Privacy and security: what happens to the videos you upload

Deleting your videos and your account

Can you delete the data of my account?

Yes. You can delete your account yourself on the Account page ("Delete my account") by typing DELETE; a live paid subscription must be cancelled first. It removes your projects, videos, edits, chat requests and sign-in from Cutora's live systems. Payment records are kept as tax and accounting rules require. To delete without signing in, write to hello@usecutora.com; requests are completed in the live systems within 30 days. Details are in the Privacy Policy.

How long does Cutora keep my videos?

Until you delete the project, until you ask Cutora to delete it, or 90 days after you last edited the project, whichever comes first. The files made from the video (previews, analysis files, exports) and its transcript go with it. Account data is kept until you ask for it to be deleted; the Privacy Policy says no automatic period is set for that yet.

Why does Cutora delete my project after 90 days?

Cutora's pages do not give a reason. They state the rule: a project not edited for 90 days is deleted, together with its videos, transcripts and the files made from them. Cutora emails you 7 days before, so you can download your exports or edit the project to keep it. See the Privacy Policy.

Will I be warned before my project is deleted?

Yes. Cutora sends an email 7 days before an inactive project is deleted, and the email lists the names of your projects. You can download your exports or edit the project in that time to keep it.

Does editing a project reset the 90-day deletion clock?

The Privacy Policy counts the 90 days from the last time you edited the project, and the warning email says you can edit the project to keep it. Cutora's pages state no other way to keep a project longer, so download your exports if you need the files after that.

Can I ask Cutora to delete my videos right now?

Yes. Delete the project and its videos, transcripts and the files made from them are deleted, or write to hello@usecutora.com and ask. Cutora completes requests in its live systems within 30 days. Copies made only for exporting are deleted after 7 days without an export.

Does deleting a project delete the original file too?

Yes. The Privacy Policy lists uploaded videos, their transcripts and descriptions, and the files made from them (previews, analysis files and exports) as deleted when you delete the project. Cutora's worker server also deletes its working copy of your video when each job ends.

Is my transcript stored after I delete the project?

Not in Cutora's live systems: transcripts are deleted with the project. Deleted data can remain in database backups until they expire, currently up to about 35 days. Cutora does not use backups for ordinary processing and re-applies completed deletion requests if it ever restores one.

What happens to my videos if Cutora shuts down?

Cutora's pages do not say yet. The Terms say the beta can change or end, and that if Cutora ends a paid plan for a reason that is not your breach of the Terms, it refunds the unused part of the period you paid for. Download your exports if you need a copy, or write to hello@usecutora.com.

Where your video goes and who can see it

Where are my videos stored, and in which country?

Videos are stored in Cloudflare R2, and Cutora's pages do not state the R2 storage region. The app and its database run on Amazon Web Services in Frankfurt, Germany, and videos are processed on a server in Nuremberg, Germany. Some of Cutora's providers are based in the United States, so your data may be processed outside your country.

Is my video encrypted during upload and storage?

Connections are encrypted, so a video is encrypted in transit. Your browser sends the file straight to storage in parts. Cutora's pages do not state encryption at rest. The Privacy Policy also lists access controls and backups stored separately from the servers, and says it cannot guarantee absolute security.

Does Cutora send my video to third-party AI models?

Yes, parts of it. OpenAI receives the audio in short pieces for transcription; Google's Gemini receives still frames and short audio clips of takes being compared; Anthropic, whose AI model Claude makes editorial choices on your first cut, receives only the words of your transcript and our list of planned effects, never your video, audio or any picture. Speech alignment and voice detection run on Cutora's own server. Cutora does not use your videos to train AI models. The Privacy Policy has the full table.

What third parties are involved in processing my video?

The Privacy Policy lists these services. Clerk handles sign-in, Amazon Web Services in Frankfurt (app and database), Cloudflare (DNS, backups, R2 video storage), Hetzner in Nuremberg (processing), OpenAI, Google Gemini and Anthropic (transcription, planning and editorial choices), Polar with Stripe (payments), Sentry (error reports), Resend (emails) and Gmail (the hello@ inbox). Optional analytics tools appear there only if you accept them. See the Privacy Policy.

Can Cutora staff watch my videos?

Cutora does not open your videos or projects unless you ask for help or it is investigating a suspected breach of the Terms.

Who controls access to my videos?

You do, through your account. An account is for one person: there are no seats, shared workspaces or client review links, and the Terms make you responsible for keeping your sign-in secure. Cutora does not open your videos unless you ask for help or it is investigating a suspected breach of the Terms.

Who at Cutora can see my account details?

Cutora's pages do not say which people can see account details. The Privacy Policy says what is stored (your email address, name and profile image from sign-in, identifiers and usage events) and that card details go to Polar, never to Cutora. For a specific question, write to hello@usecutora.com.

Does Cutora store my voice data?

The audio of your video is processed to make the first cut: short pieces go to OpenAI for transcription and short clips of takes go to Gemini. The audio is deleted with the project like the video. Cutora's pages do not describe any separate voice profile.

Does Cutora log what I type in the chat editor?

Yes. Chat requests are stored with your account and deleted when you delete it. The chat editor sends your message, the conversation so far, and the words, captions, file names and layout of your current edit to OpenAI, but no audio or video.

