NinjaClips is operated from the United Kingdom. This policy explains how we handle personal data under the UK GDPR and the Data Protection Act 2018. For that data, NinjaClips is the controller.
What we collect
- Account data. Your email address, and a display name, handle and avatar if you set them. If you sign in with Google, we receive your email address and basic profile from Google, not your password.
- Files you submit to the scene tools, and the outputs generated from them.
- Usage data. Jobs run, credits spent, features used, and pages viewed.
- Marketplace data. Listings, purchases, payouts, and the storefront details you choose to publish.
- Billing data. Payment status, customer identifiers, the last four digits of a card and its expiry. We never receive or store your full card number.
- Technical data. IP address, device and browser information, and logs, collected to keep the service secure and working.
- Support data. What you tell us when you get in touch.
Why we hold it, and on what basis
- To provide the service — running jobs, keeping your account, delivering purchases, paying sellers. Basis: performance of our contract with you.
- To take payment and prevent fraud. Basis: contract, and our legitimate interest in not being defrauded.
- To keep the service secure and reliable — logging, rate limiting, abuse investigation. Basis: legitimate interests.
- To understand how the product is used so we can improve it. Basis: legitimate interests, or your consent where analytics cookies require it.
- To meet legal obligations — tax, accounting, and responding to lawful requests. Basis: legal obligation.
- To send service emails. Basis: contract. Marketing email, if we ever send it, goes only to people who opted in, and every message carries an unsubscribe link.
We do not sell personal data, and we do not share it for advertising.
Files you submit
Files you submit to the scene tools are processed to produce the outputs you asked for. They are stored so that you and the processing infrastructure can access them while the work runs and while the results remain available in your account, and they may pass through our hosting, storage and processing providers as part of that.
We do not use your files to train models, and we do not publish them or make them available to other users. Staff access is limited to what is needed to investigate a fault or a report of abuse. You can delete a job and its outputs from your account, and deletion removes them from active storage; residual copies in backups age out on the normal backup cycle.
The index
The character index records publicly published work: titles, links, creator handles and public counts from the platform each item was published on. It is information about published material, not about our users. If you are a creator and want an entry removed, email [email protected] or see our copyright and takedown policy.
Who processes data for us
We keep the list short and use established providers. By role, these cover application hosting, database, object storage, video processing infrastructure, payments, transactional email, error monitoring and product analytics. Each acts on our instructions under a data processing agreement, and receives only what its role requires.
Payments are handled by Stripe, which acts as an independent controller for its own compliance purposes and processes your card details directly. Sellers who take payouts complete onboarding with Stripe, including any identity checks Stripe requires.
Cookies
We set cookies that are strictly necessary to sign you in, keep your session, and protect the service. These do not require consent. Where we use analytics cookies, we ask first, and you can change your answer at any time. Blocking non-essential cookies does not restrict your access.
International transfers
Some providers operate outside the UK. Where data is transferred, we rely on UK adequacy regulations or on the International Data Transfer Agreement or Addendum, together with appropriate safeguards.
How long we keep things
- Account data — while your account is open, then removed on closure other than what we must keep.
- Files and outputs — while they remain available in your account, or until you delete them.
- Billing and tax records — six years, as UK tax law requires.
- Security logs — a short rolling window, kept only as long as useful for security.
- Support email — while needed to handle the matter and any follow-up.
Your rights
You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to how we use it, or to receive it in a portable form. Where we rely on consent, you can withdraw it at any time. Email [email protected] and we will respond within one month.
If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk, though we would rather you told us first so we can fix it.
Security
Access to production systems is restricted and authenticated, data is encrypted in transit, and stored files are held in private storage that is not publicly listable. No service can promise perfect security, and we will tell you and the regulator without undue delay if a breach affects your data.
Children
NinjaClips is not for under-16s. We do not knowingly collect their data, and we will delete an account promptly if we learn it belongs to one.
Changes
We may update this policy. The date above always shows the current version, and we will give notice of material changes in the product or by email.
Contact
Any privacy question, request or complaint: [email protected].