Privacy policy

Last updated: October 16, 2026

This policy explains which personal data KlipHunt processes, why, for how long and what your rights are, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act.

1. Data controller

ILLITH, simplified joint-stock company (société par actions simplifiée, SAS), SIREN 891 948 333, RCS Bordeaux, whose registered office is 101 rue Bouthier, 33100 Bordeaux, France (see the legal notice). Data contact: ILLITH, 101 rue Bouthier, 33100 Bordeaux, France (by post).

PurposeDataLegal basis
Create and secure your accountEmail, display name, password (stored hashed), login sessions (IP address and browser), preferred languagePerformance of contract; legitimate interest (security)
Monitor the channels you addTwitch channel address, statement of rights over the channel, settings (sensitivity, facecam framing, buffer duration)Performance of contract
Detect highlightsLive audio track and its transcript, video buffer segments, chat statistics (number of messages, participants, emotes, intensity score), short text excerpts, AI judgmentsPerformance of contract; legitimate interest for third-party data (section 4)
Produce shortsVideo clips, captions, hooks, AI voice (if the option is enabled), rendered filesPerformance of contract
Notify youIn-app notifications; service emails; Discord webhook address if you configure onePerformance of contract
Bill and enforce limitsPlan, hour and short counters, Stripe customer and subscription identifiers, invoices. Card numbers stay with StripePerformance of contract; legal obligation (accounting)
Prevent abuseAccount activity log, password-reset request limits, free-trial duplicate checksLegitimate interest (security, fraud prevention)

No data is sold. No data is used for advertising. No decision with legal effects on you is taken solely by automated means: the AI suggests moments, you decide whether to create and publish a short.

3. Retention periods

DataPeriod
Live video bufferRolling 2 hours by default (adjustable per channel), then erased
Chat statistics (observation windows)24 hours
Imported source videos72 hours
Rendered files and short packs30 days after creation
Detected moments, text excerpts, judgments90 days after the moment (automatic daily deletion), except a moment turned into a short, kept with that short; everything is deleted with the account
Shorts and account dataAs long as the account exists; deleted when the account is closed.
Password-reset tokens1 hour
Invoices and accounting records10 years (Article L. 123-22 of the French Commercial Code)

4. Data of Twitch chat viewers

KlipHunt reads the public chat of monitored streams, anonymously, without a Twitch account. These messages belong to third parties who are not KlipHunt users.

  • What is kept: aggregated counters (number of messages, distinct participants, emotes, capital letters, questions) and, for a detected moment, a short text excerpt explaining it.
  • What is not kept: no viewer profile is built. Usernames are only used to count distinct participants during the observation window.
  • Legal basis: legitimate interest of the user and the publisher in spotting highlights of a public stream, balanced against the reasonable expectations of viewers writing in a public chat.
  • Your rights as a viewer: you can request erasure of an excerpt concerning you or object to this processing by writing to ILLITH, 101 rue Bouthier, 33100 Bordeaux, France (by post).

5. YouTube data (Google APIs)

If you connect your YouTube channel, KlipHunt uses the YouTube APIs (YouTube Data API and YouTube Analytics API) with your permission, given through Google OAuth. Three accesses are requested, and nothing else:

  • youtube.upload: publish shorts to your channel, at your request or through the automatic publishing you enable;
  • youtube.readonly: read your channel information and your video history (titles, descriptions, dates, durations, thumbnails);
  • yt-analytics.readonly: read your videos' statistics (views, watch time, retention) to analyse what works and adapt the next shorts.

Data kept: channel identifier and name, your videos' metadata and statistics, and the Google renewable access credential (encrypted). This data is used only to publish your shorts and measure their performance. It is not sold, rented, used for advertising, or passed to third parties other than the service's processors (section 7), and no general-purpose AI model is trained on it.

Compliance with the Google API Services User Data Policy. KlipHunt's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In practice: this information is used only to provide and improve the user-facing publishing and analysis features for your channel; a human reads it only with your consent, for security purposes or to comply with the law; it is not transferred to third parties outside those cases.

