Privacy policy
Last updated: October 16, 2026
This policy explains which personal data KlipHunt processes, why, for how long and what your rights are, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act.
1. Data controller
ILLITH, simplified joint-stock company (société par actions simplifiée, SAS), SIREN 891 948 333, RCS Bordeaux, whose registered office is 101 rue Bouthier, 33100 Bordeaux, France (see the legal notice). Data contact: ILLITH, 101 rue Bouthier, 33100 Bordeaux, France (by post).
2. Data processed, purposes and legal bases
| Purpose | Data | Legal basis |
|---|---|---|
| Create and secure your account | Email, display name, password (stored hashed), login sessions (IP address and browser), preferred language | Performance of contract; legitimate interest (security) |
| Monitor the channels you add | Twitch channel address, statement of rights over the channel, settings (sensitivity, facecam framing, buffer duration) | Performance of contract |
| Detect highlights | Live audio track and its transcript, video buffer segments, chat statistics (number of messages, participants, emotes, intensity score), short text excerpts, AI judgments | Performance of contract; legitimate interest for third-party data (section 4) |
| Produce shorts | Video clips, captions, hooks, AI voice (if the option is enabled), rendered files | Performance of contract |
| Notify you | In-app notifications; service emails; Discord webhook address if you configure one | Performance of contract |
| Bill and enforce limits | Plan, hour and short counters, Stripe customer and subscription identifiers, invoices. Card numbers stay with Stripe | Performance of contract; legal obligation (accounting) |
| Prevent abuse | Account activity log, password-reset request limits, free-trial duplicate checks | Legitimate interest (security, fraud prevention) |
No data is sold. No data is used for advertising. No decision with legal effects on you is taken solely by automated means: the AI suggests moments, you decide whether to create and publish a short.
3. Retention periods
| Data | Period |
|---|---|
| Live video buffer | Rolling 2 hours by default (adjustable per channel), then erased |
| Chat statistics (observation windows) | 24 hours |
| Imported source videos | 72 hours |
| Rendered files and short packs | 30 days after creation |
| Detected moments, text excerpts, judgments | 90 days after the moment (automatic daily deletion), except a moment turned into a short, kept with that short; everything is deleted with the account |
| Shorts and account data | As long as the account exists; deleted when the account is closed. |
| Password-reset tokens | 1 hour |
| Invoices and accounting records | 10 years (Article L. 123-22 of the French Commercial Code) |
4. Data of Twitch chat viewers
KlipHunt reads the public chat of monitored streams, anonymously, without a Twitch account. These messages belong to third parties who are not KlipHunt users.
- What is kept: aggregated counters (number of messages, distinct participants, emotes, capital letters, questions) and, for a detected moment, a short text excerpt explaining it.
- What is not kept: no viewer profile is built. Usernames are only used to count distinct participants during the observation window.
- Legal basis: legitimate interest of the user and the publisher in spotting highlights of a public stream, balanced against the reasonable expectations of viewers writing in a public chat.
- Your rights as a viewer: you can request erasure of an excerpt concerning you or object to this processing by writing to ILLITH, 101 rue Bouthier, 33100 Bordeaux, France (by post).
5. YouTube data (Google APIs)
If you connect your YouTube channel, KlipHunt uses the YouTube APIs (YouTube Data API and YouTube Analytics API) with your permission, given through Google OAuth. Three accesses are requested, and nothing else:
youtube.upload: publish shorts to your channel, at your request or through the automatic publishing you enable;youtube.readonly: read your channel information and your video history (titles, descriptions, dates, durations, thumbnails);yt-analytics.readonly: read your videos' statistics (views, watch time, retention) to analyse what works and adapt the next shorts.
Data kept: channel identifier and name, your videos' metadata and statistics, and the Google renewable access credential (encrypted). This data is used only to publish your shorts and measure their performance. It is not sold, rented, used for advertising, or passed to third parties other than the service's processors (section 7), and no general-purpose AI model is trained on it.
Compliance with the Google API Services User Data Policy. KlipHunt's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In practice: this information is used only to provide and improve the user-facing publishing and analysis features for your channel; a human reads it only with your consent, for security purposes or to comply with the law; it is not transferred to third parties outside those cases.
