Legal
Privacy Policy
AstraClip (astraclip.pro) turns long videos into short clips. This policy explains what data we collect, why we need it, who we share it with and how you stay in control of it.
1. Who we are and how to reach us
The AstraClip service at astraclip.pro is run by AstraClip (“we”, “us”). We are the controller of the personal data processed in the service and are responsible for how it is handled.
- Operator
- AstraClip
- Website
- astraclip.pro
2. What we collect and why
We collect only the data the service cannot work without.
Your account
- Email address — so you can sign in, confirm your registration and reset your password, and so we can send you service emails.
- Password — we store only a scrypt hash of it, computed with a unique salt. We never store the password itself and cannot see it.
- Sign-in with Google — if you sign in with Google, Google gives us your email address, whether Google has verified it, and your Google account ID, so we recognize you next time. We don't receive your Google password, name, photo or other account data, and we don't store Google access tokens.
- Account records — your sign-up and last sign-in dates, and session and one-time link tokens (also stored only as hashes).
Your videos and what we make from them
- Source videos — the files you upload and the links you give us. We download a video from its link to our server in order to process it.
- Results — finished clips, preview images, subtitles, the transcript of the speech and the clip plan (the selected moments, titles, descriptions, tags and scores), plus the job settings.
- Brand kits — the name, the logo (an image you uploaded), the outro’s colors and text, and the caption style. A job made with a brand kit keeps its own copy of the kit, logo included.
We need this data to make your clips, show them to you, let you download them and, if you choose, publish them. Videos can show people’s faces and voices, so only upload what you have the rights to (see the Terms of Use).
Your plan and minutes
- Plan — which plan you are on, for what term and until when it is paid, your extra minutes, how many add-on channels you have and until when, and whether you have used your trial publication.
- Minutes usage — how many minutes of source video each completed job used, and when.
We need this data to count the minutes you have left and to apply your plan’s limits. We hold no payment data such as card numbers: payments in the service are not connected yet.
Technical data
- Server logs — IP address, browser and device information (user agent), and the time and address of requests.
- Error reports — when something goes wrong in the web interface, your browser sends us the error description, the page address and which account it happened in.
We use this data to keep the service secure (for example, to limit password-guessing attempts) and to find and fix bugs.
Social media accounts
If you connect social media accounts to publish clips, we store their identifiers — see section 4.
Legal bases
We process data to perform our contract with you (the Terms of Use), on the basis of the consent you give when you sign up, in our legitimate interest in keeping the service reliable and secure, and where the law requires it. Processing is automated: we collect, store, use, share with the providers listed in section 5 and delete data only as far as these purposes require.
4. Publishing to social networks
You can publish finished clips to your own social media accounts right from AstraClip. YouTube, Telegram, TikTok, Instagram, Facebook, Threads, X, LinkedIn, Pinterest and Bluesky are available. Publishing is optional: until you connect an account, nothing is sent to any social network.
How it works
Connecting accounts and publishing are handled by our technical partner, Zernio (ZERNIO SOFTWARE SL, Spain), which processes data on our behalf. The sign-in window and the permissions screen are shown by the platform itself (for example, Google) for Zernio’s app.
Zernio stores the access tokens for your accounts. AstraClip never receives or stores them, and neither AstraClip nor Zernio ever sees your social media password. Telegram connects through Zernio’s bot, which you add as an administrator of your channel yourself. Bluesky connects with an app password you create in its settings (not your main password): it passes through our server to Zernio once and is not stored here.
What AstraClip stores
- your Zernio profile IDs (one for each connected channel);
- for each connected account: its ID, platform, and username or channel name, so we can show you where a clip will go;
- for each publication: which clip went to which account, the title, post text or description, tags and settings you chose, and the post’s ID, link and status;
- a channel’s autopilot settings, if you turned it on: how many clips to take, the times to post and your browser’s time zone.
What we send when you publish
When you publish a clip, we send Zernio the video file and the texts you approved — title, post text or description, and tags — along with the privacy and scheduling settings you chose and the platform’s own settings (for TikTok: who can see the video, whether comments, Duet and Stitch are allowed, whether it is commercial content, and your agreement to TikTok’s terms). Zernio uploads them to the platform on your behalf and deletes the uploaded media after about 7 days. A scheduled clip is sent to Zernio shortly before its time. We never publish anything unless you tell us to: a clip goes out only when you publish or schedule it, or when an autopilot you turned on for the channel puts it in the queue. Batches and the autopilot use the texts the publish dialog suggests for each clip, and anything in the queue can be cancelled before it goes out.
