Legal Agreement

Version v1.2, revised December 5, 2026 · Effective December 5, 2026 · Last updated December 5, 2026

Questions: info@setclipper.com.

Privacy Policy

Who we are. Setclipper is operated by Clubwall LLC, a Florida limited liability company, which is the controller of your personal data. Contact: info@setclipper.com.

What we collect. (a) Account data: name, email, the phone number you give us at sign up, social handles, sign-in data from Google; (b) payment data: tokens and billing details handled by Stripe (we do not store full card numbers); (c) content: footage, audio, images and metadata you upload, and data we derive from them (transcripts, frames, speaker results, clips, edit decisions); (d) usage and device data: IP address, browser, pages, actions, errors, timestamps; (e) referral data: creator or friend codes, queue position, attribution, and a record that a person signed up through a referral link; (f) communications and support messages.

How we use it. To provide, operate, secure and support the Service; process payments and enforce plans; apply discounts and pay commissions; prevent fraud and abuse; send service, billing and program emails and, where allowed, marketing emails you can opt out of; improve and develop our features using de-identified or aggregated data; comply with law; and enforce our terms.

Phone numbers. When you sign up you give us a phone number, which we store with your account. We use it to verify your account, to give starter credits once per phone number, to prevent fraud and abuse, and so our team can review sign-ups. Separately, when you verify your phone, Google (Firebase Authentication) sends you a text message with a code and processes your number under its own terms. For verification we keep a one way scrambled value (a salted hash) of the number, the time you verified, and your account ID. We use them to allow one account per phone number, to give starter credits once per phone number, and to count referrals. We also keep the number you enter to verify and the code we sent for up to 30 days to detect abuse, then we delete them. We do not use your number for marketing and we do not sell it. If you delete your account we delete the phone number stored with your account. We keep the scrambled verification value, which does not contain your number, so the same phone cannot claim starter credits again. We do not delete it when you delete your account. This is for fraud prevention. Only US and Canada numbers are accepted for verification.

Referrals. If you use or share a referral link, we record that a person signed up through it so we can give the reward and prevent abuse. The person who shared the link sees only that a friend joined, not the friend's name, email address or phone number.

AI processing. To analyze and edit your footage we send selected video frames, text such as captions or transcripts, and, in some features, short audio clips, to Google Gemini as our service provider. The Web Clipper sends still frames and caption text, not full videos or audio. We do not use Your Content to train our own or third-party public AI models. Google handles what it receives under its own terms for the service we use.

Cloud export (Web Clipper). If you choose to connect Google Drive or Dropbox, we ask that service for permission to save your finished clips to your own storage. For Google Drive we request only access to files our app creates; for Dropbox we request permission to write files in our app folder and to read the email address of the connected account, which we show you so you know which account is connected. We store the access tokens that service gives us, encrypted, so we can save your clips when you click export, and we delete them when you disconnect the service. You can also revoke access at any time in your Google or Dropbox account settings. We only save the clips you export, and we do not read the other files in your storage, except that when you give us a link to a file to start a job, we download that file to process it. Google and Dropbox handle your data under their own terms and privacy policies.

Track identification. When you use the Tracklist feature in versions of Setclipper for Mac released on or after November 2, 2026, the app takes a short sample of audio after each drop in your set and checks it with Apple's Shazam service (ShazamKit): your Mac sends Apple a short audio fingerprint (a code made on your Mac, not the audio itself) and your internet (IP) address. Apple returns track names and handles what it receives under its own terms and privacy policy: apple.com/legal/privacy. In versions released before November 2, 2026, a sample that Apple does not match may also be checked by AcoustID (a fingerprint, the sample length and your IP address) and, if still unmatched, a short audio clip is sent through our servers to AudD. This data is not anonymous: your IP address is sent with each request, and a fingerprint together with an IP address can be linked to a person or a connection. In versions of Setclipper for Mac released on or after October 28, 2026, you can turn this off in Settings > Privacy & Feedback, using the Identify songs online (Tracklist) switch; while it is off, nothing is sent to Apple (or, in versions released between October 28 and November 2, 2026, to AcoustID or AudD). Versions released before October 28, 2026 have no such setting.

