Skip to content

Privacy Policy

Last updated · [Date]

Template — have this reviewed before launch. Highlighted text in [brackets] must be completed.

This policy explains what personal data Cliply processes when you visit our website or order an edit, why we process it, and the rights you have. We keep it short and only collect what we need to deliver your video.

Who is responsible for your data

The data controller is Illyrian Solutions FZE (Free Zone Establishment (FZE) – Limited Liability, Ajman Free Zone, United Arab Emirates), with its registered office at Office C1 - 1F - SF13442, Ajman Free Zone C1 Building, Ajman Free Zone, Ajman, United Arab Emirates, registered under No. 47000 (licence No. 47000) with the Free Zones Authority of Ajman (“Cliply”, “we”, “us”).

For any privacy question or request, email hello@cliply.be. [EU representative (Article 27 GDPR): to be appointed, or ruled out on a lawyer’s advice; add their name and contact details here.]

What we process

  • Contact details — your email address, used to send your order link and updates.
  • Order details — the package, format and upgrades you choose, your brief answers, and any website or social links you share.
  • Footage and assets — the videos, logo, reference videos and brand assets you upload. These may show or contain the voices of people, including you.
  • Revision notes — the comments and timestamps you send when reviewing a video.
  • Payment metadata — amount, currency, payment status and the payment provider's reference. Card details are entered on Stripe's secure checkout and are never seen or stored by us.
  • Technical data — IP address and basic request data, used for security and abuse prevention, and the strictly necessary cookies and browser storage described in our Cookie Policy.

You don't need an account to order, and we don't ask for a password.

Why we process it, and our legal bases

  • Purpose
    Editing and delivering your video, handling revisions and support
    Legal basis (GDPR)
    Performance of a contract — Art. 6(1)(b)
  • Purpose
    Sending order emails (confirmation, delivery, revision updates)
    Legal basis (GDPR)
    Performance of a contract — Art. 6(1)(b)
  • Purpose
    Taking payment, invoicing and keeping accounting records
    Legal basis (GDPR)
    Contract and legal obligation — Art. 6(1)(b) and (c)
  • Purpose
    Keeping the service secure, preventing fraud and abuse, rate limiting
    Legal basis (GDPR)
    Legitimate interests — Art. 6(1)(f)
  • Purpose
    Showing your video in our portfolio (only if you explicitly agree)
    Legal basis (GDPR)
    Consent — Art. 6(1)(a), withdrawable at any time

We never sell your data. We never use your footage or final video in our own marketing without your explicit written permission.

Who we share it with

We use a small number of trusted providers who process data on our behalf under data processing agreements:

  • Supabase — database hosting for order records.
  • Cloudflare (R2) — private storage for your footage, assets and finished videos.
  • Stripe — payment processing. Stripe also acts as an independent controller for its own fraud prevention and legal obligations.
  • Resend — delivery of transactional emails.
  • ElevenLabs — generation of the synthetic voice-over, only if you choose the Premium voice-over option. It receives only the script to be read.
  • [Hosting provider] — hosting of this website and application.

Our editors access your files only to work on your order, under confidentiality obligations. We may also disclose data where the law requires it.

International transfers

Illyrian Solutions FZE is established in the United Arab Emirates, so your data is processed by a company located outside the European Economic Area. [Safeguards for transfers to the United Arab Emirates — to be defined by a lawyer.]

Some of our providers may process data outside the European Economic Area, for example in the United States. Where they do, transfers are protected by appropriate safeguards such as the European Commission's Standard Contractual Clauses or the EU–US Data Privacy Framework. [Confirm the region and transfer mechanism for each provider.]

How long we keep it

  • Raw footage, logos, references and brand assets — deleted [X days] after your order is completed.
  • Finished videos — available through your order link for [X days] after completion, then deleted.
  • Order records and invoices — kept for [10 years] to meet accounting and tax obligations.
  • Support emails — kept for [X months] after the conversation ends.
  • Security logs — kept for [X days].

Abandoned orders that were never paid are deleted after [X days], including any files uploaded to them.

Your rights

Under the GDPR you can ask us to access, correct or delete your personal data, restrict or object to its processing, or receive it in a portable format. Where we rely on consent, you can withdraw it at any time.

To exercise a right, email hello@cliply.be. We'll reply within one month. You can also lodge a complaint with the data protection authority of the EU member state where you live, where you work or where the alleged infringement took place — in Belgium, the Data Protection Authority (www.dataprotectionauthority.be).

How we protect it

Files are stored in private storage, are never given public permanent links, and are shared only through short-lived signed links. Data is encrypted in transit, and access is limited to people who need it to deliver your order.

Cookies

We only use strictly necessary cookies. See our Cookie Policy for details.

Changes to this policy

If we make material changes, we'll update the date at the top of this page and, where appropriate, let you know by email.