Privacy Policy

MirrorCut ("we") makes the AI video editor at mirrorcut.ai. This policy explains what personal data we collect when you use our website, the MirrorCut editor and its apps, why, and the choices you have. We are responsible for your personal data (the "data fiduciary" or "controller"). Questions or requests: email hello@mirrorcut.ai.

You give us

• Account details: your name, email address and password (stored only as a secure hash). If you sign in with Google, we receive your name, email address and profile picture from Google.
• Your content: the videos, audio, images, fonts and logos you upload; your projects, edits, brand kits and exports; and the prompts and messages you send MirrorCut's AI agent.
• Case studies, only if you share one: your consent (when you gave it and to which version of the text), the details you chose to show, and a summary of the project's edit history (counts and kinds of changes, lengths and formats, never your transcript or chat messages unless you pick some to show).
• Billing details: your plan and billing history. Card details go straight to Stripe, our payment processor; we never see or store your full card number.
• Messages to us: what you write when you email us for support or with a request.

We collect automatically

• Security and sign-in data: the IP address you signed up from, and the IP address and browser of each signed-in session, used to keep your account secure and to prevent abuse such as repeated free sign-ups.
• Usage: which features you use, the AI credits you spend, upload and export minutes, and storage used, to run your plan and show you your usage.
• Technical logs: errors and performance data from our servers, to keep MirrorCut working.
• Website analytics: how visitors use our public website, described in Analytics and cookies below.

We don't collect sensitive personal data on purpose, and we don't knowingly collect data from anyone under 18.

• To provide MirrorCut: store your projects, make the edits you ask for, run the AI features, render and export your videos.
• To run your account and plan: sign-in, the free trial, billing, credits and usage limits.
• To email you about your account: verification, security, billing and important changes.
• To keep MirrorCut safe: prevent fraud and abuse, enforce our Terms, and meet legal duties, including reporting child sexual abuse material.
• To fix and improve MirrorCut, using usage data and logs, not the content of your videos.
• To answer your questions and requests.
• If you choose to share a video as a case study: to publish the video, the details you picked and numbers from that project on a page at mirrorcut.ai (and on our social media if you agreed). Only with your consent, which you can withdraw at any time.

We process your data because it's needed to provide the service you signed up for, because you consented (for example, to analytics cookies), because we have a legitimate interest in keeping MirrorCut secure and working, or because the law requires it.

We never use your uploads, projects, prompts or exports to train AI models, and we don't sell them.

When you ask MirrorCut to edit, your content is sent to the AI providers that do that part of the job: speech is transcribed, the agent plans the edit, and some features generate new voice, music, images or video. These providers, listed below, process your content to provide their service to us, under their business API terms.

AI output can be wrong. Our Terms explain your responsibilities when you publish what you make.

We don't sell your personal data or share it for advertising. We share it only with service providers who process it for us:

• Amazon Web Services: hosting, databases and storage of your account, projects and media.
• OpenRouter: routes requests to AI model providers (such as the makers of the language and video models we use) that plan edits and understand your footage.
• AssemblyAI: transcribes speech in your recordings.
• ElevenLabs and Higgsfield: generate voice, sound and video when you ask for generated media.
• Stripe: payments and invoices. Stripe's payment form, shown when you pay, sets its own cookies to prevent fraud.
• Resend: sends our account emails, such as email verification and password resets.
• Google: Google sign-in (if you use it), Google Analytics on our website, and Google Fonts, which the editor loads for caption fonts (Google receives your IP address and browser details when the fonts load).
• Stock media libraries (Pexels, Pixabay, Freesound, Openverse, Wikimedia Commons, ccMixter and NASA's image library): when MirrorCut looks for B-roll, music or sound effects, it sends them search words, never your account details or footage.

We may also disclose data when the law requires it, to protect people's safety (including children's), to enforce our Terms, or as part of a merger or sale of MirrorCut, in which case this policy continues to apply to your data.

Your account, projects and media are stored on Amazon Web Services in the United States. Our service providers may process data in other countries where they operate. Wherever your data goes, we protect it as this policy describes and use the safeguards the law requires for international transfers, such as standard contractual clauses.

