RawClip
Sign in Start editing

Privacy Policy

Last updated: 28 July 2026

This Privacy Policy explains how YDV s.r.o. (“we,” “us,” or “our”) collects, uses, stores, and protects your personal data when you use RawClip (rawclip.online). We are committed to handling your data responsibly and in compliance with the General Data Protection Regulation (GDPR) and applicable Slovak data protection law.

If you have questions about this policy or your data, contact us at support@rawclip.online .

1. Who we are

YDV s.r.o. is the data controller for the personal data processed through rawclip.online.

  • Registered in: the Slovak Republic
  • Business ID (IČO): 55615368
  • Tax ID (DIČ): 2122041636
  • VAT ID (IČ DPH): SK2122041636
  • Registered address: Drobného 1903/16, 841 01 Bratislava - mestská časť Dúbravka
  • Contact email: support@rawclip.online

2. What the service does

RawClip is an automated video editing service. You upload raw action camera footage (from cameras like GoPro, DJI, Insta360, Sony, and others) and receive an AI-generated highlight. The price is a fixed fee set by the total length of your footage, and it is collected after you upload and before processing starts - short orders are processed for free first and paid for only if you want the full-quality files unlocked. The entire process is automated - no human watches or edits your footage during normal processing.

3. What data we collect

3.1 Account data

When you create an account, we collect your name, email address, and password (stored only in hashed form). If you sign up or log in using Google OAuth, we also receive and store your Google account ID.

3.2 Payment data

All payment processing is handled by Stripe. We never see or store your full card number, expiry date or security code. What we do store is: your Stripe customer ID, the transaction ID, the amount paid, the tax amount, the currency, the payment status and date, the billing email and billing country you gave Stripe, and the card type and last four digits returned to us by Stripe. Stripe processes your payment data as an independent data controller under its own privacy policy.

3.3 Video files

You upload raw video footage to our service. We also generate output files (your highlight in 4K and 1080p versions). Your raw footage may contain personal data belonging to you or to third parties, including faces, voices, license plates, GPS coordinates, and other location data embedded in video file metadata.

3.4 Technical and usage data

We automatically collect certain technical information when you use the service, including your IP address, browser type, device type, pages visited, timestamps, upload speed metrics, and processing job status and duration. This data is collected through server logs and application monitoring.

3.5 Marketing attribution data

When you first arrive on the site we record how you got there: the campaign parameters in the link you followed (utm_source, utm_medium, utm_campaign, utm_content, utm_term), the referring website, and the page you landed on. This first-touch record is frozen to your account when you register. We store the same campaign parameters on each order, together with the IP address and browser user agent recorded at checkout and the advertising identifiers described in section 3.6, so that we can measure which campaigns produce orders.

3.6 Cookies and similar technologies

Strictly necessary cookies. These are required for the service to function and are set without consent: a session cookie (rawclip-session, used by our application framework to keep you signed in), a CSRF token (XSRF-TOKEN, used to protect against cross-site request forgery), and the cookie that records your consent choice itself (CookieScriptConsent).

Analytics cookies (consent required). With your consent we use Google Analytics 4, loaded via Google Tag Manager, to understand how visitors find and use the site. This sets cookies such as _ga and _ga_*.

Advertising cookies (consent required). With your consent we use the Meta (Facebook) Pixel and the Reddit Pixel to measure the performance of our advertising and to build audiences for it. These set cookies such as _fbp, _fbc and _rdt_uuid. We also run a server-side measurement integration with Meta, described in section 6.

Analytics and advertising cookies are set only after you accept them through our cookie consent banner. If you decline, they are not set. You can change or withdraw your choice at any time through the cookie settings in the banner.

Cookieless analytics. We additionally run Plausible Analytics on our own server, served from our own domain. Plausible counts page views and a small number of product events (for example, that an upload completed). It sets no cookies, stores no identifier on your device, and does not track you across other websites, so it runs without a consent prompt. You can object to it at any time - see section 10.

4. How we use your data

We process your personal data for the following purposes:

To provide the service you paid for. We use your account data to manage your account, your payment data to process transactions, and your video files to generate your highlight. This is the core purpose of the service.

To communicate with you about your order. We send transactional emails at key stages: account verification, payment confirmation, upload completion, highlight readiness, and file expiration warning. These are service-related communications and you cannot unsubscribe from them while you have an active order.

