Privacy Policy

Essentiala Ltd, a company registered in England and Wales, is the data controller for personal data processed through Cutly.

For anything in this policy, contact support@cutly.video.

We deliberately collect little. In full, it is:

• Account: your email address, and an encrypted form of your password if you set one. We never see the password itself.
• Onboarding answers: what you sell, your preferred vibe, your editing experience and your main goal. Four values, used to steer edits.
• Usage: how many videos you have generated in the current month, and a row per project with its title and status.
• Subscription state: your plan, billing period, status and renewal date, plus the Stripe customer and subscription identifiers.
• Footage you upload, and the video produced from it, for as long as the retention windows below allow.
• Standard server logs, including IP address, kept briefly for security and debugging.

We do not use advertising or analytics cookies, and there is no tracking pixel on this site. The only cookies set are the ones that keep you signed in.

We do not receive or store your card details — Stripe handles payment data directly.

We do not sell personal data, and we do not share it for anyone else’s marketing.

Performance of a contract: we need your account details, footage and usage counts to provide the service you asked for.

Legitimate interests: keeping the service secure, preventing abuse of the free tier, and fixing faults.

Legal obligation: keeping records of transactions for tax and accounting.

We do not rely on consent for any of the above, so there is no consent to withdraw — but you can delete your account at any time.

We use a small number of processors, each bound by contract to handle data only on our instructions:

• Supabase — authentication, database and file storage. Hosted in the EU (London region).
• Stripe — payment processing and subscription management.
• OpenAI — transcription and the language analysis that structures your video. Audio and transcript text are sent for processing and are not used to train their models under our agreement.
• Vercel — application hosting and content delivery.

Some processors operate outside the UK. Where data leaves the UK we rely on the UK International Data Transfer Addendum or an adequacy decision, so your data keeps equivalent protection.

Raw footage you upload: deleted within 24 hours of processing.

Finished exports: kept for 30 days so you can download them again, then deleted.

Account, onboarding answers, usage counts and subscription state: kept while your account is open, and deleted within 30 days of you closing it.

Transaction records: kept for six years, because tax law requires it.

Server logs: kept for 30 days.

Under UK GDPR you can ask us to:

• give you a copy of the personal data we hold about you
• correct anything inaccurate
• delete your account and the data attached to it
• restrict or object to certain processing
• provide your data in a portable format

Email support@cutly.video and we will respond within one month. There is no charge.

Account deletion is currently handled by email rather than a button in the app — we would rather do it by hand and confirm it than ship a delete flow we have not tested properly.

If you are unhappy with how we have handled your data you can complain to the Information Commissioner’s Office at ico.org.uk.

Data is encrypted in transit and at rest. Access to production data is restricted, and database access rules prevent one account from reading another’s data even if the application were compromised.

No system is perfectly secure. If a breach affects your personal data and is likely to be a risk to you, we will tell you and the ICO within the timeframes the law requires.

Cutly is not intended for anyone under 18. We do not knowingly collect data from children, and will delete any account we discover belongs to one.

The "last updated" date above always reflects the current version. Material changes will be notified by email to account holders.