Política de Privacidade
Última atualização: October 26, 2026
Estes documentos são fornecidos em inglês, que é a versão juridicamente vinculante.
This Privacy Policy explains how [Company legal name] ("ClearCut", "we", "us") collects, uses and protects personal data when you use ClearCut API: the website, dashboard and API (the "Service").
For personal data about you as an account holder or visitor, we are the controller. For images, videos and other content you process through the Service on behalf of your own business or customers, we act as a processor on your instructions.
1. Data we collect
| Category | What | Source |
|---|---|---|
| Account | Email, name, password (stored only as a salted hash), language preference, profile picture if you sign in with Google | You, or Google if you use Sign in with Google |
| Workspace | Workspace name, team members and roles, brand kits, settings, connected-store details (access tokens are encrypted) | You |
| Content | Images, videos, prompts, product details and the results we produce | You and your API calls |
| Usage | API requests, endpoints, IP address, user agent, timestamps, credits used, processing times, errors | Generated by the Service |
| Billing | Plan, credit balance, purchase history. Card details are handled by Paddle and never reach us | You and Paddle |
| Support | Messages you send us | You |
| Analytics (optional) | Pages viewed, approximate location, device and browser, via Google Analytics, only if you accept analytics cookies | Your browser |
Visitors who try the background remover on the home page without an account get a low-resolution preview. That image is not stored.
2. How we use data
- To provide the Service: process your content, run jobs and workflows, deliver results, send webhooks and operate your account (contract).
- To bill you, apply credits and prevent fraud (contract and legal obligation).
- To keep the Service secure: rate limits, abuse prevention, audit logs and incident investigation (legitimate interests).
- To send service emails: verification, password reset, low-credit and job notices you can switch off in Settings (contract and legitimate interests).
- To understand and improve the website with analytics, only with your consent (consent).
- To comply with law and enforce our Terms (legal obligation and legitimate interests).
We do not sell personal data and do not use your content to train machine-learning models.
3. AI processing
Some optional features send data to AI providers. These are AI-generated backgrounds, AI erase, the Creative Assistant, scene, variant and workflow suggestions, product copy and explanations.
- Language features (assistant, suggestions, copy and explanations) send the text you enter and related facts, such as image sizes or quality-check results. They do not send your images.
- AI-generated backgrounds send your text prompt. Your subject image is not sent; it is composited over the generated background afterwards.
- AI erase sends the image region you choose to edit.
These requests go to OpenAI under its API terms, which state that API data is not used to train its models. We ask OpenAI not to store language-model requests. Request metadata such as feature, model, token counts, cost and status is logged for billing and limits; the prompt text is not logged by default.
4. Retention
| Data | Kept for |
|---|---|
| Uploaded source files | 48 hours (so failed jobs can be retried), then deleted |
| Processed results | 7 days, then deleted |
| Image Studio assets | 30 days, then deleted |
| Batch export ZIP files | 24 hours |
| Landing-page previews | Not stored |
| Account, workspace and usage records | While the account exists |
| Payment records | As long as tax and accounting law requires |
| Record that an account was deleted | Kept, with the email replaced by a one-way hash |
5. Sharing
We share personal data only with service providers that help us run the Service, under contracts that protect it. They are listed on our Subprocessors page. We also share data with:
- Paddle, our Merchant of Record, which processes payments under its own privacy notice;
- third parties you connect, such as your Shopify store, when you use those integrations;
- authorities, when the law requires it;
- a successor, in a merger or acquisition, under equivalent protections.
6. International transfers
Our providers may process data in the United States and other countries. Where data leaves the EEA, the UK or Switzerland, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or adequacy decisions.
7. Security
- All traffic uses HTTPS.
- Passwords and API keys are stored only as hashes, and connected-store tokens are encrypted at rest.
- Results are delivered through short-lived signed links.
- Access is limited by role and audited.
- Sign-in attempts are rate-limited per IP address and per account.
No system is perfectly secure. If a breach affects your personal data, we will tell you as the law requires.
8. Your rights
Depending on where you live (for example under the GDPR, UK GDPR or California law), you may have the right to:
- access your data, or receive a copy of it;
- correct it;
- delete it;
- restrict or object to processing;
- withdraw consent;
- port your data to another service;
- complain to a data protection authority.
You can do most of this yourself:
- Copy your data: Settings → Your data → Export my data.
- Delete your account: Settings → Danger zone → Delete account. This removes your account, owned workspaces and all their stored files. Payment records and an anonymized deletion record are kept for legal reasons.
- Analytics consent: "Cookie settings" at the bottom of every page.
For anything else, email privacy@clearcutapi.com. We respond within 30 days and may need to verify your identity.
9. Children
The Service is not directed to children and is not intended for anyone under 16. We do not knowingly collect their personal data.
10. Cookies
See our Cookie Policy.
11. Changes
We may update this policy. Material changes will be announced by email or in the dashboard before they take effect. The date at the top shows the latest version.