Privacy Policy

<!-- DRAFT ONLY. Review with legal counsel before publishing. TODO: Replace operator legal identity, address, retention schedule, and rights handling details if needed. -->

This Privacy Policy explains how CrossClips collects, uses, stores, and shares personal information when you use the CrossClips website, applications, waitlist flows, and support/contact channels (the "Service").

This is a draft policy prepared for a CrossClips launch configuration that uses Supabase, Firebase Analytics, Mixpanel (during analytics migration), and Razorpay.

Who controls your data

CrossClips is currently operated as an individual/independent software product.

• Controller/Operator: TODO (individual legal name if different from CrossClips)
• Contact email: hello@crossclips.app
• Business address: TODO (business/service address)

Scope of this policy

This policy covers personal information processed through:

• the public website and marketing pages;
• account registration and sign-in flows;
• billing and subscription management flows;
• waitlist and referral forms; and
• support and contact submissions.

It does not cover third-party services you access separately, even if linked from CrossClips.

Information we collect

Information you provide directly

Depending on how you use CrossClips, you may provide:

• name and email address;
• account profile information;
• support/contact messages and attachments sent outside the contact form (for example by email);
• billing support details (such as payment/subscription reference IDs);
• waitlist preferences and referral information; and
• any other information you choose to submit.

Account and authentication information

When you create or use an account, CrossClips and its authentication providers may process:

• account identifiers;
• sign-in session information;
• email verification status; and
• security-related logs needed to protect accounts and investigate abuse.

Usage and diagnostics information

CrossClips may collect technical and usage information, including:

• device/browser/app metadata;
• approximate timestamps of usage events;
• page visits and interaction events;
• error/debug information; and
• performance and reliability metrics.

Billing and payment information

CrossClips uses Razorpay to process payments.

CrossClips generally does not store full card numbers or complete payment instrument details. CrossClips may receive limited billing metadata from Razorpay, such as:

• payment status;
• payment/subscription IDs;
• amount and currency;
• billing timestamps; and
• limited payer contact details provided during checkout.

Support and contact form submissions

When you use the Contact Us page or email support, CrossClips may store:

• your name and email;
• category/subject of request;
• message contents;
• optional billing reference information;
• technical metadata (for abuse prevention and delivery troubleshooting); and
• communication history related to the request.

Waitlist and referral information

If you join the waitlist or use referral features, CrossClips may collect:

• signup details (name, email, preferences);
• referral codes;
• referral attribution metadata; and
• ranking/eligibility signals for waitlist prioritization.

How we collect information

CrossClips collects information:

• directly from you when you submit forms or use the Service;
• automatically through the app/website when you interact with pages and features;
• from payment processor callbacks and billing systems (Razorpay);
• from infrastructure/service providers used to host, authenticate, and operate the Service.

How we use information

CrossClips uses personal information to:

• provide and operate the Service;
• create and manage accounts;
• process subscriptions and billing support requests;
• respond to customer support, privacy, and legal inquiries;
• maintain security, detect abuse, and enforce terms;
• improve reliability, product quality, and user experience;
• analyze usage trends (subject to consent where required); and
• comply with legal obligations.

Analytics and cookies (Firebase Analytics and Mixpanel)

CrossClips may use Firebase Analytics for website traffic and click analytics and may temporarily use Mixpanel during analytics migration or validation.

• Essential storage/cookies may be used for core site/app functionality.
• Optional analytics tracking is enabled only after you accept analytics in the site consent prompt.
• If you decline analytics, essential functionality remains available, and optional Firebase Analytics and Mixpanel tracking is suppressed for consent-gated events.

CrossClips may update analytics implementations over time. Material changes will be reflected in this policy.

Payments (Razorpay)

CrossClips uses Razorpay as the payment processor for subscription billing and related payment events.

When you make a purchase, your payment information is handled according to Razorpay's policies and terms. CrossClips receives limited billing metadata necessary to activate, verify, renew, support, and reconcile subscriptions.

Service providers and processors

CrossClips may share information with service providers that process data on CrossClips' behalf, including categories such as:

• Supabase (database, authentication, edge functions, backend infrastructure);
• Razorpay (payment processing and subscription billing);
• Firebase Analytics / Google Analytics (analytics, when consented);
• Mixpanel (temporary analytics migration/validation, when consented);
• email delivery providers (for contact or transactional notifications); and
• hosting, logging, and infrastructure providers used to operate CrossClips.

These providers are authorized to process information only as needed to provide services to CrossClips, subject to their contractual and legal obligations.

Sharing and disclosure

CrossClips may disclose information:

• to service providers described above;
• to comply with legal obligations, lawful requests, or court orders;
• to protect rights, safety, and security of CrossClips, users, or others;
• in connection with a merger, acquisition, or asset transfer (subject to notice where appropriate).

CrossClips does not sell your personal information in the ordinary meaning of "sell" for money.

Data retention

CrossClips retains information only as long as reasonably necessary for the purposes described in this policy, including support, billing, security, and legal compliance.

Current operational default (subject to update):

• contact submissions: up to 24 months unless a longer period is required for legal, fraud, or billing dispute reasons;
• billing records/metadata: retained as needed for accounting, tax, and dispute resolution;
• analytics data: according to Firebase Analytics / Google Analytics and Mixpanel retention settings (where used) and internal needs.

Data security

CrossClips uses reasonable technical and organizational measures to protect information from unauthorized access, alteration, disclosure, or destruction.

No system is completely secure, and CrossClips cannot guarantee absolute security.

International processing and transfers

CrossClips and its providers may process data in multiple countries depending on hosting, analytics, payment, and infrastructure providers. By using the Service, you understand that information may be transferred to and processed in jurisdictions with different data protection laws than your own.

Your choices and rights

Depending on your location, you may have rights to:

• access the personal information CrossClips holds about you;
• request correction or deletion;
• object to or restrict certain processing;
• withdraw consent for optional analytics (where processing is consent-based);
• request data portability, where applicable.

To make a request, email hello@crossclips.app. CrossClips may need to verify your identity before responding.

Children's privacy

CrossClips is not directed to children under 18, and CrossClips does not knowingly collect personal information from children under 18. If you believe a child has provided personal information, contact hello@crossclips.app so CrossClips can review and take appropriate action.

Changes to this Privacy Policy

CrossClips may update this Privacy Policy from time to time. The latest version will be posted on this page with an updated date. If changes are material, CrossClips may provide additional notice through the website, app, or email.

Contact for privacy requests

For privacy questions, requests, or complaints:

• Email: hello@crossclips.app
• Contact page: Contact Us