Privacy Policy

Last updated August 19, 2026

This privacy notice explains how TOOLPAD SAS, trading as AutoCut ("AutoCut," "we," "us," or "our"), processes personal data when you use AutoCut's websites, web account area, desktop application, Adobe Premiere Pro and DaVinci Resolve extensions, cloud APIs, transcription and AI-powered features, customer support, marketing communications, and related services (collectively, the "Services").

This notice applies to autocut.com, autocut.fr, any AutoCut domain that links to it, and the AutoCut software and services described above.

Questions or concerns? Reading this privacy notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use the Services. If you still have questions or concerns, contact us at contact@autocut.com.

SUMMARY OF KEY POINTS

This summary provides key points from our privacy notice, but you can find out more details about any of these topics by clicking the link following each key point or by using our table of contents below to find the section you are looking for. You can also click here to go directly to our table of contents.

What personal information do we process? When you visit, use, or navigate our Services, we may process personal information depending on how you interact with AutoCut and the Services, the choices you make, and the products and features you use. Click here to learn more.

Do we process any sensitive personal information? AutoCut does not intentionally request sensitive or special-category personal data. Customer-provided audio, transcripts, support communications, or other free-form content may nevertheless contain such data. Where this occurs, AutoCut processes it only as necessary to provide the requested Service, meet legal obligations, or protect the security of the Services, subject to the safeguards described in this notice.

Do we receive any information from third parties? We may receive account, authentication, subscription, payment-status, fraud-prevention, and integration data from service providers acting on your instructions or on AutoCut's behalf, including identity and payment providers. The categories and purposes are described below.

How do we process your information? We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent. We process your information only when we have a valid legal reason to do so. Click here to learn more.

In what situations and with which parties do we share personal information? We may share information in specific situations and with specific third parties. Click here to learn more.

How do we keep your information safe? We have organizational and technical processes and procedures in place to protect your personal information. However, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information. Click here to learn more.

What are your rights? Depending on where you are located geographically, the applicable privacy law may mean you have certain rights regarding your personal information. Click here to learn more.

How do you exercise your rights? The easiest way to exercise your rights is by contacting us. We will consider and act upon any request in accordance with applicable data protection laws.

Want to learn more about what AutoCut does with any information we collect? Click here to review the notice in full.

1. WHAT INFORMATION DO WE COLLECT?

Personal information you disclose to us

In Short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us.

Depending on the Services you use, AutoCut may process:

Account and identity data: email address, account identifiers, authentication provider identifiers, and account preferences.

Subscription, licensing, and billing data: customer and subscription identifiers, license keys and status, purchase history, invoices, billing name, company name, billing country, payment status, and related billing metadata. Names and company names are collected only for billing. Payment card numbers and security codes are handled by payment processors and are not stored by AutoCut.

Device, application, and usage data: IP address, device and application identifiers, operating system, application and extension versions, language, feature usage, timestamps, diagnostic events, error reports, and crash information.

Customer support data: support email address, account identifiers, messages, attachments, and information you choose to provide while requesting assistance.

Customer processing content: when you use transcription or applicable AI features, the AutoCut desktop application extracts and uploads a low-quality audio track and processes the resulting transcript and job data. Project files, editing timelines, and videos never leave your device.

Website and marketing data: cookie identifiers, consent choices, referral information, campaign data, and website interaction data, subject to your cookie choices where required.

All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.

Information automatically collected

In Short: Some information, such as your Internet Protocol (IP) address and/or browser and device characteristics, is collected automatically when you visit our Services.

We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Services, and other technical information. This information is primarily needed to maintain the security and operation of our Services, and for our internal analytics and reporting purposes.

Like many businesses, we also collect information through cookies and similar technologies.

The information we collect includes:
Log and Usage Data. Log and usage data is service-related, diagnostic, usage, and performance information our servers automatically collect when you access or use our Services and which we record in log files. Depending on how you interact with us, this log data may include your IP address, device information, browser type, and settings and information about your activity in the Services (such as the date/time stamps associated with your usage, pages and files viewed, searches, and other actions you take such as which features you use), device event information (such as system activity, error reports (sometimes called "crash dumps"), and hardware settings).
Device Data. We collect device data such as information about your computer, phone, tablet, or other device you use to access the Services. Depending on the device used, this device data may include information such as your IP address (or proxy server), device and application identification numbers, location, browser type, hardware model, Internet service provider and/or mobile carrier, operating system, and system configuration information.

2. WHAT ARE THE SOURCES OF PERSONAL DATA?

We collect personal data:

Directly from you, including during registration, purchase, support, and sales.

Automatically, from the AutoCut websites, applications, extensions, APIs, security systems, and diagnostic tools.