YouTube and Google terms. By using these features, you are bound by the YouTube Terms of Service. The Google Privacy Policy applies to the data Google processes.

Revoking access. You can withdraw KlipHunt's access at any time, either by disconnecting your channel in the app (the access credential is then deleted and revoked with Google), or from your Google account permissions page.

Retention and deletion. The access credential is deleted when you disconnect the channel. Your videos' metadata and statistics are kept as long as your account exists, then deleted with it. You may request their deletion at any time by writing to ILLITH, 101 rue Bouthier, 33100 Bordeaux, France (by post): we reply within one month.

6. Linked Twitch account

You can link your Twitch account through Twitch's official sign-in (OAuth): KlipHunt never sees your Twitch password.

  • Data read: Twitch identifier, username, display name, avatar and the account's email address (user:read:email access). They are used to check that you own the channel you add.
  • Clip creation (clips:edit access): KlipHunt creates clips on your channel only at your request.
  • AI moderator, optional: if you enable it, additional accesses are requested (user:read:chat, moderator:manage:chat_messages, moderator:manage:banned_users, moderation:read, user:read:moderated_channels) to read the chat of the channels you moderate and act on your behalf. Without this option, no moderation access is requested.
  • Storage: the account's public identity (identifier, name, avatar) and the list of granted accesses; access credentials are kept encrypted on the server side.
  • Unlinking: you can unlink the account at any time from the settings, or remove the app from your Twitch account connections. You may also request deletion of this data by writing to ILLITH, 101 rue Bouthier, 33100 Bordeaux, France (by post).

7. Recipients and processors

Your data is accessible to the publisher and to the following processors, solely to provide the service:

ProcessorRoleLocation
Convex, Inc.Database, server functions, file storageUnited States
StripePayment, invoicing, tax calculation (Stripe Tax)Ireland / United States
OpenRouter, Inc.Gateway to AI models: transcription, moment analysis, voiceUnited States
Google (Gemini models, via OpenRouter)Video and audio analysis of momentsUnited States
Fish Audio (Drama 3 model, via OpenRouter)AI voice synthesis, if the option is enabledDepends on the model host chosen by OpenRouter
NVIDIA (transcription model, via OpenRouter)Live audio transcriptionDepends on the model host chosen by OpenRouter
TypeSafe (Jev model, via OpenRouter)Judging moments from the transcriptDepends on the model host chosen by OpenRouter
ResendSending service emailsUnited States
Hostinger International Ltd.Hosting of the site and processing (application, media processing server)Registered office in Cyprus (European Union)
Google LLC (YouTube API)Publishing your shorts and reading your YouTube channel statistics, if you connect it (section 5)United States

Twitch is not a processor: it is the public source of the stream and chat, and the provider of the linked account if you link one (section 6). If you configure a Discord webhook, Discord receives notifications as a recipient you chose.

8. Transfers outside the European Union

Several processors are located in the United States. These transfers rely on the EU–US adequacy decision (Data Privacy Framework) where the processor is certified, and otherwise on the European Commission's standard contractual clauses, supplemented by security measures (encryption in transit). You can obtain a copy of the safeguards by writing to the contact address.

9. Security

Hashed passwords, encrypted connections (HTTPS), per-account data isolation, file access through temporary links, API keys kept server-side only, rate limiting on sign-in and password reset.

10. Your rights

You have the right of access, rectification, erasure, restriction, portability and objection, and the right to set instructions on what happens to your data after your death. You can delete your account from the settings. To exercise your rights: ILLITH, 101 rue Bouthier, 33100 Bordeaux, France (by post). We reply within one month. Proof of identity may be requested in case of reasonable doubt.

You can lodge a complaint with the CNIL (3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France — www.cnil.fr) or with the supervisory authority of your country of residence.

11. Minors

The service is not intended for persons under 15 without their legal guardian's consent.

12. Cookies

See the cookie policy.

13. Changes

In case of a material change, you will be notified by email or in the app before it takes effect. The French version prevails.

Back to home