Privacy Policy

Marcel Kremer Einzelunternehmen, Marcel Kremer, Brinkstraße 64, 58097 Hagen, Deutschland. Email: cutspool@kremer-digital.de.

cutspool turns long-form video uploads into finished vertical clips. This policy describes which personal data we process in doing so, for what purpose and on what legal basis. We process data only where this is necessary to provide the service or where you have given your consent.

• Account data: name, email address, password (stored only as a secure hash). Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
• Billing data: plan, credit usage and payment transactions. Payments are handled by Stripe; card details are processed exclusively by Stripe and are not stored by us.
• Content data: source videos, transcripts, clip settings, logos and the MP4 clips rendered from them.
• Usage data: technical log data such as IP address, time of access and error logs, used to provide and secure the service.

When you use AI clipping, the source audio is transcribed and the transcript is sent to OpenAI (OpenAI, L.L.C., USA) to select clip ranges and generate titles, descriptions and hashtags. No images are created by the AI. Only upload material you are authorised to process. The transfer to a third country takes place on the basis of the standard contractual clauses.

We do not sell personal data. To provide the service we use carefully selected service providers:

• Stripe - payment processing (PCI compliant)
• OpenAI - AI text generation (only when the AI function is actively used)
• Hosting and object storage providers - storage of accounts, render jobs, uploaded media and finished videos

All processors are contractually obliged to protect your data and to use it exclusively for the purposes we specify.

• TLS/HTTPS encryption for data in transit
• Secure hashing of passwords
• Access controls and authentication
• Non-public storage buckets; downloads only via short-lived, signed links

You have the right to access, rectification, erasure, restriction of processing, data portability and objection.

In your account settings you can export a machine-readable copy of your data (JSON) and permanently delete your account. For any other matter you can reach us at cutspool@kremer-digital.de.

We store your data for as long as your account exists or as long as this is necessary to provide the service. After you delete your account we remove your personal data, unless statutory retention obligations require otherwise.

Technically necessary cookies keep your session and login active. They are required for operation and are set without consent (§ 25 (2) TTDSG). We do not use advertising cookies and we do not embed third-party analytics services.

For audience measurement we use Umami, a self-hosted analytics application running on our own rented server infrastructure in Germany (analytics.ordinus.io). Umami sets no cookies, builds no cross-site profiles and passes no data to third parties; it records aggregated page views along with technical details such as referrer, approximate location at country level, browser and device type. The analytics script is loaded only after your explicit consent (Art. 6(1)(a) GDPR, § 25 (1) TTDSG). Without consent, no audience measurement takes place.

You can withdraw your consent at any time with effect for the future - via the "Cookie settings" link in the site footer. Withdrawing consent removes the analytics script again.

Our service is not directed at children under the age of 16. We do not knowingly collect data from children.

We may update this privacy policy from time to time. We will inform you of material changes through the service.