1. Who is responsible
Clipform is operated by Reco Ventures Ltd., registered in the United Kingdom. For the personal data of account holders, we are the data controller. For personal data collected through forms (responses, recordings, uploads), the form owner is the data controller and we process that data on their behalf; if you responded to a form, contact the form owner in the first instance. Privacy contact: hello@clipform.io.
2. What we collect
Account holders: email address, name, billing details (handled by our payment processor), account and workspace identifiers (for example your workspace name and internal workspace ID), and the content you create. Respondents: the answers, recordings, and files submitted through a form, including where the form is embedded on a third-party website (for example an online store). Everyone: technical and usage data such as device information, log data, and product analytics.
Where you connect a third-party platform to Clipform(for example by installing our Shopify app), we store the connection details and access tokens needed to provide the integration, such as your store domain. We do not read or store the platform's records about your customers unless a feature explicitly says so.
3. Why we process it
To provide the service under our contract with you; for our legitimate interests in securing, analysing, and improving the service; and with your consent where required. Where forms use AI-assisted generation, the relevant prompts and form content are processed by AI service providers to provide that feature. Where a form collects voice or video responses, the recording is processed by an AI transcription provider to generate a text transcript and captions. We may also create aggregated or de-identified data that no longer identifies anyone and use or publish it for any purpose, including promoting the service and publishing insights and benchmarks.
4. Who receives it
We share personal data only with service providers who process it on our instructions, in these categories: cloud hosting and storage, video infrastructure, payment processing, product analytics, AI services, and network/email infrastructure. Details are available on request. Some providers are located outside the UK and EEA; where personal data is transferred internationally, we rely on appropriate safeguards such as adequacy decisions or standard contractual clauses. We do not sell personal data.
Where you (or a form owner) connect Clipformto an external service - for example an automation or integration tool, or a webhook address you specify - we send the relevant form responses to that service when a form is completed, so it can power the workflow you have set up. We send data only to destinations you have authorised. Once the data reaches that service it is processed under that service's own terms and privacy policy, not ours, and you are responsible for how it is used there.
Form creators may also choose to display responses publicly, for example by turning on a form's public results page - see the form owner's own privacy policy for how they use this.
5. Retention and deletion
We keep personal data while your account is active. Deleting a form deletes its responses, and deleting your account deletes your data, in each case within 30 days; residual copies in backups are removed in the ordinary backup cycle. Disconnecting or uninstalling a platform integration (for example removing our Shopify app from your store) deletes the stored connection data for that platform within 30 days, and we honour deletion requests relayed by the platform in the same period. We may retain data longer where required by law. Technical logs and product analytics events are retained for up to 12 months for security, debugging, and service-improvement purposes, then deleted or aggregated so they no longer identify anyone.
6. AI agents and connectors
You can connect an AI assistant (for example ChatGPT or Claude) to Clipformthrough our MCP server. When you do, the assistant can read and act on your own account data on your instruction - for example your workspace name, plan and usage limits, and the forms, nodes, and media in your workspace - and it can create, update, or delete that content on your behalf. It cannot access data belonging to another account or workspace. Responses include identifiers for your own forms, questions, and media so the assistant can refer back to them, and are limited to the fields needed to complete your request; we do not include diagnostic metadata or promotional content. Once your assistant provider receives this data, it is handled under that provider's own privacy policy, not ours.
You can disconnect an assistant at any time from Settings > Connected apps in your dashboard, which revokes its access. As with other technical and usage data described in §2, we log connector requests (the tool called, timing, and which client made the request) for security and debugging, under the same retention described in §5.
7. Your rights
You may request access to, correction of, deletion of, or a copy of your personal data, and you may object to or ask us to restrict certain processing. Email hello@clipform.io and we will respond within 30 days. You also have the right to complain to the Information Commissioner's Office (ICO) or your local supervisory authority.
8. Cookies
We use cookies that are necessary for the service to function and privacy-friendly analytics to understand usage. We do not use advertising trackers.
9. Changes
If we make material changes to this policy, we will notify account holders by email or through the service before the changes take effect.