IP address and browser information. Hashing enables matching; it does not make information anonymous.

The app may ask for Apple's App Tracking Transparency (ATT) permission for advertising attribution. If you allow it, Appstack can collect and link the attribution information described above. If you deny it or later turn it off, the app's Appstack integration stops new tracking sends and requests removal of its attribution identifier from RevenueCat. This does not erase historical records or necessarily stop information already queued or server-side records.

The Meta app SDK runs independently of ATT and does not use the device advertising identifier. Core account services, billing, PostHog analytics and Sentry diagnostics also do not depend on ATT permission. Denying ATT is therefore not a switch that turns off every analytics or service data flow. The choices below explain other controls.

Cookies and similar storage

We use cookies, pixels, local storage and session storage for authentication, checkout, referrals, offers, analytics and advertising. Our Cookie Policy lists the website's cookies and storage, their purposes and available controls. Vercel Web Analytics counts page views without cookies. Viewing legal pages in the app can still make website requests and load website tools, although PostHog is suppressed in the embedded legal sheet.

Your Privacy Choices

AI training

AI training covers Your Content uploaded on or after October 1, 2026, unless you opt out. To opt out, email support@usecutai.com with the subject "AI opt-out", from the email on your account or naming that email in your message. Once we process it, we honor your choice for new training. We may need enough information to connect the request to your account. There is no fee and opting out does not change your access to CutAI. See AI training for what opting out does and does not do.

Sale, sharing and targeted advertising

You may ask us to not sell or share your personal information or use it for targeted advertising by emailing support@usecutai.com or using our contact form. State that you are making a sale/sharing or targeted-advertising opt-out and identify the account or browser activity concerned. You may exercise this right independently of your AI training choice. We handle these requests through support; there is no automatic site-wide privacy switch today.

You can also change ATT permission in iOS Settings, use Meta and TikTok's advertising settings, and block advertising scripts or cookies with your browser's privacy controls. These controls do not necessarily stop server-side conversion reporting or delete information already held by a partner. A choice made in one browser or device may not apply to another.

Analytics and device controls

You can block analytics scripts or cookies and use Google's Analytics opt-out browser add-on. The website recognizes the Google Analytics disable setting for that integration; it is not a general opt-out for other tools. There is currently no in-app analytics switch. Contact support@usecutai.com to request an analytics opt-out or to exercise an objection right. Browser blocking alone may not stop account-linked server analytics.

Our website does not currently implement automatic handling of Global Privacy Control (GPC) or Do Not Track signals. Please use the request methods above to tell us your choice. You can manage camera, microphone, photo-library, notification and tracking permissions in your device settings. You can unsubscribe from promotional emails using the instructions in them or by contacting us; service and legal notices may still be sent.

Access, correction and deletion

You can update available account details in the app and request access, correction, a copy of your information or deletion by emailing support@usecutai.com or using our contact form. In the app, open You, then Delete account, to request account deletion. Export files you want to keep first. Deleting your account does not cancel a subscription, whether you bought it on our website or through Apple. Cancel any active subscription first, where you bought it: on your account page for a website plan, or in your Apple subscription settings for an Apple plan, so you are not billed for a plan you no longer use. Deleting the app alone does not delete your account or cancel a subscription.

People appearing in submitted content may also contact us to exercise their rights. We may need information to locate the content and verify the request. The following retention section explains information that can remain after deletion.

Retention and account deletion

We do not currently delete uploaded original videos automatically, so they may remain until you delete your account. We may change how long we keep content, including deleting older content, and will update this policy when we do. Stored edits, transcripts, AI answers and some files prepared to make your edits can also remain while you have an account; there is no single short expiry for all content. Deleting an individual edit marks it deleted and removes local copies but may leave server files and records in place. Expiration of a download link does not delete its file.

Account deletion removes your login, profile, associated editing records and uploaded files through our deletion process. It does not erase every copy immediately. Separate processing records, caches, logs and backups have their own cleanup schedules; unfinished processing records and some saved records may last longer. Provider deletion requests may fail or require separate handling. Contact us if you need help with a remaining record.

