Privacy Policy

1. Data Controller

JT Digital d.o.o. ("we", "us", "our") is the data controller responsible for your personal data.

Registered in Slovenia, EU.

Contact: privacy@jtcut.com

If you have questions about how we process your data or wish to exercise your rights, contact us at the email above.

2. Data We Collect

• Email address
• Display name
• Google account identifier

• Stripe customer ID
• Subscription plan and status
• Payment history (amounts, dates, currency)

We never store your full credit card number, CVV, or bank account details.

• Uploaded media files (video clips, photos, audio)
• Generated video projects and metadata
• Text prompts submitted for AI narration
• Voiceover audio generated via text-to-speech

• Pages visited, session duration, referrer
• Browser type and operating system
• IP address (anonymized for analytics)
• Feature usage patterns

3. How We Use Your Data

We process your data on the following legal bases:

• Contract performance: Providing the video editing service, managing your account and subscription.
• Legitimate interest: Improving our service, preventing abuse, ensuring security.
• Consent: Analytics cookies, marketing communications (where applicable).
• Legal obligation: Tax records, fraud prevention.

4. Third-Party Services

We share data with these processors, each bound by Data Processing Agreements:

• Google — Authentication (OAuth), analytics (Google Analytics 4 via Google Tag Manager)
• Stripe — Payment processing (PCI DSS compliant)
• Anthropic — AI features (your prompts are sent to Claude API for narration and editing assistance)
• Hetzner — File storage (S3-compatible, EU-based servers)
• SMTP provider — Transactional emails

5. International Data Transfers

Your data may be transferred outside the EU/EEA to processors in the United States (Google, Stripe, Anthropic). These transfers are protected by:

• EU Standard Contractual Clauses (SCCs)
• Adequacy decisions where applicable
• Processor certifications (e.g., Stripe's PCI DSS compliance)

6. Data Retention

• Account data: Retained while your account is active. Deleted within 30 days of account deletion.
• Content data: Retained while your account is active. You can delete individual projects and files at any time.
• Payment records: Retained for 10 years as required by Slovenian tax law.
• Analytics data: Anonymized after 26 months.
• Server logs: Deleted after 90 days.

7. Your Rights (GDPR)

As a data subject under GDPR, you have the right to:

• Access — Request a copy of your personal data
• Rectification — Correct inaccurate data
• Erasure — Request deletion of your data ("right to be forgotten")
• Restriction — Limit how we process your data
• Portability — Receive your data in a machine-readable format
• Object — Object to processing based on legitimate interest
• Withdraw consent — Revoke consent at any time (without affecting prior processing)

To exercise any of these rights, email privacy@jtcut.com . We will respond within 30 days.

You also have the right to lodge a complaint with the Slovenian Information Commissioner (IP-RS) .

8. California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights:

• Right to Know — Categories and specific pieces of personal information we collect
• Right to Delete — Request deletion of your personal information
• Right to Correct — Correct inaccurate personal information
• Right to Opt-Out — We do not sell or share your personal information for cross-context behavioral advertising
• Non-Discrimination — We will not discriminate against you for exercising your rights

We have not sold personal information in the preceding 12 months. To exercise these rights, contact us at the email above.

9. Canadian Residents (PIPEDA)

If you are a Canadian resident, you have the right to:

• Access your personal information held by us
• Challenge the accuracy and completeness of your data
• Withdraw consent for non-essential processing

Our accountability officer can be reached at privacy@jtcut.com .

10. Automated Decision-Making

We use AI (Anthropic Claude) to assist with video narration and editing features based on your prompts. This is the core service you request and does not involve profiling or automated decisions that produce legal effects.

11. Children's Privacy

Our service is not directed at children under 16 (EU) or 13 (US). We do not knowingly collect data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

12. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email or an in-app notice. Continued use of the service after changes constitutes acceptance.