From service providers and integrations, including identity providers, payment processors, customer-support tools, and services you connect to AutoCut.

3. HOW DO WE PROCESS YOUR INFORMATION?

In Short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent.

We process personal data for the following purposes:

Create accounts, authenticate users, and manage licenses: account, identity, and licensing data.

Process subscriptions, payments, refunds, and invoices: account, billing, transaction, and subscription data.

Provide transcription and AI-powered features: customer audio extracts, transcripts, job identifiers, and account data.

Provide support and resolve product issues: account, support, diagnostic, and relevant customer-provided content.

Secure, monitor, troubleshoot, and improve the Services: usage, log, error, and diagnostic data.

Send requested or permitted product and marketing communications: account and communication-preference data.

Comply with legal obligations and establish or defend legal claims: relevant account, billing, support, security, and transaction data.

Operate non-essential website analytics and advertising cookies: cookie and website-interaction data.

4. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR INFORMATION?

In Short: We only process your personal information when we believe it is necessary and we have a valid legal reason (i.e., legal basis) to do so under applicable law, like with your consent, to comply with laws, to provide you with services to enter into or fulfill our contractual obligations, to protect your rights, or to fulfill our legitimate business interests.

If you are located in the EU or UK, this section applies to you.

The General Data Protection Regulation (GDPR) and UK GDPR require us to explain the valid legal bases we rely on in order to process your personal information. As such, we may rely on the following legal bases to process your personal information:
Consent. We may process your information if you have given us permission (i.e., consent) to use your personal information for a specific purpose. You can withdraw your consent at any time. Click here to learn more.
Legal Obligations. We may process your information where we believe it is necessary for compliance with our legal obligations, such as to cooperate with a law enforcement body or regulatory agency, exercise or defend our legal rights, or disclose your information as evidence in litigation in which we are involved.
Vital Interests. We may process your information where we believe it is necessary to protect your vital interests or the vital interests of a third party, such as situations involving potential threats to the safety of any person.

If you are located in Canada, this section applies to you.

We may process your information if you have given us specific permission (i.e., express consent) to use your personal information for a specific purpose, or in situations where your permission can be inferred (i.e., implied consent). You can withdraw your consent at any time. Click here to learn more.

In some exceptional cases, we may be legally permitted under applicable law to process your information without your consent, including, for example:

• If collection is clearly in the interests of an individual and consent cannot be obtained in a timely way
• For investigations and fraud detection and prevention
• For business transactions provided certain conditions are met
• If it is contained in a witness statement and the collection is necessary to assess, process, or settle an insurance claim
• For identifying injured, ill, or deceased persons and communicating with next of kin
• If we have reasonable grounds to believe an individual has been, is, or may be victim of financial abuse
• If it is reasonable to expect collection and use with consent would compromise the availability or the accuracy of the information and the collection is reasonable for purposes related to investigating a breach of an agreement or a contravention of the laws of Canada or a province
• If disclosure is required to comply with a subpoena, warrant, court order, or rules of the court relating to the production of records
• If it was produced by an individual in the course of their employment, business, or profession and the collection is consistent with the purposes for which the information was produced
• If the collection is solely for journalistic, artistic, or literary purposes
• If the information is publicly available and is specified by the regulations

5. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

In Short: AutoCut shares personal data only when necessary for the purposes described in this notice and only in the situations described below.

AutoCut shares personal data only when necessary for the purposes described in this notice, including with service providers that host, secure, monitor, support, bill for, or perform requested functions of the Services. These providers may process data only under AutoCut's instructions or under another lawful role identified in their terms and applicable law.

Current categories include cloud hosting and identity services; content delivery and edge services; transcription and AI processing; payment processing; customer support; application monitoring and availability alerting; product analytics; and professional advisers.

AutoCut may also disclose information where required by law, to establish or defend legal claims, to protect users or the Services, or as part of a merger, financing, acquisition, reorganization, or sale of assets.

Current providers and processing categories

Cloud database, identity, and object storage — Google Cloud / Firebase: accounts, identity, licenses, audio uploads, and Firestore source data for backups.

API and PostgreSQL hosting — Render: account and API data, transient transcripts, and statistics. Render deployments are documented in Frankfurt.

Edge, Workers, R2, TLS, and backups — Cloudflare: traffic processing, temporary audio, static delivery, and Firestore backups. Workers operate on the global edge.

Speech-to-text — Deepgram: customer audio with the no-retention option enabled.

Speech-to-text — Google Speech-to-Text: customer audio processed under a data processing agreement.

AI inference — Replicate: transient processing of customer audio or derived data.

GPU inference — RunPod: transient processing of customer uploads for AI inference.

Payments — Stripe, Paddle, and PayPal: customer and payment metadata. Cardholder data remains with the payment processors.

