CrossClips Privacy Policy

Effective Date: March 16, 2026
Last Updated: March 16, 2026

CrossClips (“we”, “us”, or “our”) provides an encrypted cross-device clipboard synchronization service that helps users securely copy and access clipboard items across multiple devices.

We are committed to protecting privacy through privacy-by-design principles and strong encryption. CrossClips operates as the Data Fiduciary under India’s Digital Personal Data Protection (DPDP) Act, 2023.

1. Privacy at a Glance

• Service: Encrypted cross-device clipboard synchronization
• Data Fiduciary: CrossClips
• Processing Basis: User consent (free, specific, informed, unconditional, and unambiguous)
• Principal Rights: Information, correction, erasure, grievance, and nomination
• AI Disclosure: Local AI features only; no training on user data by default
• Retention: User-controlled clipboard history; deletion available anytime
• Grievance SLA: Resolve grievances within a maximum of 90 days

2. What We Collect

We collect only what is required to operate CrossClips:

Account + Identity

• Email address
• Authentication tokens/identifiers

Devices

• Device identifiers (device ID, platform type)

Clipboard Sync

• Encrypted clipboard payloads
• Clipboard metadata (clip ID, timestamps, device source)

Billing (if applicable)

• Payment metadata (transaction ID, subscription status)

Diagnostics

• Crash/performance logs
• Support communications

Clipboard content is always encrypted before transmission, so our servers cannot read it.

3. Security & Encryption

CrossClips uses a zero-knowledge design:

• Clipboard data is encrypted on the user’s device before it leaves the device
• Encryption uses AES-256-GCM
• Servers store only encrypted payloads
• Encryption keys remain under user control
• All communications use HTTPS

Because encryption occurs client-side, CrossClips cannot access clipboard content.

4. Cross-Device Synchronization

To synchronize between devices, encrypted clipboard items may be transmitted through CrossClips relay servers.

• Data is transmitted and stored in encrypted form
• Relay servers cannot decrypt clipboard content
• Clipboard items may be stored temporarily only for synchronization

5. AI Transparency

CrossClips may offer optional AI-assisted features, such as intelligent search or link detection.

• AI processing happens locally whenever possible
• Clipboard data is not used to train machine learning models
• CrossClips does not perform behavioral profiling

6. Third-Party Service Providers

We rely on service providers for infrastructure and payments, including:

• Supabase: authentication and encrypted database infrastructure
• Razorpay: payment processing
• Google Firebase: crash reporting and performance monitoring

These providers are bound by appropriate contractual safeguards.

7. Data Retention

• Clipboard history: retained according to user settings and deleted when the user deletes it
• Account data: retained until account deletion
• Crash logs: retained up to 12 months
• Payment records: retained as required by applicable law

Account deletion triggers removal of associated encrypted data within 48 hours.

8. Your Rights (DPDP Act)

Users have the right to:

• Request information about personal data processed
• Correct inaccuracies
• Request erasure (subject to lawful grounds)
• Raise grievances
• Nominate a person to exercise rights

Requests can be made via the contact information below.

9. Children’s Privacy

CrossClips is not intended for individuals under 18 years of age. We do not knowingly collect personal data from minors without verifiable parental consent.

10. Sensitive Clipboard Content

Clipboard systems may temporarily include sensitive data such as passwords, one-time codes, private keys, or banking information.

Users should avoid storing highly sensitive data in clipboard history. CrossClips encrypts clipboard data, but users remain responsible for what they copy and retain.

11. International Users

CrossClips follows privacy-by-design principles aligned with the DPDP Act and GDPR-inspired best practices.

12. Grievance Redressal

Grievance Officer: CrossClips Support
Email: hello@crossclips.app

We acknowledge grievances within 72 hours and aim to resolve them within 90 days. If unresolved, users may approach the Data Protection Board of India.

13. Changes to this Policy

We may update this Privacy Policy periodically. Significant changes will be communicated via website notices or email. Changes take effect 30 days after notification.

14. Contact

Email: hello@crossclips.app
Website: https://crossclips.app

---

CrossClips is built with a privacy-first architecture to ensure users retain control over their data.