This notice explains how IloClip ("IloClip", "we"), [registered address to be confirmed], handles personal data. We design to the EU and UK General Data Protection Regulation as a common baseline and comply with Nigeria's Data Protection Act 2023.
Who is responsible
- Your account, billing, support, security and analytics data: IloClip is the controller.
- People who appear or speak in recordings you upload: you decide what to upload, and IloClip processes their data for you, as your processor, under our Terms of Service.
What we collect
- Account: name, email address, password (stored only as a strong one-way hash), two-factor settings, sign-in sessions and the documents you accepted.
- Your content: the recordings you upload, the audio we extract, transcripts, clips, captions, titles and exports.
- Billing: your plan, payments, invoices and billing details. Card details go directly to Paystack; we never see your full card number.
- Usage and security: minutes used, actions in the app, the IP address and device information of requests, and audit records.
- Messages: emails you send to support and reports you make.
Faces and voices
To frame clips, our software finds where faces are in the picture and which face is speaking. It only works out positions in each frame. We do no face recognition, do not identify anyone and store no face templates or embeddings: we keep only crop positions. Speaker labels such as "S1" and "S2" apply to one recording and are never linked to an identity.
Why we use it (lawful bases)
| Use | Lawful basis |
|---|---|
| Running your account and signing you in | Contract |
| Processing your uploads into clips | Contract (for people in your recordings, we act on your instructions) |
| Billing and tax records | Contract; legal obligation |
| Security, fraud and abuse prevention | Legitimate interests |
| Product analytics with pseudonymous identifiers | Legitimate interests |
| Marketing emails | Consent, which you can withdraw at any time |
We do not use your recordings, transcripts or clips to train artificial intelligence models.
Who processes data for us
We use a small number of service providers (subprocessors), each under a data processing agreement. They include our speech-to-text provider (ElevenLabs), our language model provider for choosing moments, titles and English captions (Anthropic), our payment provider (Paystack) and our email provider (Zoho ZeptoMail). The full list is on the Subprocessors page, and we give 30 days' notice before adding one.
AI providers receive only the audio or text needed for a task, under settings that keep no copy or the shortest copy they offer, and never for longer than 30 days. They may not use it to train their models.
We share data with authorities only when the law requires it, and report child sexual abuse material to the competent authorities.
International transfers
Some providers process data outside Nigeria, the EU or the UK. Each transfer has a documented safeguard: an adequacy decision, the EU standard contractual clauses or the UK addendum, and the transfer conditions of Nigeria's Data Protection Act.
How long we keep it
| Data | Kept for |
|---|---|
| Source recordings, preview copies and extracted audio | 7 to 30 days after upload, depending on your plan, or until you delete them |
| Exports (MP4, SRT, WebVTT) | 7 to 30 days after creation, depending on your plan |
| Transcripts, clips and their revisions | The life of the project |
| Uploads you abandon | 24 hours |
| Deleted projects | 7 days, while you can restore them |
| Account data | The life of the account; deleted within 30 days of account deletion |
| Backups | 35 days, rolling |
| Billing records | As tax law requires (6 years) |
| Security and audit logs | 12 months |
| Copyright and abuse report records | 3 years |
Your rights
You can access, correct, delete and export your data, object to or restrict some uses, and withdraw consent. You can download your data and delete your account in your settings. For anything else, email privacy@iloclip.com; we check your identity and answer within 30 days. You can also complain to a data protection authority, such as the Nigeria Data Protection Commission.
Security
We encrypt data in transit and at rest, keep uploads in private storage reachable only through short-lived links, process media in an isolated sandbox, and limit staff access, which is recorded. If a breach puts you at high risk we tell you without undue delay, and we notify regulators within 72 hours where the law requires.
Children
IloClip is for adults aged 18 and over and is not directed at children.
Cookies
We use only the cookies the service needs to work. See the Cookie Notice.
Changes and contact
We will tell you about material changes before they apply. Questions: privacy@iloclip.com, or write to IloClip, [registered address to be confirmed].