Drop Finder. When you run Drop Finder, your Mac measures your audio and sends our servers a short code (a hash) for each 60 seconds of audio. Each code is a truncated one-way fingerprint made on your Mac; it is not audio, and your audio, video and file names are not sent. We use the codes to work out the credit price, to avoid charging again for audio you already ran, and to check repeat runs. The codes are tied to your account. Codes from a priced quote are purged within about 30 days. Codes from a run you paid for are kept with no expiry date, so that a repeat run is not charged again, and are deleted if we refund that run or when you delete your account. Updated November 4, 2026.

Who receives data. Service providers acting for us: Google (sign-in, Firebase Authentication for phone verification, Gemini), Stripe (payments), our hosting provider and our email sender. Independent services that receive data directly from your device when you use a feature: Apple (Shazam, track identification), and AcoustID and AudD (versions released before November 2, 2026 only, as described above). Independent services you connect: Google Drive and Dropbox, when you choose to connect them. We do not sell personal information.

Crash reports. If Setclipper for Mac quits unexpectedly, the next time you open the app it sends us a crash report so we can find and fix the problem. A report includes:

A crash report does not include your footage or audio, and we do not look for or send face data in it. We use crash reports only to find and fix problems and to answer your support requests. We do not use them for advertising. Reports are sent over an encrypted connection (HTTPS) to Setclipper's servers, and, like any web request, they reveal your IP address. We store a short summary of each report in our database (with a scrambled form of your IP address, not the address itself) and forward the full report to a Setclipper support mailbox hosted by our email provider. Reports are read only by staff who work on bugs and support. We keep crash reports only as long as needed to fix the problem and review them regularly.

Crash reports are required. When you first open Setclipper for Mac, or after an update that changes this, you are asked to agree to the Terms and this Privacy Policy. This Privacy Policy covers crash reports, and by agreeing you accept them. If Setclipper quits unexpectedly, the next time you open it the app sends us a crash report as described above. There is no setting to turn crash reports off. If you do not agree to this, please do not use Setclipper for Mac, and you may close your account; if you are on a paid plan you may cancel and we will refund the unused part of the period you paid for. You can choose separately to add a window screenshot to a crash report; that choice is off by default.

Crash report screenshots. You can choose to include a window screenshot with a crash report. This is a separate choice that is off by default. A screenshot shows whatever was on your screen, which may include people or your footage. Only turn it on if you are comfortable sharing that.

Updates. Setclipper for Mac checks for updates automatically. When it does, it contacts our update server. Like any web request, the request reveals your IP address, the app name and version, the version of our update software, and your system language list. It does not include your macOS version, Mac model, a system profile, your account ID, or cookies. The app downloads updates in the background and installs them when you quit the app. In recent versions you can turn this off in Settings > General > Updates; earlier versions do not have this setting. We use this only to deliver updates.

Send Feedback. Feedback you send with Send Feedback includes your message, your optional email address, an optional screenshot, and the system details you see before you send. We store a short summary of each feedback message in our database (with a scrambled form of your IP address, not the address itself) and forward the full message to a Setclipper support mailbox hosted by our email provider. Feedback is read only by staff who work on support and product. We keep feedback only as long as needed to respond and improve the product and review it regularly.

