Privacy policy

We collect account and profile details, authentication and security records, workspace membership, billing identifiers, support communications, feature usage, device and diagnostic information, and content you choose to upload. Subscription payments are handled by Polar and its payment processors. Cutwords does not store payment card details. Stripe Connect handles separate freelancer invoices and payouts.

With product-analytics permission, we collect normalized page routes, campaign labels, interaction and feature lifecycle events, scroll depth, coarse device context, and internal user or workspace IDs. We exclude form values, names, email addresses, project and video titles, transcripts, comments, prompts, media, signed URLs, credentials, and payment details from behavioral analytics.

If you allow affiliate attribution, we keep an opaque first-touch token in first-party browser storage through its stated expiry. We also store campaign and landing details, timestamps, and keyed hashes of network and browser signals. We do not retain raw IP addresses in the affiliate click record, and Global Privacy Control disables this capture.

We use data to provide and secure the service, process subscriptions, enforce entitlements, collaborate on media, operate referral and affiliate programs, prevent fraud, troubleshoot failures, communicate about accounts, and meet legal obligations. Optional product analytics or marketing communications follow the preferences and consent controls shown in the product.

Content and instructions may be sent to infrastructure, storage, transcription, generation, email, analytics, and payment providers when needed to perform a requested feature. Providers are limited by contract and service configuration. Do not submit personal or confidential material to an AI feature unless you are authorized to do so.

PostHog processes optional product analytics after the analytics control is enabled. Its session replay remains separately disabled unless you enable replay, and Cutwords blocks replay on account, billing, security, editor, player, review, contract, and other sensitive routes. Inputs and visible text are masked, and video, audio, canvas, editable content, and private-marked elements are blocked.

Sentry processes privacy-scrubbed error and performance diagnostics needed to detect failures and protect service reliability. We send normalized routes, release and environment details, internal IDs, and safe technical context; request bodies, authorization data, cookies, user-authored text, and media URLs are removed. Cutwords does not enable Sentry Session Replay.

Polar is the source of truth for new subscription checkout, invoices, status, and cancellation details. Normalized subscription events may be used in product reporting. Free-text feedback is kept in restricted encrypted Cutwords storage and is not copied into PostHog.

We share data with service providers, workspace members and invited collaborators as directed by product permissions, and with authorities or counterparties where required for law, safety, fraud prevention, or a corporate transaction. We do not sell personal data for money.

Data is retained for as long as needed to provide the service, maintain financial and security records, resolve disputes, and satisfy law. Provisional analytics limits are 30 days for session replay, 90 days for heatmap data and Sentry events, 15 months for raw product events, 25 months for modeled aggregates, and 12 months for restricted cancellation feedback, subject to legal and operational review. Security, billing, fraud, and legal records follow their applicable policies.

We use access controls, encryption in transit, audit records, and other safeguards, but no system can guarantee absolute security.

Analytics preferences let you independently disable product analytics, session replay, and project-data improvement. Withdrawing optional analytics takes effect in the browser immediately. We honor Global Privacy Control by forcing optional analytics off under the configured policy.

Signed-in users can export their Cutwords analytics record or request its deletion from Analytics preferences. Provider deletion is processed asynchronously; billing, fraud, security, and legal records may be retained where required. Depending on location, you may also request access, correction, deletion, portability, restriction, or objection.

Data may be processed in countries where Cutwords or its providers operate, using appropriate transfer safeguards where required. Cutwords is not directed to children and users must meet the age required to enter a binding agreement in their jurisdiction.

Privacy questions and rights requests can be sent to privacy@cutwords.com. We may update this policy prospectively and will provide notice of material changes where required.