Privacy policy
Effective from: 31 October 2026
We collect only the data we need to edit and deliver your video. We use no advertising or tracking cookies, our analytics store no IP addresses, and we do not send marketing e-mails without your consent.
1. Controller
The controller of your personal data is:
- Jiří Ozdobinski, sole trader, Company ID (IČO): 75371341
- Kollárova 3122/1a, Královo Pole, 61200 Brno
- E-mail: hello@cutito.com
We have not appointed a data protection officer. For any question about your data, write to hello@cutito.com.
2. What data we process
- Contact details: your e-mail address and, if you enter it, your name. If you join the waitlist, only your e-mail address.
- Order data: your brief, answers in the order form, chosen formats and add-ons, the editing plan, price, delivery dates, comments on the video and our messages with you.
- Your materials: uploaded video, audio and image files, or links to them. They may show or contain the voice of other people, such as colleagues or event guests.
- Voice recordings: if you dictate your brief, the recording is sent for transcription and is not stored by us; we keep only the resulting text.
- Payment and billing data: billing name and address, and payment status. Card details are entered directly at Stripe; we never see or store them.
- Technical and security data: short-lived security cookies (see section 7), a one-way hash of your IP address used for abuse limits, and the result of a bot check.
- Anonymous analytics: page views and order steps without cookies and without IP addresses (see section 7).
3. Why we process it and on what legal basis
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Preparing a quote and editing plan from your brief | brief, materials summary, voice recording | steps before entering into a contract, Art. 6(1)(b) |
| Editing and delivering your order, review and revisions | contact, order data, materials | performance of a contract, Art. 6(1)(b) |
| Payment, invoicing and accounting | billing and payment data | legal obligation, Art. 6(1)(c) |
| Answering your messages and complaints | contact, messages | contract, Art. 6(1)(b), and legitimate interest, Art. 6(1)(f) |
| Security, preventing abuse and fraud | IP hash, bot check, security cookies | legitimate interest, Art. 6(1)(f) |
| Anonymous traffic and order-step statistics | analytics events without personal identifiers | legitimate interest, Art. 6(1)(f) |
| Legal claims | order data and messages | legitimate interest, Art. 6(1)(f) |
| Launch notice, if you join the waitlist | consent, Art. 6(1)(a) | |
| Newsletter or other marketing e-mails, if we ever offer them | consent only, Art. 6(1)(a) |
People who appear in your footage: we process their image and voice only to edit your video, on your instructions. Making sure they agreed to the recording and its use is your responsibility as the person ordering (see the terms of service).
4. Who processes data for us
We do not sell your data. We share it only with service providers who process it on our behalf under a data processing agreement:
| Provider | What they do for us | Location and transfers |
|---|---|---|
| Cloudflare, Inc. | website hosting, database, storage of uploaded files and finished videos (R2), bot check (Turnstile), access protection for our studio (Access), cookieless traffic statistics (Web Analytics) | global network, USA; EU Standard Contractual Clauses and EU-U.S. Data Privacy Framework |
| Stripe Payments Europe, Ltd. | card payments, invoices | Ireland, EU; transfers to Stripe, Inc. (USA) under Standard Contractual Clauses and the Data Privacy Framework |
| OpenAI (OpenAI Ireland Ltd. / OpenAI, L.L.C.) | drafting the editing plan and quote from your brief text and a summary of your materials (file names, lengths, links); transcription of a dictated brief. Your video files and e-mail address are not sent. | USA; Standard Contractual Clauses. Under OpenAI's API terms, data is not used to train models. |
| Resend (Plus Five Five, Inc.) | sending and receiving order e-mails | USA; Standard Contractual Clauses |
We may also disclose data to public authorities when the law requires it, and to our accountant or tax adviser for accounting.
5. How long we keep data
| Data | How long |
|---|---|
| Uploaded source files and finished videos | archived; there is no fixed deletion period yet |
| Contact details, order data, brief and messages | 3 years after your last order, for complaints and legal claims |
| Invoices and accounting records | 10 years, as required by Czech tax and accounting law |
| One-time e-mail access links and access sessions | until they expire; deleted automatically |
| IP hashes for abuse limits | hours to days, deleted automatically |
| Cached AI extraction of a brief | 7 days |
| Cached AI editing plan | 6 hours |
| Waitlist e-mail address | for as long as your consent lasts, i.e. until you unsubscribe (with the unsubscribe link in every e-mail we send, or just reply to the e-mail) or ask us to delete it at hello@cutito.com; no time limit |
| Anonymous analytics events | archived; there is no fixed deletion period yet |
You can ask us to delete your materials and finished videos at any time by e-mail to hello@cutito.com.
6. Your rights
You have the right to:
- access your personal data and get a copy;
- have inaccurate data corrected;
- have data erased when we no longer need it or process it unlawfully;
- restrict processing;
- data portability for data you gave us under a contract or consent;
- object to processing based on legitimate interest;
- withdraw consent at any time, if processing is based on consent.
Write to hello@cutito.com. We will reply within one month. You also have the right to lodge a complaint with the Czech data protection authority, Úřad pro ochranu osobních údajů, Pplk. Sochora 27, 170 00 Praha 7, www.uoou.gov.cz.
7. Cookies, browser storage and analytics
We use no advertising, marketing or third-party tracking cookies, so we do not show a cookie banner. We use only what the site needs to work:
| Name | Type | Purpose | Lifetime |
|---|---|---|---|
__Host-cutflow-payment | cookie (HttpOnly) | connects your browser to your guest order and payment | 30 days |
__Host-cutito-access | cookie (HttpOnly) | keeps you signed in to your project after you open your project link | 30 days |
cutito_ai_pass | cookie (HttpOnly, signed) | proves you passed the bot check before the AI drafts your plan | 30 minutes |
cutflow-prototype-v1 and -holds | localStorage | saves your unfinished order and a short capacity hold in your browser | until you clear it |
cutito-theme | localStorage | remembers your light/dark mode preference; no personal data | until you clear it |
cutflow-selected-files | IndexedDB | keeps the files you selected until the upload finishes | until the upload finishes or you clear it |
| analytics session ID | sessionStorage | random ID for one browser tab, so we can count order steps | until you close the tab |
Analytics. We measure page views and the steps of an order (for example "brief started" or "payment completed") with our own cookieless analytics. For each event we store only the time, page, referring website, campaign tags, country, device type (mobile or desktop) and a random ID of the browser tab. We do not store IP addresses, e-mail addresses, order IDs or browser fingerprints, and we cannot identify you from this data. We also use Cloudflare Web Analytics, which works without cookies and without storing IP addresses.
8. Marketing e-mails
If we send e-mails, they relate only to your order, for example confirmation, delivery, review or messages from your editor. We send newsletters or offers only if you have expressly agreed to them, and you can unsubscribe at any time.
9. Security
Data is transferred over encrypted connections. Access links and session tokens are stored only as one-way hashes. Access to our studio tools is protected by Cloudflare Access.
10. Changes
We may update this policy when our service or the law changes. The current version is always on this page with its effective date.
11. Contact
Questions about your data: hello@cutito.com, Kollárova 3122/1a, Královo Pole, 61200 Brno.