We retain billing and transaction records after account deletion where needed for accounting, taxes, reconciliation, fraud prevention, disputes and legal obligations. These can include Stripe customer and event records, unmatched payments (which may include an email address), spend entries, and RevenueCat or Apple subscription event records. Ongoing Apple subscription events may create further records until the subscription is cancelled.

Support email, Notion and Linear records, diagnostics, analytics, and saved test examples may remain separately from your account. The copies our team keeps of some customers' videos, audio, transcripts, edits and AI answers, on team computers and in our code repository, do not have an automatic expiry and are not deleted automatically when you delete an edit or your account. You can request their deletion, subject to applicable rights and exceptions. Information already held by AI, payment, advertising and other providers is also subject to their retention practices and legal obligations; deleting your CutAI account does not automatically delete all of it.

For records without a fixed expiry, we assess retention by their purpose, the need to provide or improve the Services, resolve requests and disputes, protect against abuse, meet legal requirements and respect your choices. We may retain de-identified information that no longer identifies you. We do not promise a specific deletion deadline for all systems or that a completed model can be made to forget particular training data.

Security

We use technical and organizational measures to protect information, including authentication, access controls and restrictions on access to operational data. No system, network transmission or storage method is completely secure. We cannot guarantee that information will never be accessed, lost or disclosed without authorization. Protect your credentials and contact us if you suspect unauthorized access.

Children

CutAI is for people 18 and older. We do not knowingly permit people under 18 to create accounts or use the Services, including with parental permission. If you believe a person under 18 has provided personal information to us, contact support@usecutai.com so we can investigate and take appropriate steps to remove the account and information. Adults submitting content involving minors must have the necessary rights and permissions; that does not permit a minor to use CutAI.

International processing

CutAI is based in the United States, and our hosting, database and file storage include infrastructure in the United States. Our providers may process information in other countries, whose privacy laws may differ from those where you live. When a transfer requires a legal safeguard, we will use the safeguards required by applicable law, such as approved contractual terms or another valid transfer mechanism. Contact us for information about the safeguards applicable to your information. This policy does not represent that every provider uses the same location or transfer arrangement.

US state privacy rights

Categories, sources, purposes and disclosures

The following describes the categories of personal information collected and disclosed in connection with the Services during the preceding 12 months. Which categories apply to you depends on your use and what you submit. The collection, use and recipient sections above provide the details.

• Identifiers and California customer-record information: names, emails, account and device IDs, online identifiers, IP addresses, authentication data and billing-related information. Sources are you, your device, sign-in/payment services and attribution partners. Uses include accounts, service delivery, billing, support, security, analytics and advertising. Disclosures go to the relevant hosting, authentication, payment, support, analytics and advertising companies described above.
• Commercial information: plans, purchases, payments, subscription history and service activity. Sources are you, the Services, Apple, Stripe and RevenueCat. Uses include providing entitlements, accounting, analytics, attribution and disputes. Disclosures go to infrastructure, payment, analytics and attribution providers.
• Internet or other electronic network activity: page visits, referrers, campaigns, feature interactions, editing events and diagnostics. Sources are devices, the Services and analytics/attribution partners. Uses include operation, security, improvement, experiments, analytics and advertising. Disclosures go to infrastructure, diagnostic, analytics and advertising providers.
• Geolocation: approximate location (city, region or country) derived from IP or network information and, where a video file you upload contains it, the location saved in that file, which can be precise. Sources are device/network information, providers and the files you upload. Uses include displaying currency, analytics and attribution; location saved in a video file is stored and processed with that file. Disclosures go to the relevant infrastructure, analytics and attribution providers, and to the storage and processing providers that receive the file.
• Audio, visual and other sensory information: submitted videos, audio, images, transcripts and related results, and masked screenshots or replays where enabled. Sources are you, content uploaders, the Services and processing providers. Uses include editing, support, diagnostics, quality review and AI training, unless you opt out. Disclosures go to storage, processing, AI, support or diagnostics providers, and to the AI, code hosting and review tools our team uses to investigate problems and test fixes. We do not sell this content or license it to other companies.
• Inferences: interests or preferences reflected in onboarding answers, usage, campaign attribution and experiments. Sources are you and your activity. Uses include understanding users, improving CutAI, experiments and advertising measurement. Disclosures go to relevant analytics and attribution providers.
• Sensitive personal information: account login credentials, precise location saved in video files you upload, and any sensitive information you choose to include in content or communications. Sources are you and content uploaders. We use credentials to authenticate and protect accounts. Content is processed for the purposes and subject to the permissions described in this policy, including consent where required. Disclosures go to the providers needed for those purposes.

