Your media stays on your device.

This policy explains what VaryClip processes, what it deliberately does not collect, and the choices available to you.

1. Who operates VaryClip

VaryClip is operated by Artem Gorchakov, an individual based in Kazakhstan. Privacy questions and rights requests can be sent to privacy@varyclip.com. Product support is available at support@varyclip.com.

2. Media stays local

Source videos, generated MP4 files, frames, audio, filenames, and source-file hashes are processed inside your browser and are not sent to the VaryClip account or billing backend. Finished files may be stored in browser-managed storage on your device so they can be recovered after a refresh. They remain there until you remove them, clear the site's local data, or your browser removes that storage.

3. Information we process

We process the minimum control-plane data needed to run a paid account: email address, optional display name, authentication provider and account identifier; plan, subscription, payment and usage-ledger records; package status, requested output count, timestamps, app release and broad device class; security events; and messages you choose to send to support. Render-operation records do not contain your media, filename, media URL, or source hash.

4. Why we use it

We use account and usage data to authenticate you, provide the service, prevent duplicate charges, recover interrupted work, manage subscriptions, answer support requests, secure VaryClip, prevent abuse, and meet legal and accounting duties. These uses are necessary to perform our contract with you, comply with law, and pursue legitimate interests in operating and protecting the service. VaryClip does not use advertising trackers or behavioral advertising at launch.

5. Service providers

We use Supabase for authentication and account data; Cloudflare for hosting, security, logs and inbound email routing; Lemon Squeezy as merchant of record for checkout, billing and tax handling; Resend for transactional email and support replies; Google when you choose Google sign-in; and Telegram to deliver support or privacy messages to the operator. Each provider processes only the data needed for its role and may process it in countries outside yours under its own safeguards and terms.

6. Retention

Account data is kept while your account is active. A deletion request has a seven-day recovery window; after that, sign-in access is disabled and identifying account fields are replaced with non-user identifiers. Webhook processing metadata is kept for up to 180 days, security logs for up to 90 days, and support correspondence for up to 24 months. Subscription, payment, usage-ledger and related package-accounting records may be retained for up to seven years where needed for tax, accounting, fraud prevention or legal claims. Backups expire on their normal rotation.

7. Your choices and rights

You can review account, subscription and usage information, export your account record, sign out of devices, and request account deletion from Account. You may also ask for access, correction, deletion, restriction, objection, or a portable copy where applicable by emailing privacy@varyclip.com. We may verify your identity before acting. Mandatory rights under your local law are not limited by this policy.

8. Security and age

VaryClip uses access controls, encrypted transport, scoped database policies and server-only billing operations. No online service is completely risk-free, so keep your device and sign-in account secure. VaryClip is intended for people aged 18 or older and is not directed to children.

9. Changes

We may update this policy as the service or law changes. Material changes will be posted here with a new date and, when appropriate, communicated through the service or by email.