THE ESSENTIALS
Google is only used to sign you in.
Source files and drafts stay private.
You choose which videos appear in the gallery.
Who is responsible for your data?
Clapsio is a product published and operated by Whatalead SAS, 60 rue François Ier, 75008 Paris, France, registered with RCS Paris under 937 870 913, SIRET 93787091300012. Whatalead is the controller for account management, service delivery, billing and security. Contact: support@whatalead.com.
This policy covers the Clapsio website and studio, not the separate features of other Whatalead products. If you import personal data about others, you must be entitled to use it and provide the required information to those people.
The information the studio needs
Account: email address, name and profile picture where provided, account identifier, sign-in method and sessions. Projects: submitted website addresses, extracted content and images, scripts, instructions, uploaded references, audio, compositions, videos and version history.
Operation: generation dates and states, credit usage, technical costs, incidents, support correspondence and administrative action records. When purchases are enabled, Stripe processes payment details. Clapsio keeps customer, transaction and subscription references, not your full card number.
Security: IP addresses when requests arrive, technical connection information and pseudonymous network, device and email identifiers used to prevent abuse, repeated votes and repeated trials.
Signing in with Google
Google sign-in is optional; you can still use an email code. With your authorization, Clapsio requests only openid, email and profile to receive your Google identifier, email address and verification status, and your name and profile picture if available. We use these details to create or find your account and authenticate you.
Clapsio does not request access to Gmail, Google Drive, Google Calendar, contacts or YouTube. Google sign-in data and OAuth tokens are not sent to AI models to create videos, used to train models, used for advertising profiles or sold.
Account information is stored in Clapsio’s Cloudflare infrastructure. Any OAuth tokens retained by the authentication system are encrypted. Access is limited to service delivery, authorized support, security or legal requirements.
Clapsio’s use and transfer of information received from Google comply with the Google API Services User Data Policy, including Limited Use requirements where applicable. You can revoke authorization in your Google account connections. Revocation prevents future access authorized by Google; to also delete your Clapsio account and information already stored, contact support@whatalead.com.
Why we use it
Contract performance covers your account, video preparation and rendering, project storage, downloads, service emails and purchases. Required information is requested in the relevant flow; without it, the associated feature cannot be provided.
Our legitimate interest in protecting the service covers abuse prevention, trial limits, diagnostics and administrative accountability. Legal obligations cover matters such as accounting records. Optional gallery publication follows your choice, which you can withdraw from the project. Clapsio does not make automated decisions with legal or similarly significant effects on you.
Who receives what?
Cloudflare hosts the website, application authentication, databases, files, processing queues and rendering; Turnstile protects sign-ups. OpenAI processes content and instructions needed for analysis, writing and visual creation. Google Gemini processes text for voice generation and music requests when those features are used. These creative processes use your project content, separately from information obtained through Google sign-in.
Resend receives your email and transactional messages to deliver. Stripe handles payments when enabled. Google acts as an identity provider if you choose its sign-in. Authorized Whatalead staff access information needed for support, maintenance and abuse prevention.
We do not sell your data or provide your source files to advertisers. Information may be disclosed where required by law. Some providers operate across countries, including outside the European Economic Area; transfers are subject to GDPR mechanisms such as an adequacy decision or applicable standard contractual clauses. Clapsio does not promise exclusively European hosting.
Your publication choice
Source files, working files and drafts are available to authorized account users. Enabling a project’s gallery setting makes its finished videos and title publicly accessible. You can withdraw this visibility in the studio. Withdrawal prevents further gallery access but cannot remove copies already downloaded by third parties.
How long is information kept?
Account and project data remain available while you use the service, including your history, and are addressed when you request deletion. Signing out or revoking Google access does not itself delete your account. Records needed to meet legal obligations or establish legal claims may be retained separately for the applicable period.
A session lasts seven days and can be renewed during use. An email code expires after five minutes and can only be used once. Temporary counters have expiration windows; sign-up requests use a 24-hour window. Pseudonymous identifiers attached to a used trial are retained to prevent abusive repeat trials while that control remains necessary. Accounting records are retained for the applicable statutory period.
Your rights and account deletion
You may request access, correction, erasure, restriction or portability and, depending on the legal basis, object to processing or withdraw consent. Email support@whatalead.com from your account address, mentioning Clapsio and your request. We verify identity proportionately and respond within GDPR time limits, generally one month.
You can download videos and disable gallery visibility in the studio. Contact support for a more complete data copy or account deletion. You may complain to the CNIL at cnil.fr or to the supervisory authority in your place of residence.
CNIL ↗Audience and updates
Clapsio is intended for adults. Contact us if a child’s information was submitted by mistake. This policy is dated. Material changes in data use will be announced in the application or by email before taking effect where required.