Privacy Policy

Information on the processing of your personal data in accordance with the General Data Protection Regulation (GDPR) and the German Telecommunications-Digital-Services Data Protection Act (TDDDG).

Data Protection at a Glance

The following notes provide a simple overview of what happens to your personal data when you use KaizenClip. Personal data is any data by which you can be personally identified. For detailed information, please refer to the privacy policy below.

Please note that data transmission over the internet (e.g. when communicating by email) may have security gaps. Complete protection of data against access by third parties is not possible.

1. General Information

The data controller within the meaning of the GDPR is:

This privacy policy explains the nature, scope, and purpose of the processing of personal data in connection with the use of the KaizenClip service. The protection of your data is of great importance to us. We process your personal data exclusively in accordance with applicable legal provisions, in particular the GDPR and the German Federal Data Protection Act (BDSG).

2. Data Categories

In the course of using our service, we process the following categories of data:

• Customer information: Email address, username, and password (hashed) for account management and authentication.
• VOD URLs: Twitch VOD links submitted by you to identify and download the desired video content.
• Chat data: Twitch chat messages from the respective VOD, used for chat spike detection.
• Transcripts: Text transcripts of video content generated by automatic speech recognition (Whisper).
• Clips: Video clips generated based on the analysis, including burned-in captions.
• Usage data: Technical access data such as IP address, timestamp, and user agent to ensure service operation.

3. Legal Bases for Processing

Where you have consented to the processing of your data, we process your personal data on the basis of Art. 6(1)(a) GDPR. Where you have consented to the storage of cookies or to access to information on your terminal device, the processing is additionally based on Section 25(1) TDDDG. You may withdraw your consent at any time with effect for the future — by emailing the address above or by deleting your account.

Where processing is necessary for the performance of a contract or for pre-contractual measures, we rely on Art. 6(1)(b) GDPR (e.g. provision of the KaizenClip service, processing of subscriptions).

Where processing is necessary to comply with a legal obligation, it is based on Art. 6(1)(c) GDPR (e.g. commercial and tax law retention obligations for invoices).

Furthermore, we process data based on our legitimate interests pursuant to Art. 6(1)(f) GDPR (e.g. ensuring secure and stable operation, server logs, protection against abuse via Cloudflare).

4. Data Retention

• Raw data (downloaded VODs, chat data, transcripts): automatically deleted 7 days after processing.
• Generated clips: remain in your account until you delete them yourself.
• Account data: deleted promptly after account deletion, unless statutory retention obligations apply.

5. Hosting and Data Recipients

Hosting / Own Infrastructure

KaizenClip content and data are hosted and stored on our own infrastructure (Apple Silicon servers) located in Germany. Public internet connectivity is provided via Cloudflare Tunnel (see next section).

In the course of providing our service, data is transmitted to the following third parties:

Cloudflare (Tunnel / Reverse Proxy)

The service is made publicly accessible via Cloudflare Tunnel (Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA). All incoming HTTPS traffic is routed through Cloudflare infrastructure. Cloudflare processes personal data (e.g. IP addresses, request metadata) on our behalf as a data processor within the meaning of Art. 28 GDPR. The legal basis is a Data Processing Addendum (DPA) with Cloudflare. The actual processing of requests and storage of payload data takes place on our infrastructure in Germany; however, since Cloudflare is a US company with a global edge network, technical transfer of personal data to the United States may occur. Such transfers are based on EU Standard Contractual Clauses pursuant to Art. 46(2)(c) GDPR.

Cloudflare is certified under the EU-US Data Privacy Framework (DPF) and thereby commits to compliance with European data protection standards. Details: dataprivacyframework.gov and the Cloudflare Privacy Policy.

Google Gemini API

Transcripts and clip metadata are transmitted to the Google Gemini API (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) for AI-based evaluation of viral potential. The transfer to the USA is based on EU Standard Contractual Clauses (Art. 46(2)(c) GDPR). Google LLC is certified under the EU-US Data Privacy Framework (DPF); details: dataprivacyframework.gov. Further information: policies.google.com/privacy.

