Privacy Policy

1. Introduction

MarsClip is operated by Narverse Private Limited, a company incorporated in India, which is the data controller for the personal data described here. This Privacy Policy explains how we handle information related to your use of our service, including our use of YouTube API Services, TikTok APIs, and Instagram/Meta APIs. It applies wherever you are, including if you are in the European Economic Area, the United Kingdom, or the United States.

2. YouTube API Services

MarsClip uses YouTube API Services to enable video uploading and management features. By using our service, you acknowledge that:

• We access and process data from YouTube API Services
• Our use of YouTube API Services is governed by the Google Privacy Policy
• You can revoke MarsClip's access to your YouTube data at any time through your Google security settings page

3. TikTok APIs (Login Kit & Content Posting API)

MarsClip uses TikTok's Login Kit and Content Posting API to enable users to connect their TikTok account and publish videos they create in MarsClip. Authorization always starts with you clicking "Connect TikTok" in Settings — we never request access in the background. By connecting your TikTok account, you acknowledge that:

• We request exactly five scopes: user.info.basic (identify the connected account), user.info.stats (follower, like and video counts for your dashboard), video.upload and video.publish (post videos you created in MarsClip), and video.list (read back performance of videos you posted)
• Under user.info.basic and user.info.stats we read your open_id, display name, avatar, follower count, total likes and video count — used to show which account is connected and to render your analytics dashboard
• Under video.list we read the id, title, share URL, cover image, creation time, and view, like, comment and share counts of videos on your account, to report how your posts performed
• We upload and publish videos to your TikTok account only when you manually post from MarsClip or when a Series automation pipeline you configured runs. We never post without an action you initiated
• Videos are transferred to TikTok using PULL_FROM_URL: TikTok fetches the file directly from a short-lived, signed MarsClip URL. We do not share that URL with anyone else
• We do not use TikTok data to train machine-learning models, build advertising profiles, or enrich any third-party dataset
• Our use of TikTok APIs is governed by the TikTok Privacy Policy and Developer Terms of Service
• You can revoke MarsClip's access at any time from MarsClip Settings or from your TikTok account security settings. Revoking deletes the stored tokens immediately and the remaining TikTok data within 30 days

4. Instagram / Meta APIs

MarsClip uses the Instagram Graph API (via Meta) to publish videos to Instagram Business accounts connected to a Facebook Page. By connecting your Instagram account, you acknowledge that:

• We request the scopes instagram_basic, instagram_content_publish, and pages_show_list only after you explicitly click "Connect Instagram" in Settings
• We access basic Instagram account info and the list of Facebook Pages you manage, to route uploads to the correct Instagram Business account
• We publish videos to your Instagram account only when you manually post from MarsClip or when a Series automation pipeline you configured runs
• Our use of Meta APIs is governed by the Meta Platform Terms and Meta Privacy Policy
• You can revoke MarsClip's access at any time from MarsClip Settings or from your Facebook Business Integrations page

5. Data Collection and Usage

We collect and process the following data through the platform APIs listed above:

• OAuth access tokens and refresh tokens (encrypted at rest using AES-256-GCM)
• Platform user identifiers (YouTube channel ID, TikTok open_id, Instagram Business account ID)
• Basic profile information (display name, avatar) shown in your MarsClip Settings
• Aggregate account statistics (follower count, total likes, video count) and per-video engagement metrics (views, likes, comments, shares) for videos you published through MarsClip, shown in your analytics dashboard
• Video upload and publishing metadata (caption, privacy level, scheduled time) for videos you create in MarsClip

6. Data Storage and Retention

For data obtained through YouTube, TikTok, and Instagram APIs:

• Access tokens are stored encrypted and refreshed automatically before expiry
• Platform data (profile info, upload history) is retained while your account is connected and deleted within 30 days of disconnection
• You can request immediate deletion of your stored platform data from MarsClip Settings or by emailing hello@marsclip.com
• Videos you generate in MarsClip are stored in our private cloud storage and deleted when you delete them from your library
• Records of refused requests are retained for up to 24 months so that we can enforce our Terms consistently, review an appeal, and answer our payment provider and regulators. They are then deleted

7. Device Data Collection

We collect the following data from your device to enable our services:

• Browser type and version
• Operating system information
• Screen resolution and device type (for optimal video rendering)
• Connection information required for video uploads

8. Platform API User Data Policies

MarsClip's use and transfer of information received from Google APIs, TikTok APIs, and Meta APIs to any other app adheres to each platform's User Data Policy, including Google API Services Limited Use requirements, TikTok Developer Terms, and Meta Platform Terms. We do not sell, transfer, or share platform-obtained data with third parties except as strictly required to deliver the features you request (e.g., uploading a video to TikTok on your behalf).

