Privacy Policy

• We collect what we need to run the service: your account details, the files you upload, the prompts you write and the content you generate.
• When you generate, your prompt and the files you picked are sent to the AI provider doing the work (e.g. Higgsfield, fal.ai, Tripo).
• We don't sell your data. We don't use your uploads to train our own AI models.
• Analytics and marketing cookies only run if you allow them, and you can change your choice at any time.
• You can access, correct, delete and object to the processing of your data. To delete your account, just contact support.

The controller of your personal data is [Şirket Unvanı] ("Otoklip", "we").

• Address: [Adres]
• Trade registry / Tax no: [MERSİS/Vergi No]
• Registered e-mail (KEP): [KEP/e-posta]
• Support: destek@otoklip.com

We don't use the service to identify people from their face or voice (biometric recognition). If other people appear in the images or audio you upload, you are responsible for having their permission.

Generations on Otoklip are made by third-party AI providers. When you start one, your prompt and the files you selected for that job are sent to the relevant provider only to produce that result, which is then saved back to your account.

• Providers process this data under their own commercial terms and data-processing commitments, to perform the requested job.
• We don't use your uploads or prompts to train our own AI models.
• The clip editor processes your video in your browser: project drafts and the source video stay on your device and are not uploaded to our servers.
• Prompts are automatically checked against a prohibited-content list. Prompts that match are logged so we can review abuse.

We don't sell your personal data or rent it out for advertising. We share it only as far as needed to run the service:

• Infrastructure and hosting: the service providers we use for the database, authentication, file storage and verification e-mails (e.g. Supabase).
• AI providers: listed in the table above.
• Payment providers: once online payments launch, card payments are handled by licensed payment providers (such as iyzico in Türkiye and Paddle internationally). Your card details go straight to them; we never see or store your card number.
• Google: only if you choose to sign in with Google, to complete sign-in.
• Assistants and automations you connect (ChatGPT, Claude, Zapier, Make, etc.): if you connect Otoklip to them yourself, we send them what they ask for within the permissions you granted (read / generate / social): catalogue and prices, generation status, short descriptions of your library items and time-limited media links. Those services are governed by their own privacy policies. Otoklip does not read your chat history; it receives only what a tool call sends (prompt, options) and keeps a log of connection calls for security and billing. You can disconnect any time in Settings → Connections.
• Authorities: courts and competent public authorities when the law requires it.
• Advisers: our legal, financial and audit advisers, under confidentiality.

Some of our infrastructure and AI providers use servers outside Türkiye (for example in the European Union and the United States). We make these transfers in line with Article 9 of the KVKK and Chapter V of the GDPR — using appropriate safeguards such as standard contractual clauses where there is no adequacy decision, or another ground allowed by law.

• Account data: for as long as your account is open.
• Uploads and generations: until you delete them or close your account. Deleted data is also purged from backups within a reasonable period.
• Payment and invoice records: for the period required by tax and commercial law (generally 10 years).
• Support conversations and security logs: as long as needed to resolve your request and possible disputes, and for any period required by law.

When the period ends, data is deleted, destroyed or anonymised.

Connections are encrypted (HTTPS). Your files are stored privately to your account and opened only through short-lived signed links. In the database every user can only reach their own records; our team's admin access is role-based and actions are logged. No system is perfect: if a data breach occurs, we will notify the people affected and the authorities as the law requires.

You have the right to know whether we process your data, to access it, to have it corrected, deleted or ported, to object to processing and to withdraw consent. Your rights under Turkish law are listed in the KVKK Information Notice; if you are in the EU you can also exercise your GDPR rights and complain to your local data protection authority.

To make a request, e-mail destek@otoklip.com or open a ticket from the support panel in the studio. We answer within 30 days at the latest.

Use Delete my account on the Settings page or open a support ticket. After we verify your identity, your account, generations and uploads are deleted and any remaining credits are cancelled. Records we must keep by law (such as invoices) are kept separately for that period.

Otoklip is not intended for anyone under 18. If we learn we hold data about someone under 18, we delete it.

We use cookies for essential things like keeping you signed in and remembering your language. Analytics and marketing cookies only run with your permission. Details are in the Cookie Policy.

We may update this policy. If a change is significant, we'll tell you by e-mail or in-app notice before it takes effect. The date at the top shows the latest update.

Questions and requests: destek@otoklip.com. Formal notices: [KEP/e-posta], [Adres].