Twitch API

VOD URLs are transmitted to the Twitch platform (Twitch Interactive, Inc., 350 Bush Street, San Francisco, CA 94104, USA) to retrieve chat data and video content. The Twitch Privacy Policy applies.

Paddle.com Market Limited (Payment Processing)

We use Paddle.com Market Limited as our Merchant of Record for payment processing and subscription management. Paddle processes your payment details (credit card, PayPal, etc.), email address, and billing information. KaizenClip does not store any payment data — only a pseudonymized reference ID to link your subscription.

Paddle.com Market Limited, Judd House, 18-29 Mora Street, London EC1V 8BT, United Kingdom.
Privacy policy: paddle.com/legal/privacy
Legal basis: Art. 6(1)(b) GDPR (contract performance), Art. 46(2)(c) GDPR (SCCs for UK transfer).

6. Your Rights

Under the GDPR, you have the following rights:

• Right of access (Art. 15 GDPR): You have the right to obtain information about the personal data we process about you.
• Right to rectification (Art. 16 GDPR): You may request the correction of inaccurate data.
• Right to erasure (Art. 17 GDPR): You may request the deletion of your data, provided no statutory retention obligations apply.
• Right to restriction of processing (Art. 18 GDPR): Under certain conditions, you may request the restriction of processing.
• Right to data portability (Art. 20 GDPR): You have the right to receive your data in a structured, commonly used, and machine-readable format.
• Right to object (Art. 21 GDPR): You may object to the processing of your data at any time.
• Right to lodge a complaint (Art. 77 GDPR): You have the right to lodge a complaint with a supervisory authority. The authority competent for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany — www.ldi.nrw.de. Without prejudice to this, you may also lodge a complaint with the supervisory authority of your habitual residence or place of work.

7. Security

We implement appropriate technical and organizational measures to protect your data:

• Transport encryption: All data transmissions are conducted over TLS-encrypted connections (HTTPS).
• Password hashing: Passwords are stored exclusively as bcrypt hashes and are never stored in plain text.
• Access control: Access to servers and databases is restricted to authorized personnel and secured by SSH keys and firewall rules.
• Regular updates: Server software and dependencies are regularly updated to address known security vulnerabilities.

8. Contact

For questions regarding data protection or to exercise your rights, please contact:

9. Disclaimer / Copyright

The user confirms that they hold the necessary copyright to the videos being processed. KaizenClip solely provides the technical infrastructure (Software-as-a-Service) and assumes no liability for copyright infringements by third parties. The responsibility for downloading and processing video content lies solely with the user.

10. Automated Decision-Making

As part of clip creation, we use AI-based evaluation (Google Gemini) to assess the viral potential of video segments. This automated analysis is used solely for prioritization and pre-selection of clips and does not produce any legal or similarly significant effects on you within the meaning of Art. 22 GDPR. The final decision on the use of clips always remains with the user.

11. Cookies

Technically Necessary Cookies

Cloudflare may set technically necessary cookies (e.g. __cflb for load balancing, __cf_bm for bot detection). These cookies are strictly necessary for the secure and functional operation of the website. The legal basis is Section 25(2)(2) TDDDG (strictly necessary storage) in conjunction with Art. 6(1)(f) GDPR (legitimate interest in the secure and stable provision of the service). Consent is not required for these cookies.

Optional Cookies

We currently do not use optional cookies (e.g. for analytics or marketing). Should this change, we will ask for your consent via the cookie consent banner pursuant to Section 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR. Consent may be withdrawn at any time with effect for the future.

Cookie Preferences / localStorage

Your cookie preference is stored in your browser's local storage (localStorage). Access to information on your terminal device for this purpose is based on Section 25(2)(2) TDDDG, as storing your selection is strictly necessary to provide the service explicitly requested by you (storing the preference). You can change your preference at any time by clearing the stored website data in your browser.