We do not request protected characteristics, professional/employment records or education records as separate eligibility records, but you or another uploader may include that information in videos, onboarding answers or messages. We handle it according to its context as described above. We do not ask for a location permission, although video files you upload can contain the precise location your camera saved, as described above. We do not create biometric identifiers to identify people as described below. Retention for these categories is explained in the retention section, rather than a single account-lifetime rule.

Sale and sharing

In the preceding 12 months, advertising and attribution disclosures have included identifiers, customer-record information such as contact details used for matching, commercial information, internet activity, approximate location and related inferences. The recipients include Meta, TikTok, Appstack and other advertising, analytics or referral partners as described above. Disclosures for cross-context behavioral advertising are "sharing" under California law and may also be "sale", including where the consideration is a service rather than money.

We do not sell Your Content or license it to other companies for their own AI training or products. AI training is done only by or for CutAI, and you can opt out of it at any time. We do not knowingly sell or share the personal information of people under 18.

Your rights and requests

Subject to applicable law and its exceptions, California residents may:

• Know and access the categories and specific pieces of personal information collected, the sources, business or commercial purposes, categories of recipients, and categories sold or shared.
• Request deletion or correction, and obtain a portable copy of information.
• Opt out of sale or sharing, including cross-context behavioral advertising.
• Limit uses and disclosures of sensitive personal information where that right applies.
• Exercise rights without unlawful discrimination, including denial of service or different prices or quality for exercising a privacy right.

Residents of other US states with applicable privacy laws may have similar rights, including access, correction, deletion, portability, opting out of targeted advertising, sale or certain profiling, and rights concerning sensitive information. Where available, you may also request information about specific third-party recipients or appeal a refusal. Our automated editing and advertising measurement do not make decisions about eligibility for employment, credit, housing or similarly significant services.

Use Your Privacy Choices, email support@usecutai.com, or send our contact form. To request a limit on sensitive information, identify that request in your message. We will respond within the time required by applicable law and explain any permitted extension or refusal. You can appeal by replying with "Privacy appeal"; where applicable, we will explain the result and how to contact your state attorney general or other regulator.

For access, correction and deletion requests, we verify identity using information appropriate to the request, such as control of the account email and matching existing account details. We ask only for information reasonably needed to verify and locate records and use it for that purpose. We do not require an account just to submit a request. Sale, sharing and targeted-advertising opt-outs do not require identity verification, though we may ask for the identifiers needed to apply your choice.

An authorized agent may submit a request. We may require proof of authorization and, where permitted, confirmation from you; a valid power of attorney is handled as applicable law requires. California residents may also request information about disclosures for third parties' direct marketing under California's Shine the Light law using the same contact details.

Faces, voices and biometric information

CutAI processes faces and voices in media to perform editing, including transcribing speech and analyzing the picture, such as finding where a face is in the frame. Some of this happens on your device. We do not create faceprints or voiceprints to identify people. Face detection and speech processing are not used by CutAI to recognize who a person is.

AI training, which you can opt out of at any time, teaches CutAI editing styles and methods. We do not train AI to generate, imitate or recognize anyone's face, body or voice, and we make no AI images, videos or voices of real people. The training system may process faces and voices as part of the video, but we never create faceprints or voiceprints and never use them to identify people. See AI training.

