Privacy

The data controller for personal information processed in connection with Clipora is Dong Yang. Contact: support@tunovpn.com.

Postal address and further operator details are set out in our Imprint.

We collect personal information that you provide and that is generated when you use the service:

• Account information: email address, password (stored hashed), and profile details from Google if you sign in with OAuth.
• Billing and credits: purchase email, credit packs, and payment status. Payment instruments are processed by Stripe; we do not store full card numbers.
• Generation content: text prompts, optional reference images you upload, job status and metadata, and generated video files needed to provide the studio.
• Website and service logs: IP address, user-agent, and similar technical data for security and reliability.

We use personal information to provide and operate Clipora, authenticate users, run video generation jobs, manage credits and billing, provide support, improve reliability and security, prevent abuse, and comply with legal obligations. We do not sell your personal information.

Where the EU General Data Protection Regulation (GDPR) applies, we process personal information on the following legal bases:

• Performance of a contract (Art. 6(1)(b)) — to create your account, generate videos, and process credit purchases.
• Legitimate interests (Art. 6(1)(f)) — security, fraud prevention, and service integrity, balanced against your rights.
• Consent (Art. 6(1)(a)) — where you choose OAuth sign-in or other optional processing; you may withdraw consent at any time.
• Legal obligation (Art. 6(1)(c)) — where we must retain or disclose information to comply with law.

We share personal information with processors and providers only as needed to run the service:

• Stripe — payment processing (see Stripe’s privacy notice).
• Google — if you use Google sign-in.
• Object storage providers — to store uploaded reference images and generated video files (S3-compatible storage).
• Hosting and infrastructure providers — to operate the website, API, and workers.

Service infrastructure and processors may process data in the European Economic Area and outside the EEA. Where personal data is transferred outside the EEA, we use appropriate safeguards such as Standard Contractual Clauses where required.

We retain account and service data for as long as your account is active and as needed to provide the service. Generated media and job records may be retained while needed for download and support, then deleted or anonymized where feasible. Billing and tax records may be kept longer where required by law.

Under GDPR (where applicable), you may have the right to access, rectify, erase, restrict, or port your personal data, to object to certain processing, and to withdraw consent. You also have the right to lodge a complaint with a supervisory authority in Germany (for example, the data protection authority of the federal state where you live or where we are established).

To exercise these rights, contact us at support@tunovpn.com.

We implement technical and organizational measures designed to protect personal information, including encryption in transit and access controls. No method of transmission or storage is completely secure; we cannot guarantee absolute security.

Clipora is intended for users aged 18 and over. We do not knowingly collect personal information from children under 18. If you believe we have collected such information, please contact us so we can delete it.

We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do. Material changes may be communicated via the website or email where appropriate.

Privacy questions: support@tunovpn.com.