Privacy Policy

Last updated: October 14, 2026.

This policy explains what happens to your data when you use the UnlimiClip website at unlimiclip.com, the UnlimiClip account you create on it, and the UnlimiClip desktop app. It is written to be checked: every practice described here matches how the software actually behaves. Your use of the site and the app is also governed by the Terms of Service and the End User License Agreement.

1. Who this policy covers

UnlimiClip is operated by Rovantus Digital Solutions, a Tunisian limited liability company (SUARL), at 14D, Rue Emi Abdelkader, Mutuelle Ville 1082, Tunisia. That company is the data controller for the personal data described in this policy. "UnlimiClip", "we" and "us" refer to it; "you" refers to the person using the site, the account or the app.

This policy covers three surfaces: the website, the account and licensing service behind it, and the desktop application you install on your own computer.

2. What never leaves your computer

UnlimiClip is a desktop application, not a cloud service. Your videos, images, audio, project files and templates never leave your computer. Every render runs on your own machine, and we never upload, receive, scan or store your media. Speech is transcribed on your own machine by a speech model that runs inside the app, and AutoClip judges your videos with a language model that also runs on your own machine, so no video, audio or transcript is sent to us or to any AI provider.

The app contains no crash reporting and no third-party analytics. Besides the sign-in, licence and session checks described below, downloading its own updates and the parts it needs on first use (FFmpeg, a larger speech model, and the AutoClip AI pack from the llama.cpp releases on GitHub and from Hugging Face), its only network requests are the usage statistics described in section 3, which you can turn off in the app's settings.

3. What we collect and why

Account data. If you sign up with an email address, we store your name, email address and password. The password is stored hashed — we never hold it in plain text and cannot read it. If you use "Sign in with Google" instead, Google gives us your name, email address and profile picture, and we store the account identifier and tokens Google returns so the sign-in keeps working. Purpose: to give you an account, sign you in, and attach your trial and licence to it.

Sign-in sessions. Each sign-in creates a session record holding a session token, its expiry, and the IP address and browser user agent of the sign-in. Purpose: keeping you signed in, and being able to see how and when an account was accessed.

Licence and trial data. Trial start and end dates, the purchase date, a refund date if one applies, and the identifiers from your order. Purpose: to determine whether your account may use the app and for how long it receives updates. Your account is shared by every amplimake app, so this data is stored per app: each app has its own trial, licence and order records.

Desktop session data. When the app signs in, we store a device identifier, a device label and a last-seen time. The device identifier is a random identifier the app generates for itself the first time it runs and keeps in its own settings folder — it is not a hardware fingerprint and carries nothing about your computer. The device label is a generic word the app sends, "Windows PC" or "Desktop", never your computer's name. Purpose: enforcing the one-signed-in-machine-at-a-time licence rule.

Contact form messages. When you use the contact form, we store the topic you chose, the email address you enter, your message and, for bug reports, the app version and operating system if you fill them in. If you are signed in, we also note which account sent it. The message is emailed to our support inbox with your address as the reply-to. Purpose: answering you. To stop abuse, we keep short-lived counters keyed to your email address and to a one-way hash of your IP address; they are deleted within a day.

Website usage statistics. We count visits ourselves, without cookies and without storing anything in your browser: which pages are viewed, download and buy button clicks, the site that sent you (referrer and campaign tags in the link), your country and your operating system. Your IP address is never stored: it is combined with your browser's user agent and turned into a one-way hash, which is mixed with a random value that we delete at the end of each day, so a visitor cannot be recognised from one day to the next. If you are signed in, these events are linked to your account, and we note the source of your first visit (for example "Google" or a campaign name). Bots are not counted. Purpose: understanding how people find UnlimiClip and where they stop before buying.

Desktop app usage statistics. Unless you turn off Share usage statistics in the app's settings, the app sends when it is started and used each day, when you sign in, and which of its main features you use (for example a AutoClip analysis or an export through a template), together with the app version and your operating system. They are tied to a one-way hash of the app's random device identifier and, when you are signed in, to your account. They never include file names, paths or any of your content. Purpose: knowing which features matter and whether the trial helps people decide.

