Privacy Policy

This Privacy Policy explains how Jetrr ("Jetrr", "we", "our", or "us") collects, uses, shares, and protects your information in connection with the SmartCut AI mobile applications for iOS and Androidand the related backend services (together, the "Service").

Jetrr is the data controller responsible for your personal data. If you do not agree with this policy, please discontinue use of the Service and delete the app.

We collect the following categories of information:

• Account information — your email address, an optional display name, and a securely hashed password. If you sign in with Apple or Google, we receive a unique identifier from that provider and your email address; we never receive your password for those accounts.
• Images you choose to upload — an optional profile picture, and any screenshot or image you attach to a feature request or support submission. These are stored using Google Cloud Storage.
• Video and audio content — the video and audio files you upload for processing, any source URL you supply, and the processed outputs (clips, captions, subtitles, transcripts, dubbed audio, reframed video). See section 3 for exactly how this content is handled.
• Project and usage data — project titles, type, status, duration, resolution and timestamps; processing job history including failures; the credits consumed in each billing period; and audit records of account events such as subscription changes.
• Subscription and billing data — your current plan and subscription status, and the transaction or purchase identifiers issued by Apple or Google used to verify your purchase. Payments are processed entirely by Apple (App Store) or Google (Google Play). We never receive or store your payment card details.
• Connected social accounts — if you choose to connect a social account for publishing (currently YouTube), we store the access and refresh tokens issued by that platform, together with your platform user ID and display name. These tokens are encrypted at rest and are never returned by our API.
• Device and notification data — push notification tokens (Apple Push Notification service on iOS, Firebase Cloud Messaging on Android), device platform and app version. These are used only to deliver notifications you have enabled.
• Technical and log data — IP address at the time of a request, request metadata such as endpoint, timestamp and response status, and error logs. We do not use this data to build advertising or marketing profiles.

When you choose a video or image, the app uses your device's system media picker. Only the specific file you select is made available to the app and uploaded. We do not scan, index or access any other media on your device.

Content featuring other people. Videos you upload may contain the images, voices or personal information of other people. You are responsible for ensuring you have the right to upload and process that content. We process it only to carry out the operation you request, and we do not use it to identify anyone.

SmartCut does not render video itself. Processing is performed by our third-party processing provider, Reap.video.

• When you start an upload, our servers request a secure, time-limited upload address from Reap.video and return it to the app. Your video is then uploaded directly from your device to Reap.video. The video file itself does not pass through SmartCut's servers.
• Reap.video performs the requested operation (clipping, captioning, dubbing, reframing or transcription) and returns the processed outputs and related metadata to us.
• Processed outputs are made available to you through time-limited signed download links. Some files are stored using Google Cloud Storage; others are hosted by Reap.video.
• Jetrr does not use your video or audio content to train, fine-tune or improve machine learning models. Content sent to Reap.video is processed under our agreement with them and under their own privacy policy.

We use the information described above to:

• Provide, operate and maintain the Service and process the jobs you request.
• Create and secure your account, and authenticate your sign-in.
• Manage your subscription, verify purchases, and allocate and track credits.
• Publish content to social platforms you have explicitly connected, at your instruction.
• Send transactional email such as password resets and account notices.
• Send push notifications about your projects and account, where you have enabled them.
• Detect, investigate and prevent fraud, abuse and security incidents.
• Review content reported to us through our abuse reporting feature.
• Diagnose faults and improve the reliability of the Service.
• Comply with our legal obligations.

For users in the European Economic Area and the United Kingdom, our legal bases are: performance of our contract with you (providing the Service, processing jobs, managing subscriptions); your consent (push notifications, connecting a social account); our legitimate interests (security, fraud prevention, abuse moderation, service reliability); and compliance with legal obligations.

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We share information only with the following categories of recipients:

• Reap.video — our video and audio processing provider. Receives your uploaded content and processing instructions.
• Google Cloud Platform — our infrastructure provider (compute, database, file storage, secret management). Hosts the Service and stores data at rest.
• Google Firebase — delivers push notifications to Android devices.
• Apple — delivers push notifications to iOS devices and processes and verifies App Store purchases.
• Google Play — processes and verifies purchases made on Android.
• Social platforms you connect— when you publish, the clip and the caption or title you supply are sent to that platform at your instruction, under that platform's own privacy policy.
• Email delivery — a transactional email provider used to send account emails.
• Legal and safety — regulators, law enforcement or other parties where required by valid legal process, or where necessary to protect the rights, property or safety of Jetrr, our users or the public.