GDPR, SOC 2, DPAs and security reviews

How safe is your data, really?

Cutora uses encrypted connections, access controls and backups stored separately from its servers, and the Privacy Policy says it cannot guarantee absolute security. Cutora holds no SOC 2 certification, a data processing agreement is available on request, and its pages do not state encryption at rest. The product is in Beta, and its pages list every service that processes data.

Can users access, correct, delete, or port their data?

Yes, by request. Email hello@usecutora.com from the address you use with Cutora to access, correct or export your personal data, and Cutora completes requests in its live systems within 30 days. You can delete your account yourself on the Account page, and you can download your exports (an MP4 or the Export to your editor ZIP).

Is Cutora GDPR compliant?

Cutora's product facts do not say, and its pages make no GDPR or CCPA compliance statement. What they do state: the Privacy Policy lists what is collected and every service that processes data, you can ask for access, correction, export or deletion within 30 days, and the app, database and processing run in Germany. For a legal question, ask a lawyer or write to hello@usecutora.com.

Is Cutora SOC 2 certified?

No. Cutora does not hold a SOC 2 certification. A data processing agreement is available on request, and its pages make no GDPR compliance claim. If you need security paperwork for a purchase, write to hello@usecutora.com before you buy.

Do you sign Data Processing Agreements (DPAs)?

Yes, a data processing agreement is available on request. Write to hello@usecutora.com before you upload anything. The Privacy Policy and the Terms are what Cutora publishes, and the Privacy Policy lists every service that processes data.

Can our security team review Cutora before we buy?

The public record is the Privacy Policy, the Terms and the product facts. Cutora's product facts do not say yet whether it answers security questionnaires or offers a formal review. Your team can write to hello@usecutora.com with its questions.

Does Cutora support two-factor authentication?

No, two-step verification is not required. Sign-in is handled by Clerk: you sign in with an emailed code or with Google. Authenticator apps, passkeys, phone numbers and Apple sign-in are not offered.

Does Cutora have SSO for companies?

No. An account is for one person, and Cutora has no seats, shared workspaces or single sign-on.

Is Cutora HIPAA compliant for therapists recording talking-head content?

Cutora's product facts do not say, and its pages make no HIPAA claim. Videos go to the AI providers listed in the Privacy Policy, and a data processing agreement is available on request. If your footage is clinical or identifies patients, do not upload it without checking your own rules first.

Selling, marketing and tracking

Does Cutora sell my data?

No. The Privacy Policy says Cutora does not sell personal data, and that it does not use your videos to train AI models.

Does Cutora use my email for marketing?

Cutora does not send marketing emails without asking you first. It does send product emails: a welcome email, a short email when your first cut is ready, the notice 7 days before a project is deleted, one email from the founder asking how your first video went (you can unsubscribe), and emails about your account, plan or payments.

Can I opt out of analytics or tracking?

Yes for optional analytics. The Privacy Policy says any analytics or session replay tool is loaded only if you press Accept on the banner, and you can change your choice with Cookie settings in the footer. Cutora's own counts of page views use a random identifier in your browser's local storage, which you can clear by deleting the site's data.

Is there a privacy policy I can share with my clients?

Yes. The Privacy Policy is a public page at usecutora.com/privacy, and the Terms are at usecutora.com/terms. You can send either link.

How do I report a privacy concern?

Write to hello@usecutora.com from the address you use with Cutora. Cutora replies to disputes within 14 days and completes privacy requests in its live systems within 30 days.

Can law enforcement request my videos from Cutora?

Cutora's pages do not say how it handles requests from authorities. The Privacy Policy lists what Cutora holds and when it is deleted; once a video is deleted, it is gone from the live systems. For a specific concern, write to hello@usecutora.com.

Can I self-host Cutora for privacy?

Cutora's product facts list no self-hosted version. It is a web app that runs on Cutora's servers and nothing needs installing.

Client work, NDAs and sensitive footage

Is it safe to upload client footage to Cutora?

That depends on your client contract and on what you are comfortable with. The Terms say to upload only content you have the right to use, including the rights of people who appear or are heard in it. Parts of your video go to the AI providers listed in the Privacy Policy. Cutora holds no SOC 2 certification, and a data processing agreement is available on request, so if the client requires one, ask first.

Can I upload videos under NDA?

Cutora's product facts do not say. Check what your NDA allows: parts of the video go to the AI providers and the storage and processing services listed in the Privacy Policy. If it forbids third-party processing, do not upload the file.

Is it safe to upload a video with my kids in it?

It is your decision. The Terms ask you to upload only content you have the right to use, including the rights of people who appear in it, and the video is processed like any other, with parts sent to the AI providers listed in the Privacy Policy. Cutora does not use it to train AI models and deletes it when you delete the project.

Can I edit a confidential board-meeting recording in Cutora?

Cutora is built for one person talking to camera, recorded in one session, so a meeting with several voices fits poorly: it does not tell speakers apart. It would also send parts of the recording to the AI providers in the Privacy Policy. Check your confidentiality rules first.

Is it safe to upload a medical consultation video?

Cutora's pages make no health-data or HIPAA statement, and the video would go to the AI providers in the Privacy Policy. Cutora is also built for one person talking to camera, not a consultation between two people. Check your own rules and your patient's consent before you upload.