Privacy Policy
Last updated: November 6, 2026
This policy explains what personal data Typecut collects, why, who we share it with, how long we keep it, and the rights you have. It covers typecut.ai, app.typecut.ai, the Typecut apps, API, MCP connector and tools (the “Service”).
Who is responsible
The controller of your personal data is Webwurks Studio LLC (“Typecut”, “we”), 30 N Gould St, Ste R, Sheridan, WY 82801, United States. Contact us about privacy at privacy@typecut.ai.
What we collect
- Account data: your email address; if you sign in with Google or Apple, your name, profile picture and the account identifier they give us; your workspace and team membership.
- Content: scripts, prompts, projects, uploaded media, voice recordings you upload, generated audio, pictures and video, comments, and the messages you or your AI assistant exchange with the Service.
- Billing data: plan, purchases, invoices and credit history. Card details are collected and held by Stripe; we never see your full card number.
- Usage and device data: logs of requests and actions, IP address, browser and device type, error reports, and, if you allow analytics cookies, how you use the site and app.
- Connected assistants: which assistants and subscriptions you connected, their state and usage readings. Login tokens for a connected subscription stay inside your private machine; we do not store your password.
- Safety and anti-abuse data: sign-up signals such as IP address, bot-check results and a one-way hash of your email address and sign-in account identifier, used to stop fraud and repeat free-credit claims.
Why we use it, and on what legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Provide the Service: accounts, projects, generation, rendering, sharing, support | Performance of our contract with you |
| Bill you, keep accounting and tax records | Contract; legal obligation |
| Send service emails (receipts, security, changes to terms) | Contract; legitimate interest |
| Keep the Service secure, prevent fraud, chargebacks and free-credit abuse, enforce our terms | Legitimate interest in protecting our users and business |
| Fix bugs and measure reliability (error reports, logs) | Legitimate interest |
| Product analytics and session replays | Your consent (cookie banner), which you can withdraw at any time |
| Product news emails | Your consent, or legitimate interest for existing customers, with one-click unsubscribe |
| Respond to legal requests and reports of illegal content | Legal obligation; legitimate interest |
We do not sell your personal data, we do not use it for advertising profiles, and we do not use your content to train AI models.
AI processing
To make your videos, the prompts, scripts, media and voice recordings you submit are sent to the AI providers that do each task. We use their business or API terms, under which they process your content to return a result and, where they offer it, do not use it to train their models. Inside the app we ask for your agreement before your content first goes to these providers.
Voice recordings and voice clones
If you create a voice clone, we store the recording you provide and the voice made from it in your account, and send the recording to the voice provider that builds the clone. We use them only to speak lines you ask for, in your account. You can delete the voice at any time, and deleting your account deletes them. You must have the speaker’s permission (see our Terms).
Who we share data with
We share personal data only with service providers that process it for us under contract, and when the law requires.
| Provider | What for | Where |
|---|---|---|
| Supabase (on AWS) | Database and sign-in | Ireland |
| Vercel | Website and app hosting | Global edge, US |
| Hetzner | File storage and servers | Germany |
| Stripe | Payments, invoices, fraud checks | US, EU |
| Resend | Email delivery | US |
| Cloudflare | Bot protection (Turnstile), network | Global |
| PostHog | Product analytics, only with consent | EU |
| Sentry | Error reports | US |
| Amazon Web Services | Thumbnail rendering | Ireland |
| RunPod | GPU rendering and audio processing | US, EU |
| Sign-in with Google; Gemini AI models | US, EU | |
| Apple | Sign in with Apple; app distribution | US |
| Anthropic | Claude AI models (writing, agents) | US |
| OpenAI | AI models (writing, pictures) | US |
| ElevenLabs, Inworld, Fish Audio | Voices and voice clones | US, EU |
| Runware, Replicate, fal, OpenRouter | Running AI models for pictures, video, voice and music | US, EU |
| Deepgram, Groq | Transcription and word timings | US |
| Stock libraries (Pexels, Pixabay, Freesound and others) | Search queries only, no personal data | Various |
If you connect an AI assistant or subscription, the data you exchange with it is handled by that provider under your own agreement with them. We may also disclose data to comply with law, to protect rights and safety, or as part of a sale or reorganisation of the business, in which case this policy continues to apply.
International transfers
We are based in the United States and some providers process data outside the European Economic Area and the UK. Where we transfer personal data from the EEA or UK, we rely on the EU–US Data Privacy Framework where the recipient is certified, or on the European Commission’s Standard Contractual Clauses (with the UK addendum), plus additional safeguards where needed.
How long we keep it
| Data | Kept for |
|---|---|
| Account and content | Until you delete it or your account, then removed from backups as they roll over |
| Invoices, payments and credit history | 10 years, for tax and accounting law and payment disputes, kept against an anonymised account |
| Anti-abuse record (hashed email and sign-in id) | 3 years after the account closes, so free credits stay one per person |
| Server logs and error reports | Up to 90 days |
| Analytics | Up to 12 months, only if you consented |
| Content reports and moderation decisions | Up to 3 years |
Cookies
We use cookies and similar storage that are strictly necessary to sign you in, keep you secure, remember your cookie choice and run payments. With your consent we also use PostHog analytics cookies and session replays (form inputs are masked) to understand how the product is used. You choose in the cookie banner and can change your choice at any time from the “Cookie settings” link in the site footer. Vercel Web Analytics, which we also use, does not set cookies.
Your rights
Depending on where you live (including under the EU and UK GDPR and US state laws such as the CCPA), you can ask to access, correct, delete or receive a copy of your data, object to or restrict processing based on legitimate interest, and withdraw consent at any time. You can delete your account yourself in Settings. To exercise any other right, email privacy@typecut.ai from your account address; we answer within one month. If you are in the EU or UK you can also complain to your data protection authority, such as the CNIL in France or the ICO in the UK.
Security
We protect data with encryption in transit, access controls, row-level security in our database, hashed secrets, and isolated machines for connected assistants. No system is perfectly secure; if a breach affects you, we will tell you and the authorities as the law requires.
Children
The Service is for people aged 18 and over. We do not knowingly collect data from children; if you believe a child has given us data, contact us and we will delete it.
Changes
We will post changes here and update the date above; for material changes we will also tell account holders by email or in the product before they take effect.
© 2026 Webwurks Studio LLC · Terms · Acceptable use · Privacy · Refunds · Report content · Contact