Technical data from web requests. Serving a page requires your IP address, the address you asked for and your browser's user agent. Our host processes and logs that data to deliver the site and to protect it from abuse.

4. Cookies and analytics

The sign-in cookie is strictly necessary: it is set when you sign in so the site knows the next request is still you. It is not used for tracking or advertising, and without it you cannot stay signed in.

Our own statistics use no cookies. The website usage statistics described in section 3 store nothing in your browser and are not part of the analytics choice below.

Third-party analytics are off until you turn them on. This website can load Google Analytics 4 and Microsoft Clarity. They are not loaded until you accept them: on your first visit a consent banner asks, and until you press Accept no analytics script is requested and no analytics cookie is set. Pressing Reject keeps them off. Your answer is remembered in your own browser under the key unlimiclip-analytics-consent-v1 so you are not asked again on every page; it stays in that browser and is never sent to us or to anyone else.

What they do once you accept. Between them they collect the pages you view, how you arrived, an approximate location derived from your IP address, and your device and browser details, and they set their own cookies and browser storage. Microsoft Clarity additionally produces session recordings and heatmaps — a replay of pointer movement, clicks and scrolling on the pages you visit — which we use to find where the site confuses people. Neither runs inside the desktop app.

Do Not Track and Global Privacy Control. If your browser sends a Global Privacy Control or Do Not Track signal, we treat it as a refusal: the analytics stay unloaded and the banner is not shown at all. If you have already accepted in this browser, that recorded choice takes precedence over the signal. The button below only forgets a stored answer — while your browser keeps sending the signal, we will not ask again.

Webfonts. The site's typefaces are served by Google Fonts, so your browser contacts Google's servers when a page loads and Google receives your IP address as part of that request. This request is part of serving the page and is not covered by the analytics choice above.

Changing your mind. This forgets your stored answer and asks again:

Change your analytics choice

Choosing Reject stops the tags from loading; if they are already running on the page you are on, that page reloads without them.

Other ways to refuse. Use your browser settings to block or delete cookies for this site and for the analytics providers; install the Google Analytics Opt-out Browser Add-on; or use any tracker-blocking extension — blocking the domains googletagmanager.com and clarity.ms stops both tags from loading. The site works completely without them, and refusing them has no effect on your account, your trial or your licence.

5. Payments

Checkout is not on this site. It is hosted and processed by Lemon Squeezy: Lemon Squeezy is the merchant of record for UnlimiClip purchases, which makes them the seller on your order. When you start a purchase we hand Lemon Squeezy your UnlimiClip account identifier and the email address on your account, so the purchase can be attached to the right account. Your card details, billing address and tax details are collected and held by Lemon Squeezy on their own systems: we never see or store your card details.

When Lemon Squeezy confirms an order, it notifies our backend. From that notification we store the order identifier and the Lemon Squeezy customer identifier against your account, along with the purchase or refund date, plus a small ledger entry per event so a repeated notification can never be applied twice. The buyer email address in the notification is used to send the purchase confirmation and is not stored.

6. Email

We send exactly one automated email: the purchase confirmation, when an order completes. It is delivered through Brevo. There is no marketing email, no newsletter and no mailing list — we do not have one and there is nothing to unsubscribe from. Replies go to contact@unlimiclip.com and are read by a person. Messages you send through the contact form are also delivered to that inbox through Brevo; they are not sent to anyone else.

7. Who processes your data

These are the third parties involved, what each one does, and where to read their own policy. We use no others.

• Convex — our backend and database: account, licence, trial and desktop-session records, and contact form messages.
• Cloudflare — hosts and serves this website, and delivers the installers and update manifests.
• Lemon Squeezy — checkout, payment processing, tax handling and receipts, as merchant of record.
• Google — Google Analytics 4 on this website, "Sign in with Google" if you choose it, and the Google Fonts the site loads.
• Microsoft — Clarity analytics, session recordings and heatmaps on this website.
• Brevo — delivery of the purchase confirmation email, and of contact form messages to our inbox.

