Privacy Policy

ClapperLab is operated by Adstro Media S.R.L., Ginta Latina 21, Chisinau 2044, Moldova. This policy explains what we collect, why, and what you can do about it. It applies to clapperlab.com and the ClapperLab API.

What we collect

Account data

Your email address, and your name and profile picture if you sign in with Google or Apple. Passwords are stored only as an argon2id hash — we never hold your password and cannot recover it.

Content you create

The prompts you submit, the settings you choose, any media you upload, and the videos we generate for you. We store these so you can access your work.

Billing data

Payments are processed by Stripe. Card details go directly to Stripe and never touch our servers. We keep your Stripe customer ID, plan, and payment history.

Technical data

IP address, browser user-agent, and timestamps for security and abuse prevention.

How we use it

• To run the service — generate your videos and keep your account working.
• To take payment and manage your subscription.
• To email you about your account, and about the product if you have not opted out.
• To detect and prevent abuse, fraud, and security incidents.

We do not sell your data. We do not use your prompts or generated videos to train models.

Who we share it with

Only the providers needed to run the service:

• Stripe — payments.
• Resend — transactional and marketing email.
• OpenAI and ElevenLabs — generating imagery and voice from your prompts.
• Google / Apple — only if you choose to sign in with them.

Your prompt text is sent to those generation providers to produce your video. Do not put confidential information in a prompt.

Retention

Account and video data is kept while your account is open. Delete your account and we remove your personal data and generated videos within 30 days, except records we must keep for tax and accounting.

Your rights

You can request a copy of your data, correct it, delete it, or object to marketing — email hello@clapperlab.com and we will respond within 30 days. Every marketing email carries a one-click unsubscribe link; transactional email about your account cannot be opted out of while the account is open.

Cookies

We set one essential cookie to keep you signed in. It is HttpOnly, Secure, and SameSite=Lax. We do not use advertising or tracking cookies on this site.

Security

Traffic is encrypted with TLS. Passwords are hashed with argon2id, API keys are stored only as hashes, and email tokens are stored hashed and are single-use. No system is perfectly secure, but we will tell you promptly if a breach affects you.

Children

ClapperLab is not for anyone under 16, and we do not knowingly collect their data.

Changes

If we make a material change we will update the date above and email active users.