YouTube and Google terms. By using these features, you are bound by the YouTube Terms of Service. The Google Privacy Policy applies to the data Google processes.
Revoking access. You can withdraw KlipHunt's access at any time, either by disconnecting your channel in the app (the access credential is then deleted and revoked with Google), or from your Google account permissions page.
Retention and deletion. The access credential is deleted when you disconnect the channel. Your videos' metadata and statistics are kept as long as your account exists, then deleted with it. You may request their deletion at any time by writing to ILLITH, 101 rue Bouthier, 33100 Bordeaux, France (by post): we reply within one month.
6. Linked Twitch account
You can link your Twitch account through Twitch's official sign-in (OAuth): KlipHunt never sees your Twitch password.
- Data read: Twitch identifier, username, display name, avatar and the account's email address (
user:read:emailaccess). They are used to check that you own the channel you add. - Clip creation (
clips:editaccess): KlipHunt creates clips on your channel only at your request. - AI moderator, optional: if you enable it, additional accesses are requested (
user:read:chat,moderator:manage:chat_messages,moderator:manage:banned_users,moderation:read,user:read:moderated_channels) to read the chat of the channels you moderate and act on your behalf. Without this option, no moderation access is requested. - Storage: the account's public identity (identifier, name, avatar) and the list of granted accesses; access credentials are kept encrypted on the server side.
- Unlinking: you can unlink the account at any time from the settings, or remove the app from your Twitch account connections. You may also request deletion of this data by writing to ILLITH, 101 rue Bouthier, 33100 Bordeaux, France (by post).
7. Recipients and processors
Your data is accessible to the publisher and to the following processors, solely to provide the service:
| Processor | Role | Location |
|---|---|---|
| Convex, Inc. | Database, server functions, file storage | United States |
| Stripe | Payment, invoicing, tax calculation (Stripe Tax) | Ireland / United States |
| OpenRouter, Inc. | Gateway to AI models: transcription, moment analysis, voice | United States |
| Google (Gemini models, via OpenRouter) | Video and audio analysis of moments | United States |
| Fish Audio (Drama 3 model, via OpenRouter) | AI voice synthesis, if the option is enabled | Depends on the model host chosen by OpenRouter |
| NVIDIA (transcription model, via OpenRouter) | Live audio transcription | Depends on the model host chosen by OpenRouter |
| TypeSafe (Jev model, via OpenRouter) | Judging moments from the transcript | Depends on the model host chosen by OpenRouter |
| Resend | Sending service emails | United States |
| Hostinger International Ltd. | Hosting of the site and processing (application, media processing server) | Registered office in Cyprus (European Union) |
| Google LLC (YouTube API) | Publishing your shorts and reading your YouTube channel statistics, if you connect it (section 5) | United States |
Twitch is not a processor: it is the public source of the stream and chat, and the provider of the linked account if you link one (section 6). If you configure a Discord webhook, Discord receives notifications as a recipient you chose.
8. Transfers outside the European Union
Several processors are located in the United States. These transfers rely on the EU–US adequacy decision (Data Privacy Framework) where the processor is certified, and otherwise on the European Commission's standard contractual clauses, supplemented by security measures (encryption in transit). You can obtain a copy of the safeguards by writing to the contact address.
9. Security
Hashed passwords, encrypted connections (HTTPS), per-account data isolation, file access through temporary links, API keys kept server-side only, rate limiting on sign-in and password reset.
10. Your rights
You have the right of access, rectification, erasure, restriction, portability and objection, and the right to set instructions on what happens to your data after your death. You can delete your account from the settings. To exercise your rights: ILLITH, 101 rue Bouthier, 33100 Bordeaux, France (by post). We reply within one month. Proof of identity may be requested in case of reasonable doubt.
You can lodge a complaint with the CNIL (3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France — www.cnil.fr) or with the supervisory authority of your country of residence.
11. Minors
The service is not intended for persons under 15 without their legal guardian's consent.
12. Cookies
See the cookie policy.
13. Changes
In case of a material change, you will be notified by email or in the app before it takes effect. The French version prevails.