• Your account, projects and uploads: for as long as your account is open. You can delete projects and media at any time.
• When you delete your account (in Settings, or by asking us): your name, email address and profile picture, your projects, uploads, exports, brand kits and fonts, and the AI request logs linked to you are deleted, and any paid plan is cancelled. Copies in backups are removed when those backups are deleted.
• What a deleted account keeps: an anonymous record with no name or email, holding your billing history (plan, credits and usage), Stripe's one-way fingerprint of the card you used, and the network address you signed up from. We keep it as tax and accounting law requires, and to stop the same card or network being used for another free trial. If you were ever invoiced, Stripe also keeps your customer record and invoices for as long as that law requires, usually several years.
• Sign-in and security data, such as the network address you signed up from: while your account is open, then on the anonymous record above. Server logs: only as long as we need them to run and secure MirrorCut.
• A shared case study: until you withdraw it or delete the project or your account. Then the page and its copy of your video are deleted, and we keep only a record that you consented and when you withdrew (the version of the text, the times, and whether you allowed social media), as proof of consent.
• Website analytics: Google Analytics keeps detailed visit data for 2 months.

Depending on where you live, including under India's Digital Personal Data Protection Act, 2023 and the EU and UK GDPR, you can:

• see the personal data we hold about you and get a copy of it;
• correct data that is wrong or incomplete;
• delete your data and your account, which you can do yourself in Settings;
• withdraw consent you gave, such as for analytics cookies, at any time;
• object to or restrict some processing, and get your data in a portable format;
• nominate someone to exercise your rights if you die or become unable to;
• complain to us, and to your data protection authority (in India, the Data Protection Board of India).

To use any of these rights, email hello@mirrorcut.ai from the address on your account. We reply as soon as we can, within the time the law allows. You can download your exported videos from MirrorCut at any time. California residents: we don't sell or share personal information for cross-context behavioural advertising.

We protect your data with encryption in transit (HTTPS), hashed passwords, access controls that limit who can reach production data, and signed, time-limited links for your media. No system is perfectly secure; if a breach affects your personal data, we'll tell you and the authorities as the law requires.

MirrorCut is only for people aged 18 or older. We don't knowingly collect personal data from children; if we learn we have, we delete it and close the account. See our Child Safety Standards.

We use Google Analytics to understand how people find and use the MirrorCut website, so we can improve it. It runs only on our public website and the sign-in and sign-up pages. It doesn't run inside the MirrorCut editor, and it never sees your videos, uploads, projects or prompts.

Cookies only if you say yes

On your first visit we ask whether you accept analytics cookies. Nothing is stored in your browser for analytics until you click Accept. If you decline, or haven't chosen yet, Google Analytics runs without cookies: the page sends Google basic signals, such as that a page was viewed, with no cookie and no ID that could recognise you on a later visit. As with any website, Google still receives your IP address and browser details with the request; it uses these signals only to estimate overall traffic.

What is measured

• The pages you visit and the website or search that brought you here.
• Your approximate location (country and city), worked out from your IP address. Google Analytics doesn't store IP addresses.
• Your type of device, browser, operating system, screen size and language.
• How you use pages: scrolling, clicks on links to other sites, video plays and file downloads.
• That an account was created, and how (for example, with email). Never your name or email address.

Not used for advertising

We switch off every advertising feature of Google Analytics: no ad cookies, no remarketing, no ad personalisation, and no sharing with ad networks.

Cookies we set

Both are set only after you accept. Your choice itself is remembered in your browser's local storage (as mirrorcut.analytics-consent), stays on your device, and isn't sent to anyone. Signing in to MirrorCut uses separate cookies that are needed to keep you signed in.

Google's role

Google LLC provides Google Analytics and processes this data for us; it may be processed in the United States and other countries where Google operates. See how Google uses information from sites that use its services and Google's Privacy Policy.

Change your choice

You can change your mind at any time. Turning analytics off also deletes the Google Analytics cookies from this browser.

You can also block cookies in your browser's settings, or install Google's Google Analytics opt-out add-on, which works on every website.

We'll update this policy as MirrorCut changes. If a change is significant, we'll tell you by email or in the app before it applies, and the date at the top of this page will change.

For questions about this policy, a request about your data, or a complaint, email hello@mirrorcut.ai. MirrorCut is responsible for MirrorCut and this website.