Legal
Privacy Policy
How SwiftCut and VOST handle your personal information and data.
Last updated: May 2025
1. What We Collect
Account Information
- —VOST account email and name
- —Password (encrypted, never stored in plain text)
- —Account preferences and settings
Usage Data
- —AI-generated outputs and results
- —Usage timestamps and frequency
- —Credit consumption and balance
- —Job execution history and status
- —Shared results (if you use the share feature)
Payment Information
- —Subscription tier and plan details
- —Payment method information (stored by Stripe, not us)
- —Transaction history and receipts
Technical Data
- —IP address and device information
- —Session cookies and authentication tokens
- —Error logs and diagnostic data
2. How We Use Your Information
Service
- —Providing the AI generation service
- —Processing your inputs through AI models
- —Storing and displaying your generated results
- —Tracking credit usage and limits
- —Managing your subscription access
Payment
- —Processing subscription payments
- —Handling credit package purchases
- —Generating invoices and receipts
- —Managing refunds and disputes
- —Sending subscription and billing notifications
Product
- —Tool updates and feature announcements
- —Understanding how the tool is used
- —Improving tool performance and features
- —Identifying and fixing bugs
- —Providing usage statistics to the tool creator (aggregated only)
Legal
- —Responding to legal requests
3. Data Sharing & Third Parties
We share data with these service providers:
AI Providers (OpenRouter, Fal AI, and others)
- —Your prompts and inputs are sent to AI providers for processing
- —AI providers may use inputs to generate responses
- —Some AI providers may use data for model improvement (check their policies)
Supabase
- —Authentication and account management
- —Database storage
Stripe
- —Payment method and transaction data
- —Subscription billing information
Tool Creator (aggregated only)
- —Server logs and performance data
- —Aggregated analytics (counts, revenue, performance metrics)
- —NOT your individual inputs, outputs, or personal details
- —Unless you contact them for support
We may disclose data when required by valid legal process (subpoenas, court orders), national security requirements, or protection of rights and safety.
4. Your Content & Creator Access
Your inputs and generated outputs are stored securely in our database. This data is necessary to display your results and history, and to support the shared results feature.
What the Tool Creator Can See
- —Aggregated usage statistics (total jobs, success rates, average execution time)
- —Revenue and subscription metrics
What the Creator Cannot See (unless you request support)
- —Your specific prompts or inputs
- —Your individual usage patterns
If you use the share feature to make results public, anyone with the share link can view that specific result. Shared content is publicly accessible.
5. Security
- —TLS/SSL encryption for all data in transit (HTTPS)
- —Encryption at rest for stored data
- —Secure password hashing (never stored in plain text)
- —JWT authentication with secure cookies
- —Regular security updates and patches
- —Access controls and authentication
- —Automated backups and disaster recovery
- —Monitoring for suspicious activity
- —Incident response procedures
6. Cookies
Essential Cookies (Required)
- —Authentication and session management
- —Security and fraud prevention
- —Tool functionality and preferences
We use no advertising or marketing cookies, no third-party tracking pixels, and no sale of data to advertisers. Disabling cookies will prevent you from using the service.
7. Your Rights
- —View your data through your dashboard
- —Access your job history and generated content
- —Update your account information
- —Delete specific generated results
- —Delete your entire account and data
- —Manage email notification settings
- —Opt out of marketing communications
- —Control shared result visibility
California (CCPA) & Virginia Rights
If you're a California or Virginia resident, you have additional rights including the right to know what data we collect, request deletion, and opt-out of sales (which we don't do).
EU/EEA Rights (GDPR)
EU/EEA residents have rights to access, rectification, erasure, restriction, portability, and objection. You can also lodge complaints with your data protection authority.
Email support@edmundtian.com with your request. We'll respond within 30 days (GDPR) or 45 days (CCPA).
8. Data Retention
Your data is retained as long as you have an active subscription or account.
Upon Account Deletion
- —Generated content: Retained for 30 days, then deleted
- —Account data: Deleted within 30 days
- —Backup copies: Purged within 90 days
- —Shared results: Deleted when account is closed
Legal Retention (Longer Periods)
- —Financial records: 7 years (tax laws)
- —Transaction history: 7 years (financial regulations)
- —Legal disputes: Duration of dispute + statute of limitations
We may retain anonymized analytics data indefinitely for platform improvement.
9. Children's Privacy
SwiftCut is not intended for children under 13 years old. We do not knowingly collect personal information from children under 13. If you're under 13, do not use this service.
If you're between 13 and 18, you must have parental consent to use this tool.
If we discover we've collected data from a child under 13, we'll delete it immediately. Parents who believe we've collected their child's data should contact support@edmundtian.com.
10. International Data Transfers
Your data is stored and processed primarily in the United States on Supabase infrastructure.
By using SwiftCut, you consent to your data being transferred to, processed, and stored in the United States, which may have different privacy laws than your country.
For European users, we rely on Standard Contractual Clauses (SCCs) for international data transfers and implement appropriate safeguards to protect your data.
11. AI Processing Notice
Your prompts and inputs are sent to third-party AI providers (OpenRouter, Fal AI, and underlying AI model providers) for processing.
- —Some AI providers may use your inputs for model training and improvement
- —OpenRouter acts as an intermediary to multiple AI model providers
- —Different AI models have different data retention and usage policies
- —We cannot control how upstream AI providers use your data
What You Can Do
- —Don't input highly sensitive personal information
- —Review AI provider privacy policies if concerned
- —Understand that AI training may result in similar outputs for others
12. Changes to This Policy
We may update this privacy policy to reflect changes in our practices or for legal reasons. Material changes will be communicated via:
- —Updated date at the top of this page
- —Email notification for significant changes
We'll provide at least 15 days notice for material changes. Continued use after changes take effect means you accept the updated policy.
13. VOST Platform
SwiftCut runs on VOST's platform. VOST's privacy policy also applies to your VOST account, authentication, and platform features. This tool-specific privacy policy covers data collected and used by SwiftCut.
14. Contact
For privacy inquiries, data rights requests, technical support, or account issues, email support@edmundtian.com.