Share links. If you create a share link for a processed clip, anyone who has that link can view or download that file without signing in, until the link expires or you revoke it. Only you can create a share link, and you can revoke it at any time in the app.

Service providers are permitted to process your data only on our instructions and for the purposes described above, and are contractually required to provide the same or equal protection of user data as stated in this policy.

We keep information only as long as we need it:

• Account and profile data — until you delete your account, then removed within 30 days.
• Uploaded content and processed outputs — retained while your account is active so you can access your projects, and removed when you delete the project or your account. Download links for projects on the free plan expire 7 days after processing.
• Deleted projects and assets — permanently removed after a 7-day grace period.
• Notification history — 90 days.
• Audit and security logs — up to 12 months.
• Data export archives — the download link expires after 24 hours and the archive is then deleted.
• Subscription and billing records — retained as required by applicable tax and accounting law.

You can delete your SmartCut AI account and its associated data at any time. There are two ways to do this:

• In the app — open Profile, then Delete Account, and confirm.
• By email — if you have uninstalled the app, cannot access it, or signed in with Apple or Google, send a deletion request to mn@jetrr.comfrom the email address registered to your account, with the subject line "Account Deletion Request". This route is available to all account holders.

What is deleted: your account and profile, your uploaded content and processed outputs, your projects and processing history, your saved notification and device tokens, and any social account connections together with their stored access tokens.

What is retained: subscription and billing records that we are required to keep under applicable tax and accounting law, and security or audit records where we have a legal obligation to retain them. These are kept only for as long as the law requires.

We action deletion requests within 30 days and will confirm by email when your request has been completed.

If you are in the European Economic Area or the United Kingdom, you have the right to access your personal data, correct inaccurate data, request erasure, receive your data in a portable machine-readable format, restrict or object to certain processing, and withdraw consent at any time where processing is based on consent, without affecting processing carried out before you withdrew it. You can request a copy of your data by contacting us. You also have the right to lodge a complaint with the supervisory authority in your country of residence, place of work, or where the alleged infringement occurred.

If you are a California resident, you have the right to know what personal information we collect, use and disclose; to request deletion of your personal information; to correct inaccurate personal information; to obtain a copy of your personal information in a portable format; to limit the use of sensitive personal information; and to not be discriminated against for exercising these rights. As stated above, we do not sell or share personal information, and we do not use sensitive personal information (such as your account credentials) for any purpose other than providing and securing the Service.

To exercise any of these rights, contact us at mn@jetrr.com. For requests under the GDPR or UK GDPR we respond within one month, extendable by a further two months for complex requests, and we will tell you if an extension applies. For requests under California law we confirm receipt within 10 business days and respond within 45 calendar days, extendable once by a further 45 days. We may need to verify your identity before acting on a request.

Providing your data. Supplying an email address and password, or an Apple or Google sign-in, is necessary to create an account and use the Service. If you do not provide it, we cannot give you access. All other data is optional or is generated as a result of your use of the Service.

Automated decision-making. We do not carry out automated decision-making that produces legal or similarly significant effects about you within the meaning of Article 22 of the GDPR, and we do not profile you for that purpose. The AI models used to process your video operate only on the media you submit, to produce the output you requested.

The Service is operated using infrastructure located in the United States. If you use the Service from outside the United States, your information will be transferred to, stored and processed there. Where we transfer personal data out of the European Economic Area or the United Kingdom, we rely on appropriate safeguards such as Standard Contractual Clauses.

We apply technical and organisational measures appropriate to the risk, including:

• Encryption of all data in transit using TLS.
• Encryption at rest for our database and file storage.
• Strong one-way hashing of passwords; we never store them in readable form.
• Additional encryption of stored social platform access tokens.
• Role-based internal access control on a least-privilege basis.
• Credentials held in a managed secret store rather than in application code.

No method of transmission or storage is completely secure. If a breach occurs that affects your rights, we will notify you and the relevant authorities as required by applicable law.

We send notifications about your projects, processing jobs and account activity. You can turn notifications off at any time in your device settings, or in the app under notification preferences. Turning off push notifications does not affect the in-app notification list. Device tokens are removed when they become inactive.

SmartCut AI is not directed to children. We do not knowingly collect personal information from anyone under the age of 13, or under 16 in the European Economic Area and the United Kingdom. If we learn that we have collected such information, we will delete it and the associated account promptly. If you are a parent or guardian and believe your child has created an account, please contact us at mn@jetrr.com.

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. For material changes we will also notify you in the app or by email before the change takes effect.

If you have any question, concern or request about this Privacy Policy or how we handle your data, contact:

Jetrr
Email: mn@jetrr.com