Privacy Policy

Zoupyu ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our platform.

By using Zoupyu, you agree to the collection and use of information in accordance with this policy.

We collect the following types of information:

• Account information — name, email address, and password (hashed) when you register
• Google account data — name, email, and profile picture if you sign in with Google
• Uploaded video files — the video files you upload for processing, stored temporarily (see Data Retention)
• Generated clips — the vertical Shorts clips produced from your video, retained until you delete them (see Data Retention)
• Payment information — transaction records and credit balance (we do not store card numbers; payments are processed by our provider)
• Usage data — pages visited, actions taken, and browser/device information

We use the information we collect to:

• Create and manage your account
• Process and deliver your video clips
• Manage your credit purchases and billing
• Send transactional emails (processing status, receipts, password resets)
• Improve and maintain the platform
• Detect and prevent fraud or abuse
• Comply with legal obligations

We do not sell your personal information to third parties.

We share your data only with trusted third-party services required to operate the platform:

• AI transcription service — to convert your video audio into a text transcript
• AI analysis service — to process your transcript and identify the most viral clip moments
• Cloudflare R2 — to store uploaded video files and generated clips securely
• Dodo Payments — to process credit pack payments securely
• Resend — to send transactional emails
• MongoDB Atlas — to store your account and project data

Each provider operates under their own privacy policy and is contractually obligated to protect your data.

Zoupyu uses the following categories of cookies:

• Necessary — HTTP-only cookies for authentication (refresh tokens) and localStorage for session management. These are always active and cannot be disabled.
• Analytics — Google Analytics 4 (GA4), to understand how visitors interact with our site, and Microsoft Clarity, which records session replays and heatmaps showing how visitors navigate and interact with our pages. Clarity does not load at all unless analytics consent applies to you, and the Google tag loads denied by default, setting no analytics cookies until it does. Whether consent is asked for or applied automatically depends on your region — see below.
• Marketing — Google Ads conversion tracking, used to measure signups and purchases that originate from our ads, and Meta Pixel cookies for ad performance measurement and retargeting. The Meta Pixel does not load at all unless advertising consent applies to you, and until it does, advertising identifiers are redacted and no advertising cookies are set.

Visit counting without cookies. When you open our site while signed out, we count the visit so we know how many people arrive and how many go on to sign up. This uses no cookies and stores nothing on your device. Our server combines your IP address and browser type with a random value that changes every day, turns that into a one-way code, and keeps only the code — along with the page you arrived on and the name of the site that referred you. Your IP address is never stored, and because the daily value is deleted within two days, the code cannot be traced back to you afterwards, even by us. These counts are kept for 13 months.

How we ask depends on where you are. If you are in the EEA, the UK, or anywhere we cannot confidently place, nothing beyond the necessary cookies runs until you choose — analytics and advertising stay off by default. If you are in the United States, where state privacy law works on a notice-and-opt-out basis, analytics and advertising are enabled by default and you can opt out at any time from Your Privacy Choices in the footer of every page. We also honour the Global Privacy Control browser signal: if your browser sends it, we treat that as an opt-out automatically, wherever you are.

You can manage your cookie preferences at any time using the Your Privacy Choices option in the footer of our landing page, or disable cookies entirely in your browser settings (though this may prevent you from logging in).

We retain your account data for as long as your account is active. Purchase and billing records are retained for up to 2 years for dispute resolution purposes.

Source videos are automatically deleted from our servers 7 days after upload. Generated clips are retained indefinitely so they stay available in your library, and are deleted when you delete the project or your account. Clips generated before 8 September 2026 were subject to an earlier 30-day retention policy and were deleted under it.

You may request deletion of your account and associated data by contacting us at support@zoupyu.com.

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Object to or restrict certain types of processing
• Data portability (receive your data in a structured format)

To exercise any of these rights, contact us at support@zoupyu.com.

We implement industry-standard security measures including password hashing (bcrypt), HTTPS-only communication, HTTP-only cookies, JWT authentication, and rate limiting.

No system is 100% secure. If you believe your account has been compromised, contact us immediately.

Zoupyu is not directed at individuals under 18 years of age. We do not knowingly collect personal data from minors. If we become aware of such collection, we will delete the data promptly.

We may update this Privacy Policy periodically. We will notify you of significant changes via email or a prominent notice on the platform. The "Last updated" date at the top reflects the most recent revision.

Questions or concerns about this Privacy Policy? Contact us at support@zoupyu.com or visit our Contact page.