Content may nevertheless contain identifying or sensitive information, and AI providers process it as described above. Before collecting or using biometric identifiers, we will obtain any consent required by applicable law and provide the required information about purpose, retention and disclosure. This policy is not a substitute for that consent.

Camera Retouch

Added October 14, 2026. Camera Retouch, the optional beauty filter in the CutAI camera, uses Apple's on-device face detection to place its effects. The facial points it finds stay in memory on your phone and are never stored or sent, not to CutAI, our analytics providers or anyone else, and they are not written into your videos. A video recorded with Retouch on is the retouched picture and is handled like any other video you record.

Your Retouch choices are kept on your phone. App analytics may record that you opened Retouch, whether it is on, its slider levels and how smoothly it ran, but never your facial points, any measurement of your face, or the foundation shade you pick.

EEA, UK and Switzerland

If applicable data protection law in the European Economic Area, United Kingdom or Switzerland governs your information, CUTAI LLC is the controller for the processing described in this policy. Our legal basis depends on the purpose:

• Contract: processing needed to create and manage your account, provide requested editing, deliver results and administer payments and subscriptions.
• Legitimate interests: operating and protecting the Services, preventing fraud, handling support and disputes, understanding, testing and improving reliability and quality, and training AI models that edit videos on Your Content uploaded on or after October 1, 2026, where our interests are not overridden by your rights. We assess the purpose and context. You can object to AI training at any time with an AI opt-out, as described in AI training.
• Consent: AI training on Your Content uploaded before October 1, 2026, rests on your written yes, and you can withdraw it at any time with an AI opt-out. Some tracking, advertising, sensitive-information and third-party AI uses also require consent. "Help build auto zoom" rests on its own consent. Our website does not currently ask for tracking consent before loading its analytics and advertising tools, and the app's Meta SDK and PostHog analytics also start without asking. For other uses that need it, we will obtain any consent required by law or platform rules before starting them. You may withdraw consent for future consent-based processing.
• Legal obligations: recordkeeping, responding to lawful requests, tax and other duties imposed by law.

The licenses in our Terms do not by themselves establish a lawful basis under data protection law. AI training on content uploaded on or after October 1, 2026, relies on our legitimate interests, and you can object to it at any time; any legally required consent must be obtained first.

Subject to applicable law, you can access, correct, erase, restrict processing, receive a portable copy, withdraw consent, and object to processing based on legitimate interests, including direct marketing. You may have rights concerning solely automated decisions with legal or similarly significant effects. Contact support@usecutai.com or use our contact form. Withdrawing consent does not affect the lawfulness of processing before withdrawal.

You may complain to the data protection authority where you live or work or where an alleged infringement occurred. In the UK this is the Information Commissioner's Office (ICO); in Switzerland it is the Federal Data Protection and Information Commissioner (FDPIC). You can contact us first, but you do not have to do so to complain to a regulator. See the international processing section for transfers outside your region.

Other platforms and services

If you sign in, pay, export or share through another platform, its privacy policy also applies to its handling of information. The same applies if you contact us through a social or community platform, such as Discord, Instagram or TikTok. We collect the information you send us there, but do not control the platform's own processing. Review its policy and privacy controls.

Changes to this policy

We will update the date above when this policy changes. For material changes, we will give notice by email, in the app or through another prominent notice before the change takes effect; changes to our Terms follow their notice requirements, including at least 14 days for material changes. We will obtain fresh consent where required. Updating this policy never extends AI training to content uploaded before October 1, 2026, without your yes, and never overrides an AI opt-out you have sent us. The October 1, 2026 limit on earlier content cannot be bypassed by merely updating this policy.

Contact us

For privacy choices, questions or requests:

CUTAI LLC
Email: support@usecutai.com
Contact form: usecutai.com/contact
Mail: 1484 W Gateway Heights Loop, Sedro-Woolley, WA 98284, United States