Support — Crisp: support email address, account identifiers, support conversations, and customer-provided attachments.

Error monitoring — Sentry: application error and diagnostic data under provider-managed retention.

Availability monitoring — Better Stack: availability and alerting data.

Product analytics and feature flags — PostHog: product usage and feature-flag data.

Search — Algolia: search processing used by the Services.

Secrets management — Infisical: production credentials; no customer-content purpose is documented.

General-purpose AI — OpenAI: AutoCut does not submit customer data to OpenAI.

6. WHERE IS PERSONAL DATA PROCESSED?

AutoCut is established in France. The Services use providers and infrastructure located in the European Economic Area and, for certain providers or global network functions, in other countries. Core services currently documented include Google Cloud / Firebase in the eur3 multi-region, Render services in Frankfurt, and Cloudflare's global edge network.

Where personal data is transferred outside the EEA, AutoCut uses an applicable transfer mechanism and supplementary safeguards as required by law. Provider locations and transfer mechanisms may change as the Services evolve.

7. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

In Short: We use cookies and similar tracking technologies to ensure the proper functioning of our Services, improve user experience, and analyse usage.

We may use cookies and similar technologies (such as web beacons and pixels) to access or store information.

Types of cookies we use:

Necessary cookies
Necessary cookies are required to enable the basic features of this site, such as providing secure log-in or adjusting your consent preferences.

These cookies do not store any personally identifiable data and cannot be disabled.

Examples:
cookieyes-consent – stores your cookie consent preferences
ab_lp_home / ab_lp_autocaptions – used to ensure proper website functionality and manage page variations

Functional cookies
Functional cookies help perform certain functionalities like sharing the content of the website on social media platforms, collecting feedback, and enabling third-party features.

We use third-party services such as YouTube to display video content, which may set cookies to improve user experience.

Examples:
VISITOR_INFO1_LIVE – used by YouTube to optimise video playback
yt-remote-device-id / yt-remote-connected-devices – store user video preferences
yt-remote-session-name / yt-remote-session-app / yt-remote-fast-check-period / yt-remote-cast-available / yt-remote-cast-installed – manage embedded video player functionality

Analytics cookies
Analytical cookies are used to understand how visitors interact with the website. These cookies provide information on metrics such as the number of visitors, bounce rate, traffic sources, and user behaviour.

Examples:
dmn_chk_* – tracks user activity across the website (short-lived cookie)

Advertising cookies
Advertising cookies are used to provide visitors with customised advertisements based on the pages you visited previously and to analyse the effectiveness of advertising campaigns.

Uncategorised cookies
Other uncategorised cookies are those that are being analysed and have not yet been classified into a category.

Legal basis
Necessary cookies are processed based on our legitimate interest to ensure the proper functioning of the website
Functional, analytics, and advertising cookies are only used with your consent

Managing your preferences
When you first visit our website, you are given the option to accept or refuse non-essential cookies.
You can change your preferences at any time through our cookie settings panel.
You can also configure your browser to block cookies, although this may affect your experience.

Third-party cookies
Some cookies are set by third-party services integrated into our website, such as YouTube.
We do not control these cookies directly and recommend reviewing their respective privacy policies.

8. HOW LONG DO WE KEEP YOUR INFORMATION?

In Short: We keep your information for as long as necessary to fulfill the purposes outlined in this privacy notice unless otherwise required by law.

We retain each category of personal data only for the period needed for the purposes described above, subject to legal, accounting, security, dispute-resolution, and backup requirements. The applicable periods or criteria are described in this section. A verified erasure request overrides standard business retention unless AutoCut must retain specified information under law or another valid exception.

Account, identity, subscription, and licensing data: retained while the account is active and for up to three years after termination where needed for support, fraud prevention, legal claims, or legitimate business records; earlier deletion applies when required.

Uploaded audio and transient transcription data: deleted automatically within 24 hours according to the current service design.

Support communications and attachments: retained in Crisp until AutoCut deletes them manually or through the API; Crisp does not automatically expire conversation history.

Debugging or support copies of customer content: retained for no more than 30 days.

Financial and accounting records: retained for ten years where required by French accounting and tax law.

Security, audit, error, and operational logs: retained according to provider-specific settings and for only as long as needed for security, troubleshooting, service operation, legal obligations, or the establishment and defense of legal claims.

Firestore backups: daily backups are retained for a minimum of 30 days and each backup is protected by a 90-day immutable object lock. Lifecycle rules delete backups after the applicable retention and lock period.

Cookie and marketing data: retained according to each cookie's configured duration, consent choices, and the purpose for which it is used. Consent-based marketing data is deleted or suppressed when consent is withdrawn or it is no longer needed, subject to legal exceptions.