We do not sell your personal data, we do not share it for advertising, and we do not hand it to data brokers or use it to build profiles for anyone else.

8. Where your data is processed

Your account, licence, trial and session records and contact form messages are stored in our Convex database, which runs in the United States (Amazon Web Services, US East — Northern Virginia). This website and the installers are served by Cloudflare from its global network, usually from a data centre near you.

The other providers listed above also operate internationally, so your data may be processed outside the country you live in. Each provider's policy, linked above, sets out where it stores data and what safeguards it applies to international transfers.

9. How long we keep it

Account, licence and desktop-session data is kept for as long as your account exists. Delete your account from your account page and that data is removed from our database straight away; ask us to close the account instead and it is deleted within 30 days of your request.

The one-time codes that pass a sign-in from your browser to the desktop app are far shorter lived: each is valid for 60 seconds, is void after a single use, and is deleted automatically within the hour by a scheduled cleanup job. Desktop session records are one per account and app — signing in on another machine deletes the previous record immediately. Order records are kept while the account exists, because they are the proof of your licence.

Sign-in session records, with their IP address and browser user agent, are deleted automatically 30 days after the session expires. The log of purchase notifications we receive from Lemon Squeezy is deleted automatically after 90 days; your order record above is kept. Emails you send to contact@unlimiclip.com are kept for 2 years after the conversation ends, then deleted. Contact form messages are deleted automatically 2 years after you send them.

Individual website and app usage events are deleted automatically after 90 days; after that only daily totals remain, which identify no one. The source of an account's first visit is kept while the account exists. Deleting your account deletes the usage events and first-visit source linked to it.

Google Analytics and Microsoft Clarity data is held by Google and Microsoft under their own retention settings; we keep no separate copy of it.

10. How we protect it

The website and the account service are served over HTTPS only. Passwords are stored hashed, never in plain text. The browser-to-app sign-in never puts a session token in a URL: the browser receives a single-use code that expires in 60 seconds, the app exchanges it over HTTPS, and a code that has already been used is rejected. Order notifications from Lemon Squeezy are rejected unless their cryptographic signature verifies against a secret only the two of us hold. One machine may be signed in to an account at a time. No system is perfectly secure, and we cannot promise absolute security.

11. Your choices and rights

Depending on where you live, you may have the right to obtain a copy of the personal data we hold about you, to have it corrected, to have it deleted, to object to or restrict some processing, and to complain to your local data protection authority. Write to contact@unlimiclip.com to exercise any of them.

Download your data yourself on your account page, under "Your data": you get a JSON file with your profile, sign-in methods and sessions, the licence, trial, order and desktop-session records of every amplimake app on the account, and the contact form messages sent from your account or its email address. Passwords, sign-in tokens and licence key secrets are never included.

Delete your account yourself on your account page, under "Your data": you confirm with your email address and, if your account has one, your password. This removes your account, sign-in methods and sessions, licence, trial, order and desktop-session records, and the contact form messages sent from your account or its email address — for every amplimake app on the account, because they share it. Every licence on the account is lost for good. Lemon Squeezy keeps its own order records as the merchant of record, and emails you sent to contact@unlimiclip.com are kept as section 9 describes unless you ask us to delete them.

For any other request, including a copy of emails you sent us, or to have us delete the account for you, write to us: a person handles each request, and we may need to confirm that you control the account before acting on it. You can stop the website analytics at any time using the methods in section 4.

12. Children

UnlimiClip is not directed at children and we do not knowingly collect personal data from anyone under 16. If you believe a child has created an account, write to contact@unlimiclip.com and we will delete it.

13. Changes to this policy

We will update this policy when the product or the providers behind it change. The "last updated" date at the top of this page always reflects the current version, and material changes will be announced on this site.

14. Contact

Questions about this policy, or a request about your data, go to contact@unlimiclip.com, the address listed on our contact page.