Privacy Policy

Clipflow Privacy Policy

Last Updated: February 24, 2026

Clipflow (“we”, “our”, “us”) provides a platform that helps individuals, creators, agencies, and businesses plan, manage and collaborate on content. This Privacy Policy explains what information we collect, why we collect it, how we use it, and the choices you have.

1. What Information We Collect

Account Information

When you create a Clipflow account, we collect:

• Name
• Email address
• Profile photo (optional)
• Workspace and organization details

Project & Workspace Content

You may choose to store projects, notes, files, media, tasks, scripts, comments, and other information inside Clipflow. You control this data. We store and process it on your behalf.

2. Third-Party Integrations

Clipflow allows you to connect third-party platforms using secure OAuth authentication. We request only the permissions necessary to provide our features.

We do not store your passwords for third-party services. You may revoke access at any time in the respective platform’s security settings.

Instagram & Meta Platform Data

If you connect your Instagram account via Meta Login, Clipflow uses the Instagram Graph API and may request the following permissions:

• instagram_basic
• instagram_manage_insights

When authorized by you, we may access:

• Instagram Business or Creator account ID
• Username and profile information
• Media metadata (captions, timestamps, media IDs)
• Public engagement metrics (likes, comments, reach, impressions)
• Insights data, including follower counts and performance analytics

We access this data only after you explicitly grant permission during the Meta authorization flow.

How We Use Instagram Data

We use Instagram data solely to:

• Display account analytics inside Clipflow
• Provide performance insights dashboards
• Help users evaluate content effectiveness
• Improve reporting and workflow planning features

We do not:

• Sell Instagram data
• Use Instagram data for advertising
• Share Instagram data with third parties for marketing purposes

Instagram data is only used to provide the functionality requested by the user.

You may revoke Clipflow’s access to your Instagram account at any time via Meta App Settings. If access is revoked, we will no longer retrieve new Instagram data. To request deletion of Instagram data we have already stored, see Data Deletion Instructions below or email team@clipflow.co.

YouTube

Clipflow uses YouTube API Services. By connecting your YouTube account to Clipflow, you agree to be bound by the YouTube Terms of Service. Google’s Privacy Policy describes how Google treats your personal data when you use YouTube and related services.

Data we access. When you connect YouTube via OAuth, we may access and store (as needed to provide our features):

• Your YouTube channel information (e.g. channel ID, title, description)
• Video and playlist metadata (e.g. titles, descriptions, thumbnails, view counts)
• Other data made available by the YouTube Data API and related services, according to the permissions you grant

We request only the scopes necessary for the features you use (e.g. reading channel and video data to display and manage content inside Clipflow). We do not store your YouTube login credentials.

How we use it. We use YouTube data only to provide Clipflow (e.g. displaying your channels and content, showing channel and post analytics, and organizing and planning content). We do not sell YouTube data, use it for advertising, or share it with third parties for marketing.

Revoking access and deletion. You may revoke Clipflow’s access to your YouTube data at any time via Google’s security settings. In addition to our general process for deleting third-party integration data (see Data Deletion Instructions below), we will delete stored YouTube/API data associated with your account as soon as possible and in any event within 7 calendar days of your requesting deletion or account closure, and within 30 calendar days of your revoking access via Google’s Security Settings.

For questions or complaints about our use of YouTube data, contact team@clipflow.co.

Future Integrations

Future third-party API connections will follow the same principles:

• OAuth authentication
• Least-required permissions
• No password storage
• User-controlled revocation

Payment Information

Payments are processed by Stripe. We do not store credit card details.

Usage & Analytics Data

We use PostHog to understand how Clipflow is used so we can improve the product. PostHog may collect:

• Device type
• Browser information
• Feature interactions
• Navigation patterns
• Session replay data (interface interaction only)

When logged in, certain analytics events may be associated with your Clipflow account for troubleshooting and product improvement. We do not use this data for advertising purposes.

3. Advertising & Tracking Pixels

We may use advertising pixels and similar technologies to:

• Measure marketing effectiveness
• Understand website interactions
• Display relevant advertisements (retargeting)

These technologies may collect:

• IP address
• Device or browser information
• Pages viewed or actions taken
• Hashed identifiers

You may opt out of personalized ads via Meta Ad Settings or your browser cookie settings.

Instagram data accessed through the Instagram Graph API is not used for advertising or retargeting.

4. Data Storage & Retention

Clipflow stores data using AWS infrastructure, including Amazon S3.

We retain:

• Account data for as long as your account is active
• Instagram insights data only as long as necessary to provide analytics features
• Backup data for limited periods for security and disaster recovery

When you delete content or close your account:

• Data is removed from active systems
• Residual copies may remain temporarily in backups
• Backup systems automatically cycle and purge over time

5. Data Deletion Instructions

If you would like data from a third-party integration deleted:

1. Remove Clipflow’s access in the respective platform’s settings (e.g. Meta Business Integrations for Instagram; Google security permissions for YouTube).
2. Email team@clipflow.co with your deletion request.

Upon verified request, we will:

• Delete stored account data from that integration
• Remove associated insights and analytics records
• Confirm deletion completion

For YouTube data specifically, we delete stored data as soon as possible and within 7 calendar days of a deletion request or account closure, and within 30 calendar days of access revocation via Google’s Security Settings, in line with YouTube API Services requirements.

6. How We Share Information

We may share information with:

• Hosting providers (AWS)
• Payment processors (Stripe)
• Email service providers
• Analytics providers (PostHog)

We may disclose information if required by law. We do not sell personal information.

7. Data Controller / Data Processor

• Account and billing data: Clipflow is the Data Controller.
• Workspace/project content: Clipflow acts as a Data Processor on behalf of the user or organization.
• Third-party integration data: Clipflow acts as a Data Processor of data you authorize via the respective platform (e.g. Meta).

8. Your Rights

You may:

• Access, update, or delete your account
• Request deletion of third-party integration data
• Revoke integrations at any time
• Manage cookie preferences

To exercise these rights, contact team@clipflow.co.

9. Security

We use:

• Encryption in transit (HTTPS)
• Encrypted storage
• Fine-grained permissions and access (controlled by user)
• Monitoring and logging
• Industry-standard infrastructure security

No system is completely secure, but we continuously improve safeguards.

10. Changes to This Policy

We may update this Privacy Policy periodically. If significant changes occur, we will update the date above and notify registered users where appropriate.

11. Contact

For privacy-related inquiries, email us using our contact page.