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize such information, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

9. HOW DO WE KEEP YOUR INFORMATION SAFE?

In Short: We aim to protect your personal information through a system of organizational and technical security measures.

We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process. However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information. Although we will do our best to protect your personal information, transmission of personal information to and from our Services is at your own risk. You should only access the Services within a secure environment.

10. DO WE COLLECT INFORMATION FROM MINORS?

In Short: We do not knowingly collect data from or market to children under 18 years of age.

The Services are not intended for, and may not be used by, anyone under 18. AutoCut does not knowingly collect personal data from anyone under 18. If we learn that such data has been collected, we will take reasonable steps to delete it. If you become aware of data we may have collected from anyone under 18, contact us at contact@autocut.com.

11. WHAT ARE YOUR PRIVACY RIGHTS?

In Short: In some regions, such as the European Economic Area (EEA), United Kingdom (UK), and Canada, you have rights that allow you greater access to and control over your personal information. You may review, change, or terminate your account at any time.

In some regions (like the EEA, UK, and Canada), you have certain rights under applicable data protection laws. These may include the right (i) to request access and obtain a copy of your personal information, (ii) to request rectification or erasure; (iii) to restrict the processing of your personal information; and (iv) if applicable, to data portability. In certain circumstances, you may also have the right to object to the processing of your personal information. You can make such a request by contacting us by using the contact details provided in the section "HOW CAN YOU CONTACT US ABOUT THIS NOTICE?" below.

We will consider and act upon any request in accordance with applicable data protection laws.
If you are located in the EEA or UK and you believe we are unlawfully processing your personal information, you also have the right to complain to your local data protection supervisory authority. You can find their contact details here: https://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm.

If you are located in Switzerland, the contact details for the data protection authorities are available here: https://www.edoeb.admin.ch/edoeb/en/home.html.

Withdrawing your consent: If we are relying on your consent to process your personal information, which may be express and/or implied consent depending on the applicable law, you have the right to withdraw your consent at any time. You can withdraw your consent at any time by contacting us by using the contact details provided in the section "HOW CAN YOU CONTACT US ABOUT THIS NOTICE?" below.

However, please note that this will not affect the lawfulness of the processing before its withdrawal nor, when applicable law allows, will it affect the processing of your personal information conducted in reliance on lawful processing grounds other than consent.

Opting out of marketing and promotional communications: You can unsubscribe from our marketing and promotional communications at any time by clicking on the unsubscribe link in the emails that we send, or by contacting us using the details provided in the section "HOW CAN YOU CONTACT US ABOUT THIS NOTICE?" below. You will then be removed from the marketing lists. However, we may still communicate with you, for example, to send you service-related messages that are necessary for the administration and use of your account, to respond to service requests, or for other non-marketing purposes.

Account Information

If you would at any time like to review or change the information in your account or terminate your account, you can:
Log in to your account settings and update your user account.
Contact us using the contact information provided.
Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases. However, we may retain some information in our files to prevent fraud, troubleshoot problems, assist with any investigations, enforce our legal terms and/or comply with applicable legal requirements.

Closing an account ends access to the Services but does not necessarily erase every record immediately. You may separately request erasure. AutoCut will delete or anonymize eligible data from active systems, retain only data covered by a valid legal exception, and allow deleted data to expire from protected backups according to the published backup window.

If you have questions or comments about your privacy rights, email us at contact@autocut.com.

12. CONTROLS FOR DO-NOT-TRACK FEATURES

Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track ("DNT") feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this privacy notice.

13. DO CALIFORNIA RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

In Short: Yes, if you are a resident of California, you are granted specific rights regarding access to your personal information.

California Civil Code Section 1798.83, also known as the "Shine The Light" law, permits our users who are California residents to request and obtain from us, once a year and free of charge, information about categories of personal information (if any) we disclosed to third parties for direct marketing purposes and the names and addresses of all third parties with which we shared personal information in the immediately preceding calendar year. If you are a California resident and would like to make such a request, please submit your request in writing to us using the contact information provided below.

14. DO WE MAKE UPDATES TO THIS NOTICE?

In Short: Yes, we will update this notice as necessary to stay compliant with relevant laws.

We may update this privacy notice from time to time. The updated version will be indicated by an updated "Revised" date and the updated version will be effective as soon as it is accessible. If we make material changes to this privacy notice, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this privacy notice frequently to be informed of how we are protecting your information.

15. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

If you have questions or comments about this notice, email us at contact@autocut.com or write to:

TOOLPAD SAS, trading as AutoCut
SIRET: 85325781400014
231 rue Auguste Chevallier, Bâtiment C
37000 Tours, France

16. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

You have the right to request access to the personal information we collect from you, change that information, or delete it. To request to review, update, or delete your personal information, please contact us at contact@autocut.com.