To send you marketing emails. We also send a limited number of marketing emails - reminders about an upload or checkout you did not finish, discount offers, and announcements of new features. Every marketing email carries an unsubscribe link and supports one-click unsubscribe in your mail client; opting out stops all marketing mail immediately and permanently while leaving transactional messages about your orders untouched.

To maintain security and prevent fraud. We use server logs and technical data to detect abuse, prevent unauthorized access, and maintain the stability and security of the service.

To monitor and improve processing quality. We may review the finished highlight (the output only, not your raw footage) to assess and improve the quality of our automated processing system. This review is limited to quality assurance. We do not use your content for marketing, promotional purposes, or AI model training.

To comply with legal obligations. We retain payment and invoice records as required by Slovak tax and accounting law.

5. Legal bases for processing

Under GDPR Article 6, we rely on the following legal bases:

Contract performance (Art. 6(1)(b)). Processing your account data, video files, and payment data is necessary to perform the contract between you and us - namely, to provide the highlight service you paid for.

Legal obligation (Art. 6(1)(c)). We retain payment records and invoices for the period required by Slovak tax and accounting legislation (Act No. 431/2002 Coll. on Accounting).

Legitimate interest (Art. 6(1)(f)). We process server logs for security, fraud prevention, and service stability, and we send your IP address to Cloudflare Turnstile to keep bots out of our sign-up and login forms. We run cookieless page-view measurement (Plausible) to understand how the site performs. We send marketing emails to people who already bought from us or who started an order, in each case with a working opt-out. We also review finished output highlights for quality monitoring purposes. In each case we have assessed that these interests do not override your fundamental rights and freedoms, given the limited scope of processing and the measures we take to protect your data.

Consent (Art. 6(1)(a)). We rely on your consent to set analytics and advertising cookies and to process the resulting data through Google Analytics, Meta and Reddit, including the server-side measurement events described in section 6. These cookies are not set unless you accept them through our cookie consent banner, and you may withdraw your consent at any time through the cookie settings. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

Special category data

Your uploaded video footage may contain biometric data such as recognizable faces, which constitutes special category data under GDPR Article 9. Our legal basis for processing this data is your explicit consent, provided through the deliberate act of uploading your footage to the service after agreeing to these terms (Art. 9(2)(a)). You are in full control of what content you upload.

6. How we share your data

We share your data only with the following third parties, each of which acts in a specific capacity:

Stripe (payment processing)

Stripe, Inc. processes your payment information as an independent data controller. Stripe is certified under the EU-US Data Privacy Framework. For details, see Stripe’s Privacy Policy at https://stripe.com/privacy.

Google Gemini API (AI video analysis)

To generate your highlight, we send downscaled, low-resolution video previews to Google’s Gemini API for automated analysis. Google processes this data as a data processor acting on our instructions. This processing may involve transferring your data to Google’s data centers located outside the European Economic Area (EEA). Appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) and Google’s participation in the EU-US Data Privacy Framework. For details, see Google Cloud’s Privacy Notice at https://cloud.google.com/terms/cloud-privacy-notice.

Google Analytics (usage analytics)

With your consent, we use Google Analytics 4, provided by Google, loaded through Google Tag Manager, to measure where our visitors come from and how they use the site. Google processes this data as a data processor acting on our instructions. Analytics cookies are set only after you accept them via our cookie consent banner (managed through Cookie-Script with Google Consent Mode); if you decline, Google Analytics does not read or store cookies on your device. This processing may involve transferring data to Google’s servers outside the European Economic Area (EEA); appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) and Google’s certification under the EU-US Data Privacy Framework. For details, see Google’s Privacy Policy at https://policies.google.com/privacy.

Meta Platforms (advertising measurement)

If you accept advertising cookies, we share conversion and audience data with Meta Platforms Ireland Ltd. so that we can measure and target our advertising. This happens in two ways: the Meta Pixel in your browser, and a server-side Conversions API integration that reports the same events directly from our server. The data we send includes your email address in irreversibly hashed form (SHA-256), a hashed account identifier, the Meta browser identifiers _fbp and _fbc, and - not hashed - your IP address and browser user agent, together with the value and currency of the purchase. We never send your video files, your footage, or the contents of your highlight. Meta acts as an independent controller for this data. For details, see Meta’s Privacy Policy at https://www.facebook.com/privacy/policy/.