9. Legal Bases for Processing (EEA and UK)

If you are in the European Economic Area or the United Kingdom, we process your personal data on the following legal bases under the GDPR and UK GDPR:

• Performance of a contract — to create your account, generate and store your videos, and publish them to the platforms you connect
• Consent — to connect a YouTube, TikTok, or Instagram account, and to send marketing email. You can withdraw consent at any time by disconnecting the account or unsubscribing, without affecting processing already carried out
• Legitimate interests — to keep the service secure, prevent abuse and fraud, and understand aggregate usage so we can improve MarsClip. This includes checking submitted requests against our content rules before generating anything, and keeping a record of requests we refuse. We balance these against your rights and use the least data that achieves the purpose — which is why an allowed request is not stored, only hashed
• Legal obligation — to keep tax and accounting records for payments you make

10. International Data Transfers

We operate from India and use service providers located in the United States, the European Union, and India. This means your personal data may be transferred outside your country, including outside the EEA and the UK.

• Where we transfer personal data out of the EEA or the UK, we rely on the European Commission's Standard Contractual Clauses (and the UK International Data Transfer Addendum where applicable) with each recipient
• We assess each provider's security before sending them data and require them to process it only on our instructions
• You can request a copy of the safeguards we rely on by emailing hello@marsclip.com

11. Service Providers We Use

We share the minimum data necessary with the following categories of processor, and with no one else:

• Authentication and database hosting (Supabase, MongoDB Atlas)
• Cloud storage, video rendering and content delivery (Amazon Web Services, Cloudflare)
• AI model providers used to generate the video, imagery, voice and text you request (including Replicate, OpenAI, Anthropic, and ElevenLabs) — they receive your prompts and generation inputs, not your account credentials or platform tokens. Anthropic also receives submitted text for the content check described in section 5
• Payment processing (Dodo Payments) — they handle your card details directly; we never receive or store them
• Transactional email delivery

12. Your Rights in the EEA and UK

If you are in the European Economic Area or the United Kingdom, you have the right to:

• Access the personal data we hold about you, and receive a copy of it
• Have inaccurate data corrected
• Have your data erased (the "right to be forgotten")
• Restrict or object to our processing, including processing based on legitimate interests
• Receive your data in a portable, machine-readable format
• Withdraw consent at any time, without affecting processing already carried out
• Lodge a complaint with your local data protection supervisory authority
• Not be subject to a decision based solely on automated processing that produces legal effects or similarly significantly affects you. Our content checks are partly automated: a request may be refused automatically, and repeated violations may lead to suspension. You may ask for any such decision to be reviewed by a person, explain your side of it, and contest the outcome

13. Your Rights in the United States

If you are a resident of California, Colorado, Connecticut, Virginia, or another US state with a comprehensive privacy law, you have the right to know what personal information we collect, to request its deletion, to correct it, and to receive a copy of it.

• We do not sell your personal information, and we do not share it for cross-context behavioural advertising, as those terms are defined under the CCPA/CPRA
• We do not use your personal information for profiling that produces legal or similarly significant effects
• We will not discriminate against you for exercising any of these rights
• Email hello@marsclip.com to make a request; we verify it against your account email before acting on it

14. Data Security

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk of our processing operations, including encryption of sensitive data and secure API communications.

15. Third-Party Services

Our service may contain links to third-party websites or services. We are not responsible for the privacy practices or content of these third-party sites.

16. Your Rights and Choices

You have the right to:

• Access the YouTube, TikTok, and Instagram data MarsClip stores about you
• Request deletion of your stored platform data at any time
• Revoke MarsClip's access to any connected YouTube, TikTok, or Instagram account
• Receive a copy of your stored data on request

17. Children's Privacy

Our service is not directed to children. You must be at least 13 to use MarsClip, and at least 16 if you are in the European Economic Area or the United Kingdom, unless your country sets a lower digital age of consent and a parent or guardian has consented. We do not knowingly collect personal data from anyone below these ages; if we learn that we have, we delete it. Contact hello@marsclip.com if you believe a child has given us personal data.

18. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page.

19. Contact Us

This service is operated by Narverse Private Limited, a company incorporated in India, which is the data controller for the personal data described in this policy. For any question about this Privacy Policy, or to exercise any of the rights described above, contact us at hello@marsclip.com.