Privacy Policy

Last updated: November 10, 2026

1. Who is responsible
2. Data that stays on your computer
3. Data that leaves your computer
4. Your TikTok account data
5. This website and the login bridge
6. Purposes and legal bases
7. Sharing and international transfers
8. Retention and deletion
9. Your rights
10. Security
11. Minors
12. Changes to this policy

1. Who is responsible

ClipCerto is maintained by the ClipCerto team, in Brazil, who is the controller of the personal data processed by this website under the Brazilian General Data Protection Law (Law No. 13,709/2018, “LGPD”).

Contact for any privacy matter: clipcerto.ia@gmail.com.

This policy applies to the ClipCerto application for Windows and to the website https://clipcerto.pages.dev.

2. Data that stays on your computer

The application stores the data below in ClipCerto's data folder on your computer (%LOCALAPPDATA%\ClipCerto). We have no access to any of it.

• Videos and clips: the videos you upload or download by link, the generated clips and their covers.
• Transcripts: the text spoken in the videos, with the timing of each word. Transcription is done on your computer.
• Projects and preferences: titles, captions, hashtags, scores, clip options and the date on which you confirmed holding the rights to each video.
• OpenRouter key: the key you paste into the app, stored in the local database.
• TikTok connection: described in section 4.
• Technical logs: a local log file used to diagnose errors. It is not sent to anyone.

To detect faces and reframe the video vertically, the app analyzes the images on your computer. It only locates the position of the face in each scene: it does not identify people, does not create biometric templates and does not send those images to anyone.

3. Data that leaves your computer

The application communicates over the internet only in the situations below.

Destination	What is sent	When
OpenRouter (openrouter.ai)	The transcript text with timings, the clip options you chose and, if you fill them in, the written request and context. Your OpenRouter key is sent along. The video file and the audio are not sent.	When you create or redo the clips of a video, and when the app checks your key and free quota.
TikTok	The clip file, the caption and the posting options you chose (who can view, comments, duet, stitch, cover and commercial content disclosure).	Only when you click to post or to send a draft.
ClipCerto website	A configuration request (whether there is a new version, and the app's public TikTok data) and, during TikTok login, the codes described in section 5.	When the app opens, from time to time, and when you connect, refresh or disconnect TikTok.
Video platform (for example, YouTube)	The download request for the link you pasted.	Only when you use a link instead of uploading the file.
Hugging Face	The download of the transcription model. None of your data is sent.	On the first transcription with each model size.
Google Fonts	The download of the font used on the app's screens. None of your data is sent.	When the app's screens open.

In any internet connection, the service receiving the request sees your IP address and technical data about the request. This applies to every destination in the table.

About OpenRouter: the account and the key are yours, and the processing of the text you send follows the privacy policy of OpenRouter and of each model's provider. Free models may log the text they receive or use it to train models, depending on your OpenRouter account settings. For that reason, do not create clips from videos containing confidential information or other people's sensitive data.

4. Your TikTok account data

Connecting TikTok is optional. If you connect, the login happens on TikTok's own page; ClipCerto never sees your password.

What the app receives from TikTok

• Account identifier (open_id), display name and profile picture URL (user.info.basic scope), to show on screen which account is connected.
• Posting information for the account (nickname, available privacy options, whether comments, duet and stitch are disabled, and the maximum video duration), queried each time you open the posting screen.
• Access tokens (access token and refresh token), which allow posting on your behalf while the connection exists.
• Status of the posts you made through the app (processing, published, failed) and the identifier of the published video.

How this data is used

• Only to show the connected account and to post, or send as a draft, the clips you choose (video.publish and video.upload scopes).
• It is stored only on your computer. It is not sent to us, not sold and not shared with third parties.
• The app does not read your videos, followers, messages or any other data from your account.

How to remove it

• In the app, under Settings → Disconnect: the tokens are erased from your computer and access is revoked at TikTok.
• In the TikTok app, under Settings and privacy → Security & permissions → Manage app permissions, you can also remove ClipCerto.

5. This website and the login bridge

The website. This website has no sign-up, forms, ads, tracking cookies or analytics tools. It is hosted by Cloudflare, which, like any hosting service, processes your IP address and technical browser data to deliver the pages and protect the service from abuse.

The login bridge. TikTok requires an app's login to be confirmed with a secret key, which cannot be kept inside a program installed on your PC. So when you connect, refresh or disconnect TikTok, the app sends the request to the bridge on this website, which adds the secret key and forwards the request to TikTok. The following pass through the bridge, in transit:

• the temporary authorization code issued by TikTok at login;
• the access tokens returned by TikTok, delivered directly to the app on your PC;
• the refresh token, when the app renews access, and the access token, when you disconnect.

The bridge does not store, log or reuse any of this data. It does not receive your videos, your captions or your username: posts go straight from your computer to TikTok.

E-mail. If you write to us, we use your address and the content of the message only to reply.

6. Purposes and legal bases

• Making the application work as you requested (creating clips, connecting and posting to TikTok): performance of the service you requested (LGPD, art. 7, V) and your consent when you authorize ClipCerto at TikTok (art. 7, I).
• Delivering the website and protecting the bridge from abuse: legitimate interest (art. 7, IX).
• Answering your messages and requests: performance of the service and compliance with legal obligations (art. 7, V and II).

We do not use your data for advertising, behavioral profiling or automated decisions about you.

7. Sharing and international transfers

We do not sell or rent personal data. The only third parties involved are the services the application itself uses at your request:

• TikTok, for login and posting;
• OpenRouter and the AI model providers, for choosing the moments;
• Cloudflare, which hosts this website and the login bridge;
• GitHub, where the installer file is hosted;
• the video platform of the link you paste, Hugging Face and Google Fonts, for downloads.

These services may process data outside Brazil, including in the United States, under their own privacy policies. When you use these features, you send the data directly to them.

8. Retention and deletion

• On your computer: data stays until you delete it. You can delete each project or clip in the app, remove the OpenRouter key and disconnect TikTok under Settings. To delete everything, uninstall ClipCerto through Windows and delete the %LOCALAPPDATA%\ClipCerto folder.
• On the login bridge: nothing is stored.
• At TikTok and OpenRouter: what you posted or sent follows those services' rules. To delete it, use their tools.
• E-mails: we keep messages for as long as needed to reply and, after that, for up to 12 months.

9. Your rights

The LGPD gives you, among others, the right to confirm whether we process your data, to access and correct it, to request anonymization, blocking or deletion, to request portability, to obtain information about sharing and to withdraw consent.

Since almost all data stays on your computer, you exercise most of these rights directly in the application. For any request, write to clipcerto.ia@gmail.com. We reply within 15 days. You may also lodge a complaint with the Brazilian National Data Protection Authority (ANPD).

If you live in the European Economic Area or the United Kingdom, you have equivalent rights under the GDPR and can exercise them through the same channel.

10. Security

• All communication between the app and the internet uses encrypted connections (HTTPS).
• The app's TikTok secret key is kept only on the bridge server and is never distributed in the installer.
• Your OpenRouter key and TikTok tokens are kept in the app's local database. Anyone with access to your Windows account has access to them, so protect your computer with a password.

No system is completely secure. If we become aware of an incident that may pose a relevant risk to you, we will post a notice on this website and notify the ANPD, as required by law.

11. Minors

ClipCerto is not intended for people under 18. We do not knowingly collect data from minors.

12. Changes to this policy

We may update this policy when the application changes or the law requires it. The date at the top shows the latest version. Important changes will be highlighted on this website and, when possible, in the application itself.

This is a translation. If there is any difference between this text and the Portuguese version, the Portuguese version prevails.