Publishing to YouTube
Publishing to YouTube uses YouTube API Services, through Zernio. By publishing to YouTube you agree to the YouTube Terms of Service, and the data Google receives is handled under the Google Privacy Policy.
Disconnecting an account
- In AstraClip: Accounts → Disconnect. The account is removed from Zernio, and the identifiers we stored are deleted from our database. Publications scheduled for that account are cancelled.
- In the platform’s own settings. For Google and YouTube, you can revoke access at myaccount.google.com/permissions; on Telegram, remove Zernio’s bot from the channel’s administrators; on Bluesky, delete the app password; elsewhere, use the platform’s connected apps settings. Publishing to that account then stops working; to remove its data from AstraClip as well, disconnect it under Accounts.
Publication records (the texts, post ID, link and status) stay in the job’s history until you delete the job.
Disconnecting an account or deleting data in AstraClip does not remove videos already published on the platform. To delete them, use the platform itself, for example YouTube Studio.
To learn how Zernio handles data, see the Zernio Privacy Policy.
6. How long we keep data
- Account data — for as long as your account exists. If you ask us to delete your account, we delete it and the related data within 30 days, except what the law requires us to keep.
- Clips, transcripts and clip plans — until you delete the job. Deleting a job removes the source video, the clips, the copy of the brand kit and all intermediate files from the server. Uploads that never became a job are deleted automatically.
- Source videos — after processing, the source is kept for up to three days so that you can edit the clips in the clip editor, and is then deleted (sooner if the server runs low on space). The video of a failed job is kept so that the job can be retried, but never longer than the job itself.
- Brand kits — until you delete them.
- Plan and minutes usage — for as long as your account exists. Records of used minutes stay after a job is deleted, because the minutes you have left are counted from them.
- Connected social media accounts — while the account is connected; when you disconnect it, its data is deleted right away. Zernio deletes media sent for publishing after about 7 days. Records of published posts stay in the job’s history until you delete the job.
- Links and sessions — an email confirmation link is valid for 48 hours, a password reset link for 2 hours and a sign-in session for 30 days.
- Technical logs — kept in a size-limited, rotating archive: older entries are deleted automatically as new ones arrive.
We may introduce automatic deletion of old videos and clips. If we do, we will update this policy in advance and state the retention periods.
7. How we protect data
- All connections to the site are encrypted with HTTPS.
- Passwords are stored only as scrypt hashes with a unique salt, and session and one-time link tokens only as hashes.
- The session cookie is protected with the HttpOnly and SameSite flags, so scripts on the page cannot read it.
- Every user sees only their own jobs and files, and files on the server are accessible only to the service itself.
- We hold no access tokens for your social media accounts: Zernio does.
- Only the service’s administrators have access to the servers. They open your jobs only when you ask for help, to investigate a failure or abuse, or when the law requires it.
No system is perfectly secure. If an incident affects your data, we will tell you and, where the law requires it, the relevant authority.
8. Your rights
You can:
- find out what data we process about you and get a copy of it;
- have inaccurate data corrected;
- delete any job yourself, under Jobs, or ask us to delete your account and all its data;
- disconnect your social media accounts under Accounts;
- withdraw your consent to processing, in which case we delete your account and data, except what the law requires us to keep;
- ask us to restrict processing, or object to it, where the law provides for this.
To exercise these rights, write to us (see section 1). Please write from the email address of your account so we can confirm that the request comes from you. We respond within the time limits set by law, usually within 10 business days.
If you live in Russia
We process personal data in accordance with Federal Law No. 152-FZ “On Personal Data” of 27 July 2006. By signing up, you consent to the processing of your personal data on the terms of this policy. Your consent remains valid for as long as your account exists or until you withdraw it. If you believe we are violating your rights, you can complain to Roskomnadzor, the Russian data protection authority, or go to court.
If you live elsewhere
If you are in the European Union, the United Kingdom or another country with similar data protection laws, you have the rights set out in the GDPR or your local law: access, rectification, erasure, restriction of processing, data portability and objection. You can also lodge a complaint with your local data protection authority.
9. Children
AstraClip is not intended for children. You must be at least 13 to use it — 14 if you live in Russia — or older if the law of your country sets a higher age. We do not knowingly collect data from children below that age. If you learn that such a child has signed up, contact us and we will delete their account and data.
10. Changes to this policy
We may update this policy, for example when we add features or change providers. The date at the top of the page shows when the current version took effect. We will tell you about material changes in advance by email or in the service, and if the purposes for which we use your data change, we will ask for your consent again.
This version is effective as of .