Reddit (advertising measurement)

If you accept advertising cookies, we also share conversion data with Reddit, Inc. so that we can measure how our advertising performs there. The Reddit Pixel reports that a purchase happened, together with its value and currency, and receives your email address in irreversibly hashed form (SHA-256) so that Reddit can match the conversion to an account it already knows. We never send your video files, your footage, or the contents of your highlight. For details, see Reddit’s Privacy Policy at https://www.reddit.com/policies/privacy-policy.

Resend (email delivery)

We send our transactional and marketing emails through Resend, provided by Resend, Inc. (United States). Resend receives your name, your email address and the contents of the message in order to deliver it, and reports delivery outcomes (delivered, bounced, marked as spam) back to us so that we stop mailing addresses that reject our messages. Resend acts as a data processor on our instructions under Standard Contractual Clauses. For details, see Resend’s Privacy Policy at https://resend.com/legal/privacy-policy.

Cloudflare (bot protection)

Our sign-up and login forms are protected by Cloudflare Turnstile, provided by Cloudflare, Inc. Your IP address and a challenge token are sent to Cloudflare to verify that you are not an automated script. Turnstile does not profile you or serve advertising. For details, see Cloudflare’s Privacy Policy at https://www.cloudflare.com/privacypolicy/.

Bunny Fonts (web fonts)

The typefaces used on the site are served by Bunny Fonts, operated by BunnyWay d.o.o. (Slovenia, EU). Loading a page therefore discloses your IP address and browser user agent to that service. Bunny Fonts is a GDPR-focused font service that sets no cookies and does not log personal data for tracking purposes. For details, see https://bunny.net/privacy.

Crisp (customer support chat)

We use Crisp, provided by Crisp IM SAS (France), to offer a live support chat on the website. Crisp acts as a data processor on our instructions. The chat widget and its cookies are loaded only when you actively open the chat window; if you never open it, no Crisp cookies are set and no chat data is collected. When you start a conversation, Crisp processes the messages you send and basic technical data (such as your IP address and browser) to deliver and maintain the support session. As a French provider, Crisp stores this data within the European Union. For details, see Crisp’s Privacy Policy at https://crisp.chat/en/privacy/.

Telegram (internal operational alerts)

Our small team is notified about events that need a human look - a new registration, a completed order, a failed job, a payment that needs a refund - through a private Telegram channel. These alerts contain your name and email address and the details of the order concerned. They never contain your video files or your highlight. Telegram Messenger is used here purely as a notification transport for our own staff. For details, see Telegram’s Privacy Policy at https://telegram.org/privacy.

Contabo (server hosting)

Our dedicated server is hosted by Contabo GmbH in Germany (within the EU). All video files and primary data storage remain on this server. Contabo provides the infrastructure and does not access your data.

We do not sell your personal data, and we do not share it with data brokers. Apart from the advertising measurement described above, we do not disclose your data to third parties for their own marketing.

7. International data transfers

Your data is primarily stored and processed on our dedicated server located in Germany (EU). The following transfers outside the EEA may occur:

Google Gemini API. Video previews sent to Google for AI analysis may be processed in data centers outside the EEA, including in the United States. This transfer is protected by Standard Contractual Clauses (SCCs) between us and Google, and by Google’s certification under the EU-US Data Privacy Framework.

Stripe. Payment data processed by Stripe may be transferred to the United States. Stripe is certified under the EU-US Data Privacy Framework.

Google Analytics. If you consent to analytics cookies, usage data collected by Google Analytics may be transferred to Google’s servers in the United States. This transfer is protected by Standard Contractual Clauses (SCCs) and Google’s certification under the EU-US Data Privacy Framework.

Meta. If you consent to advertising cookies, the conversion data described in section 6 may be transferred to Meta’s servers in the United States. This transfer is protected by Standard Contractual Clauses (SCCs) and Meta’s certification under the EU-US Data Privacy Framework.

Reddit. If you consent to advertising cookies, the conversion data described in section 6 may be transferred to Reddit’s servers in the United States. This transfer is protected by Standard Contractual Clauses (SCCs).

Resend. Your name, email address and the contents of the emails we send you are processed by Resend in the United States under Standard Contractual Clauses (SCCs).

We do not transfer your raw footage or finished highlights outside the EU. Apart from the downscaled previews sent to the Gemini API for analysis, these files remain on our server in Germany at all times.

8. How long we keep your data

We retain different types of data for different periods, based on their purpose:

Raw uploaded footage is deleted as soon as the highlight is rendered - free demo orders included. We keep no copies.

