Privacy Policy

Controller

Lucas Scariot, French sole trader (micro-entrepreneur), 5 Square Laperrine, 89000 Auxerre, France — SIREN 833 441 066 — SIRET 833 441 066 00028 — registered with the RNE, not the RCS — VAT FR91833441066. Data contact: support@onecut.mov.

Data, purposes, bases and periods

OneCut processes email addresses, video files, filenames, captions, colour profiles, edit choices, job and payment references, download history, consented attribution, funnel events and technical logs.

• Contract: create, charge, render, deliver, notify, refund and process withdrawal.
• Legitimate interests: secure the service, prevent fraud, diagnose failures and defend legal claims.
• Consent: measure the funnel and attribution only after opt-in, withdrawable at any time.
• Legal obligation: invoices and required accounting evidence for 10 years.
• Incomplete, cancelled and failed uploads: immediately or within 24 hours; completed source clips: 24 hours; output: 7 days; operational identifying data: minimised after 90 days; consented events: at most 13 months; Cloud Logging: 30 days.

Recipients and transfers

Need-to-know recipients and processors are Google Cloud (hosting and processing; media in europe-west1), Google Analytics (consent-based audience measurement), Stripe (payment, currency conversion, fraud and refunds), and Mailgun (contract email; the current configuration uses its US API endpoint).

Recorded safeguards are the Google Cloud and Google Analytics Data Processing Addenda, including standard contractual clauses where applicable; Stripe's Data Transfers Addendum, which prioritises the Data Privacy Framework and then standard contractual clauses; and the Sinch Email/Mailgun DPA, which includes standard contractual clauses, with the Data Privacy Framework where applicable. These safeguards, encryption and minimisation govern transfers outside the EEA.

Your rights

You may request access, correction, deletion, restriction, portability or objection where applicable, withdraw consent prospectively and set post-death instructions. Email support@onecut.mov; ID is requested only where reasonable doubt exists. You may complain to the CNIL or your local authority.

Security and decisions

Media is private, transferred over HTTPS and stored with restricted access. Status links act as access secrets and must not be shared. OneCut makes no automated decision with legal effects; free-export eligibility and fraud checks may use technical rules.