Diagnostic reports. When you use Send Feedback or Send Report to report a problem, the app can attach a diagnostic report. The window lists exactly what goes in, and by pressing Send you agree to send exactly that. Sending also requires that you have accepted the Terms and crash-report consent. Nothing is sent before you press Send, and only if the "Attach the diagnostic report" box is on; the box is on by default, the list of what is sent is shown in the window, and if you switch it off nothing is attached. The app may offer to send a report after a failure; it sends nothing unless you click. The report is a zip file and contains: your message; a health summary (HEALTH.txt) with plain findings about your media files, drives, sync, preview and helper tools, and the last problem Setclipper recorded; the app's activity logs from your 5 newest sessions (the app keeps these on your Mac; each capped at 6 MB before compression), plus its diagnostic and backend logs; the window states the count and size; a list of the last 50 things the app did (names of actions only, not your content); samples of what the app was doing if it froze (names of program functions, up to 3); what you tell us went wrong if you tick one of Slow, Wrong result, or Crashed or froze; a short finding code from the health summary; technical details of the video and audio files used in your project (format, length, codecs, frame rate and resolution, read with a media tool), including each file's own embedded tags, such as camera or recorder strings, and the full file location; your project file, its text files and the project's live data (binary cache files are skipped); any crash or hang reports macOS made for Setclipper (hang reports from the last 14 days, up to 12 files); system details such as your Mac model, chip, macOS version, memory, displays, free disk space and app version; and, if you leave the screenshot option on, a screenshot of the Setclipper window only (the option is on by default, a preview is shown, and you can switch it off). We use it only to find and fix the problem you reported and to answer your support request.

What a diagnostic report does not contain, and what it does. It does not contain your video, audio or image files themselves, your Mac's serial number or other hardware identifiers (we remove device serial numbers and hardware identifiers from the system details before the report is sent), your other files, or the settings of other apps. Only passwords, API keys and access tokens are removed from the report's text before it is sent; we do not review the rest of it for typed text or other personal details. File and folder paths, file names, project, track and camera names, email addresses and web addresses are not removed, so the report can show names such as your Mac username, project names, client or artist names, or the names of files you used. A screenshot of the app window shows whatever was in it, which may include people or your footage. If you do not want to share these, send your feedback without the diagnostic report. The Send Feedback window and Settings > Privacy & Feedback in the app describe the same list.

How diagnostic reports are kept. The zip file is sent over an encrypted connection (HTTPS) to Setclipper's servers at our hosting provider and stored there, not publicly accessible, and is deleted after 60 days. Deleting your account also deletes your diagnostic reports from our servers. Your feedback message and the report's details (a scrambled form of your IP address, a short report ID, the contents list, and, when you are signed in, your account, plan and app version, so that we can answer you) are kept for up to 90 days. A notice with a time-limited download link goes to our support mailbox. Only the people who run Setclipper support can read reports. We do not use diagnostic reports for advertising and do not share them except with the service providers that host our servers and email. You can ask us to delete a report earlier at info@setclipper.com; quote the report ID if you have it.

Customer relationship records. If we use a customer relationship management (CRM) tool to manage support and communications, we host it ourselves on our own hosting provider's servers, and it may hold your name, email address, account and plan status, support history and notes about our communications with you. We use it to run support and onboarding and, where permitted and with your consent where required, product emails. You can ask us to correct or delete your record at info@setclipper.com.

Fraud prevention. To limit starter credits to one set per account and, if phone verification is on, per phone number, and to prevent abuse we use your account, IP address and payment information.

Face and matching features. Face boxes and numerical face templates are created on your Mac and saved in your project file on your Mac; the app does not send those files to us. Some steps send face images and whole video frames to our servers and on to Google (Gemini), our AI provider, to find or match people. Those frames can show other people in the shot, including audience members. We use them only to return the answer and our code does not store them; Google handles what it receives under its own terms for the service we use. We do not use these features to identify anyone by name, never sell the data, and do not use it to identify people for third parties. Our Terms do not allow these features to be used in, or on footage captured in, Illinois, Texas, Washington or the EU/EEA.