Footage that never reaches processing is deleted on a schedule too: uploaded footage on an unpaid order after 3 days, an upload you start but never finish after 5 days of inactivity, and any unpaid order no later than 5 days after it was created.

Output highlights are available for download for 14 days, counted from completion or, for a free demo unlocked later, from the moment of payment. After that the files are automatically and permanently deleted from our server.

Account data (name, email, authentication details) is retained for as long as your account exists. You may ask us to delete your account at any time by emailing support@rawclip.online ; we will delete your account data within 30 days, except for records we are legally required to keep (see payment records below).

Email records. We keep a log of the messages we have sent you - recipient address, message type, delivery status and the data used to build the message - so that we can prove what was sent, avoid sending duplicates, and honour unsubscribes and bounces. Suppression records (addresses that bounced or reported our mail as spam) are kept for as long as the suppression must hold.

Payment records (transaction IDs, amounts, dates) are retained for 10 years, as required by Slovak Act No. 431/2002 Coll. on Accounting.

Server logs (IP addresses, access records) are kept only for as long as we need them to keep the service secure and to diagnose faults. They are rotated and deleted on a regular cycle and are not retained long-term.

9. How we protect your data

We implement appropriate technical and organizational measures to protect your personal data, including encrypted connections (HTTPS/TLS) for all data in transit, hashed password storage, access controls limiting who can access the server infrastructure, and automated deletion schedules for video files and server logs.

Your video files are stored on our own dedicated server - not in third-party cloud storage. Access to this server is restricted to authorized personnel only.

10. Your rights

Under the GDPR, you have the following rights regarding your personal data:

Right of access. You may request a copy of the personal data we hold about you.

Right to rectification. You may request that we correct any inaccurate or incomplete personal data.

Right to erasure (“right to be forgotten”). You may request that we delete your personal data, subject to our legal obligations to retain certain records (such as payment data required by tax law).

Right to restriction of processing. You may request that we limit how we process your data in certain circumstances.

Right to data portability. You may request a copy of your personal data in a structured, commonly used, machine-readable format.

Right to object. You may object to our processing of your data where we rely on legitimate interest as our legal basis. We will stop processing unless we can demonstrate compelling legitimate grounds.

Right to withdraw consent. Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

Right to lodge a complaint. You have the right to lodge a complaint with the data protection authority in your country of residence.

How to exercise your rights

To exercise any of these rights, send an email to support@rawclip.online . We will respond to your request within 30 days, as required by GDPR Article 12(3). If your request is complex or we receive a high volume of requests, we may extend this period by an additional 60 days, and we will inform you of any such extension.

We may ask you to verify your identity before fulfilling your request.

11. Automated decision-making

Our service uses AI to analyze your video footage and select which moments to include in the highlight. This is automated processing that determines the creative output you receive.

This automated processing does not produce legal effects concerning you and does not significantly affect you in a similar way - the output is a creative and entertainment product based on your own footage. Accordingly, the specific provisions of GDPR Article 22 regarding automated individual decision-making do not apply. We disclose this information for transparency.

12. Children’s data

RawClip is intended for users aged 18 and older. We do not knowingly collect personal data from anyone under 18. If we become aware that a user is under 18, we will promptly delete their account and all associated data. If you believe a minor has created an account, please contact us at support@rawclip.online .

13. What we do NOT do with your data

To be clear about our commitments:

  • We do NOT use your uploaded content or output highlights to train, fine-tune, or improve any AI or machine learning models.
  • We do NOT use your videos for marketing or promotional purposes.
  • We do NOT sell your personal data to third parties.
  • We do NOT send your video files, your footage or your highlight to any advertising platform. The advertising measurement described in section 6 covers purchases and page visits only, never your content.
  • We do NOT show third-party advertising on this website.
  • No human watches your raw footage during normal automated processing.

14. Changes to this policy

We may update this Privacy Policy from time to time. When we make changes, we will update the “Last updated” date at the top of this page. If we make material changes that affect your rights, we will notify you by email or through a prominent notice on the website before the changes take effect.

We encourage you to review this policy periodically.

15. Contact us

If you have questions, concerns, or requests related to this Privacy Policy or your personal data, please contact us:

  • Email: support@rawclip.online
  • Company: YDV s.r.o.
  • Address: Drobného 1903/16, 841 01 Bratislava - mestská časť Dúbravka