What data we collect

Account data (only if you sign in)

• Your email address (from Google OAuth).
• Your Google account ID (an opaque string we use to match you to your sessions).
• Your display name and avatar URL (used to show 'Hi, [name]' in the header).
• The date you signed up.
• Your tier (free / Pro) and Stripe customer ID if you've paid.

Payment data (only if you upgrade)

• Stripe payment_intent_id, session_id, and customer_id. We never see your card number — Stripe handles that directly.
• Purchase amount, currency, and timestamp.
• Refund / dispute status (so we can revoke Pro access on refund — see /api/webhook/stripe).

Analytics data (anonymous)

• The path you visited (/, /security-video- editor, /about, etc.).
• The referrer host (e.g. google.com, news.ycombinator.com).
• UTM tags from the URL, if present.
• User-agent bucket (desktop or mobile — not the full UA string).
• Timestamp.

We do NOT store the full IP address. We do NOT set cross-site tracking cookies. The page-view row is not joined to your account record.

Optional AI feature data

When you trigger an AI feature, the relevant input is sent to a third-party model. We retain only the OUTPUT (e.g. the generated subtitle text), not the input.

• Auto-captions: extracted audio → Whisper → text result. The audio file is deleted within seconds. The text is saved to your project if you keep it.
• AI Director: timeline metadata → Claude → suggestion text.
• AI B-roll: text prompt → Sora 2 / Nano Banana → generated clip URL.

Privacy Mode disables all of these at the toggle.