Sharing. With service providers acting for us (hosting, payments, sign-in, email, analytics, AI, security); with creators (only that a signup or purchase occurred and aggregate counts); with professional advisers; with authorities when required or to protect rights, safety or property; and in a merger, sale or financing. We do not sell personal information and do not share it for cross-context behavioral advertising.

Cookies. See our Cookie Notice. We honor Global Privacy Control signals for non-essential cookies.

Retention. We keep data while your account is active and as needed for the purposes above and for legal, tax, fraud-prevention and dispute purposes, then delete or de-identify it. Uploaded content is deleted within 30 days after account closure unless needed for legal reasons. Web Clipper: the source video is deleted 7 days after a job is created, and rendered clips and the job record 30 days after creation. The exceptions to deletion are the scrambled phone value described under Phone numbers, kept so the same phone cannot claim starter credits twice, and verification attempts, which we keep for up to 30 days.

Your rights. Subject to law, you may request access, correction, deletion, a copy, or to opt out of marketing or targeted advertising, by emailing info@setclipper.com. We verify requests and may deny them as the law permits; you may appeal a denial by replying to our response. We do not discriminate for exercising rights.

Security. We use reasonable administrative, technical and physical safeguards. No system is perfectly secure, and you use the Service at your own risk to the extent the law allows.

Children. The Service is for adults 18+. We do not knowingly collect data from minors and delete it if we learn we have.

International. The Service is operated from the United States and data is processed in the US.

If you are in the EU or UK. We process your data to run the Service you asked for (contract), to keep it secure and prevent fraud (legitimate interests), to follow the law, and, for marketing emails and the optional cookie choices, with your consent. Your data is processed in the United States; we rely on the providers' standard contractual clauses or the EU-US Data Privacy Framework where they are certified. You can ask for access, correction, deletion, a copy, or to object by emailing info@setclipper.com; we answer within one month. You may complain to your local data protection authority.

If you are in California or another state with a privacy law. We do not sell personal information and do not share it for cross-context behavioral advertising. You can ask to know, correct or delete your data, and appeal a refusal, by emailing info@setclipper.com; we respond within 45 days. We do not discriminate against you for asking.

Change log. November 5, 2026: Diagnostic reports now include a health summary, a short report ID, a list of recent app actions and app-freeze samples, are linked to your account when you are signed in, and the app may offer to send a report after a failure (nothing is sent unless you click). Deleting your account also deletes your diagnostic reports from our servers. November 4, 2026: Added what Drop Finder and audio analysis send (short fingerprint hashes, not audio). November 2, 2026: Track identification in versions of Setclipper for Mac released on or after November 2, 2026 use Apple's Shazam service only; AcoustID and AudD are no longer used by those versions. Versions released before November 2, 2026 may still send data to AcoustID and AudD until you update. December 5, 2026: Added phone verification (Google Firebase sends the code; we keep a salted hash and keep it after account deletion to prevent repeat starter credits) and referral records. Linked to Terms v1.2. October 28, 2026: In versions of Setclipper for Mac released on or after October 28, 2026, track identification can be turned off in Settings > Privacy & Feedback (Identify songs online (Tracklist)); while it is off, nothing is sent to Apple (or, in versions released between October 28 and November 2, 2026, to AcoustID or AudD). October 28, 2026: Track identification now checks Apple Shazam first, then AcoustID, then AudD; what is sent to each is listed. October 23, 2026: Crash reports are now required for Setclipper for Mac and cannot be turned off in the app; the list of what a report contains is shorter (the user ID and screen name were removed, and the log is limited to the last 50 lines). October 23, 2026: Added crash reports (on by default for new US installs, off elsewhere; existing settings unchanged) and a description of the update check. No other changes.

Changes. We may update this Policy by emailing you at the account address and posting it with a new effective date. Continued use after the effective date accepts the update.

Email. Marketing emails identify us and include a working unsubscribe link. We do not send marketing texts.

All legal documents

Earlier versions are kept at /legal/versions/. Questions: info@setclipper.com.