Privacy Policy

Cutumbo · Effective September 25, 2026 · Last updated October 5, 2026

Cutumbo (cutumbo.com) turns raw phone footage into a finished short video. This policy explains what data we handle, why, and what control you have. Cutumbo is operated by LIMON KREMENCHUK LLC (TOV «LIMON KREMENCHUK», Ukraine, company code 37667014), referred to below as "we".

1. Your video stays on your device

Editing and rendering happen inside your browser. Your video file is not uploaded to our servers to be edited. To find pauses and bad takes we send only the audio track for speech recognition, and the resulting transcript text for analysis. Your finished video and its cover are saved to your own device.

2. What we collect

• Audio and transcript of the video you open — processed to edit that video. We do not keep a copy of the audio on our servers after the request is answered.
• Google account basics — when you choose to sign in with Google: your name, email address, profile picture and Google account ID. We use them to identify your account, count your free reel and, if you subscribe, your plan.
• A fingerprint of the video file (its size and a hash of its first megabyte) — so the same video opened again is recognized and not charged twice. It cannot be used to reconstruct the video.
• Session data in your browser — your edits, transcript and settings are stored locally in your browser (IndexedDB / localStorage) so a reload does not lose your work. You can clear them any time by clearing site data.
• Bot protection — Cloudflare Turnstile checks that requests come from a real person; see Cloudflare's privacy policy.
• Technical logs — request time, IP address and error messages kept by our hosting provider for security and debugging, for a limited time.

3. Publishing to social networks (when you turn it on)

If you ask Cutumbo to publish a video for you, you connect your accounts through each network's official sign-in (OAuth). We never see or store your passwords. We store access tokens in encrypted form and use them only to publish the videos you scheduled and to report the result to you.

• The scheduled video — when you press «Schedule», the finished video is uploaded to our own storage (Cloudflare R2) and kept there only until the networks you chose have received it; then it is deleted. You can schedule at most 72 hours ahead, so a video never waits with us longer than about three days. We do not use your Google Drive.
• YouTube — we upload the video you chose to your channel with the title, description and time you approved. Cutumbo uses YouTube API Services; by using this feature you agree to the YouTube Terms of Service, and the Google Privacy Policy applies. You can revoke Cutumbo's access at any time at myaccount.google.com/permissions.
• Instagram, Facebook, TikTok — we publish the video and caption you approved to the account or Page you connected, at the time you chose.

4. Google user data — Limited Use

Cutumbo's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google user data only to provide the features you asked for, we do not sell it, we do not use it for advertising, and we do not use it to train AI models.

5. Who processes data for us

• Cloudflare — hosting, database, bot protection, and storage of a scheduled video until it is published.
• ElevenLabs — speech recognition of the audio track.
• Google (Gemini API) — analysis of the transcript text.
• Paddle — payments, as merchant of record, when subscriptions launch. We never see your card details.

They process data only to deliver their service to us. We do not sell personal data to anyone.

6. How long we keep data

• Account record (name, email, Google ID, free-reel mark): until you delete your account.
• Sign-in sessions: up to 180 days, or until you sign out.
• Scheduled video in our storage: deleted as soon as the chosen networks have received it, and no later than 2 hours after the scheduled time if publishing fails.
• Social network tokens: until you disconnect the account or delete your Cutumbo account.

7. Deleting your data

Email etozdorovo@ukr.net from the address you signed in with and ask us to delete your account. We delete your account record, sessions, stored tokens and scheduled posts within 30 days and confirm by email. Data kept only in your browser is removed by clearing site data for cutumbo.com. You can also revoke Cutumbo's access in your Google, Facebook, Instagram or TikTok account settings at any time.

8. Your rights

You can ask us for a copy of your data, to correct it, or to delete it, by writing to the address below. If you are in the EU/EEA, UK or California, you have the rights given by the GDPR, UK GDPR or CCPA/CPRA respectively; we do not sell or share personal information for cross-context behavioral advertising.

9. Children

Cutumbo is not directed to children under 13 (or under 16 where local law requires), and we do not knowingly collect their data.

10. Changes

If we change this policy we update the date above; material changes are announced on the site.

11. Contact

LIMON KREMENCHUK LLC
19 Ihoria Serdiuka St., apt. 38, Kremenchuk, Poltava Oblast, 39600, Ukraine
Email: etozdorovo@ukr.net

12. Usage data we collect

When you use cutumbo.com we record how the site is used, so we can fix problems and improve it. This includes:

• the pages and buttons you use;
• your device, operating system and browser;
• your approximate location, derived from your IP address (country and city, not your street address);
• the website that referred you and the campaign tags in the link you came from;
• technical data about the video you open: file name, size, length, resolution and codecs (never the video itself);
• errors that occur in the app.

This data is first-party: it is stored by us on Cloudflare. We do not sell it and we do not share it with advertising networks. To ask for your usage data to be deleted, follow section 7 — we delete it together with your account record.

13. How we protect your data

• Encryption in transit. Every connection to cutumbo.com, to our servers and to Google, YouTube and the other networks uses HTTPS (TLS). We never send your data over an unencrypted connection.
• Encryption at rest. Google and social network access tokens are encrypted with AES-256-GCM before they are written to our database; the key is kept as a separate server secret, never in the database or in our code. Our database and storage (Cloudflare D1 and R2) are also encrypted at rest by the provider.
• Least access. Tokens are decrypted only on our server, only when publishing a video you scheduled or showing which channel you connected, and are never sent to your browser or to anyone else. Only the operator of Cutumbo has administrative access to the servers.
• Minimum data, short retention. We request only the Google permissions the features need (see section 4). A scheduled video is deleted from our storage as soon as the networks have received it (section 6). When you disconnect an account, its tokens are deleted; if you revoke access in your Google account, they stop working immediately.
• No sale, no sharing. Google user data is not sold, not shared with third parties except to provide the feature you asked for, not used for advertising and not used to train AI models.

If we learn of a security incident affecting your data, we will notify you by email without undue delay.

Terms of Service · Cutumbo