Privacy
What we hold, and who else sees it.
Last updated 31 July 2026. No cookie banners to click through and no list of “trusted partners” without names. Everything below is specific.
The short version
- We store your email, your workspace, your uploaded footage and the videos made from it.
- We do not train models on your footage, sell it, or share it with anyone except the processors named below, who only touch it to do their job.
- We never see your card. Stripe handles payment and we only get the last four digits and the expiry.
- Ask us to delete your account and everything goes within 30 days.
What we collect, and why
Your email address. It is how you sign in, since there are no passwords, and how we send receipts and the note before a trial ends. Without it there is no account.
Your footage and the files made from it. Your uploads, the transcript, the edit, the finished videos, any avatars or music you generate. That is the product.
Billing records. What you were charged, when, and whether it succeeded. Stripe holds the card itself, we hold the record of the charge.
How the app is used. Which pages loaded and which actions ran, so we can find what is broken and what costs us money. Page analytics run through Plausible, which does not use cookies and does not build a profile of you.
What you write to support. Your messages and any screenshots you attach, so somebody can answer them.
We do not buy data about you, and we do not track you across other websites.
Who else touches it
Cutroom is not one machine. These companies process part of your data so the product can work. Each one gets only what its job needs.
- Supabase stores the database and runs sign-in.
- Cloudflare R2 stores your video files.
- Vercel hosts and serves the app.
- Stripe takes payments and holds the card.
- Resend sends our email.
- Deepgram transcribes the audio of what you upload.
- Anthropic reads the transcript to propose an edit.
- ElevenLabs generates voice-overs and music beds.
- fal.ai generates presenter (avatar) video.
- Trigger.dev runs the background work: renders, bakes, exports.
- Pexels and Pixabay supply stock footage. They receive a search phrase, never your video.
Some of these are in the United States, so your data is transferred there. Where that transfer needs a legal basis under European law, it rests on the European Commission's standard contractual clauses.
If we replace one of these, this page changes with it. That is the point of naming them.
AI, specifically
Parts of Cutroom send your content to the models above: the audio goes to Deepgram to be transcribed, the transcript goes to Anthropic to be read.
None of them are permitted to train on your content, and we do not train anything on it either. The providers process it, return a result, and that is the end of it.
We keep a record of the prompts and responses so a bad edit can be debugged and so we can see what each call costs. Those records are deleted with your account.
How long we keep things
Your files stay while your account does. Delete a project and its files go with it.
Close your account and everything is deleted within 30 days, except the billing records tax law requires us to keep for seven years. Those are amounts and dates, not your footage.
Support conversations are kept for two years so we can look back at what was said.
What you can ask for
A copy of what we hold. A correction. Deletion. To object to us processing something. Email support@cutroomai.com and we will answer within 30 days. There is no form and no fee.
If you are in Europe and think we have handled something badly, you can complain to your national data protection authority. In the Netherlands that is the Autoriteit Persoonsgegevens. We would rather you told us first.
Cookies
We set a cookie to keep you signed in, and one to remember which workspace you are in. If you arrived through a partner link, a third remembers who sent you so they get paid.
That is all of them. No advertising cookies, no trackers, and therefore no banner asking you to accept any.
Security, and what happens if it fails
Traffic is encrypted, files are stored privately and served through links that expire, and access to the database is restricted per workspace at the database itself rather than only in the app.
No system is perfect. If your data is exposed in a way that puts you at risk, we will email you within 72 hours of finding out, and tell you what happened rather than what our lawyers would prefer.
Children
Cutroom is sold to businesses and is not for anyone under 18. We do not knowingly hold data about children. If we learn we have, we delete it.
Changes
If we change something that matters, we will email you before it takes effect. The date at the top always says when this page last moved.