Privacy Policy

This privacy policy applies to the website editvideowithai.com, its API and MCP endpoints, and the editfork command line tool (together, the "Service"). The data controller within the meaning of the GDPR is:

[FULL NAME]
[STREET AND NUMBER]
[POSTAL CODE AND CITY], Germany
Email: privacy@editvideowithai.com

The short version: browsing works without an account, we run no analytics, and we never host or receive your video files. An account is only needed to manage a creator profile. We collect the minimum needed to serve pages, count skill runs, and operate accounts, and we do not sell personal information. Ever.

Server logs (legitimate interest, Art. 6(1)(f) GDPR). When you visit the site or call our API or MCP endpoints, our hosting infrastructure automatically processes standard connection data: your IP address, browser or client type, requested pages, and timestamps. We use this solely to deliver the Service, prevent abuse, and debug errors. We do not build visitor profiles from it.

Run statistics (legitimate interest). When a skill is fetched via the MCP endpoint or installed via the CLI, we record an anonymous run event: which skill, when, and whether it came via MCP, CLI, or the website. Run events contain no account identifier and are the basis of our public rankings. Result reports ("worked" / "broke") may optionally include a link to a video you have already published elsewhere; providing it is your choice.

Published content (contract performance, Art. 6(1)(b) GDPR). When you publish a skill with the editfork CLI, you deliberately submit: a creator handle, an optional display name and link, the skill text, tool metadata, and a link to your video on YouTube or X. All of this is published publicly by design; publishing is the purpose of the Service. The CLI never uploads your video files, your footage, or your full agent session logs. Distillation of your session happens locally on your machine, and only the skill text you approve is transmitted.

Account data (contract performance). If you create an account (Google sign-in or email magic link), we process your email address, and, if provided by Google, your name and profile picture, to authenticate you and connect you to your creator profile. Your creator profile (handle, display name, bio, location, links) is public by design; your email address is never displayed. You can delete your account and profile at any time by contacting us.

Email (legitimate interest / contract). If you email us, we process your address and message content to answer you.

We use no tracking or analytics cookies. The only cookie we set is a strictly necessary session cookie after you sign in, which keeps you logged in and is deleted when you sign out. Strictly necessary cookies do not require consent, so there is no cookie banner. If this ever changes, this policy will be updated first and anything non-essential will be opt-in.

We keep the list short. The following third parties process data when you use the Service:

• Vercel (Vercel Inc., USA): hosts the website, API, and MCP endpoints. Processes IP addresses and request metadata to deliver the Service. Data may be processed in the USA on the basis of the EU standard contractual clauses and the EU-US Data Privacy Framework. Vercel privacy policy.
• Supabase (Supabase Inc.): stores account and profile data and handles authentication (Google sign-in and email magic links). Processes your email address and, for Google sign-in, basic Google profile data. Supabase privacy policy.
• Google sign-in (Google Ireland Ltd.): only used if you choose to sign in with Google; Google learns that you signed in to our Service. Google privacy policy.
• YouTube (Google Ireland Ltd.): skill pages embed videos in privacy-enhanced mode (youtube-nocookie.com). YouTube receives your IP address when the player loads and applies its own tracking only when you start playback. Google privacy policy.
• X / Twitter: videos on X are never embedded; we only link out. X receives no data from us before you click such a link.

We use no payment provider, no email marketing service, no CRM, and no error tracking service. If we add one, it will be listed here before it goes live.

Server logs are retained by our hosting provider for a short, rolling period and are not archived by us. Run statistics are kept indefinitely in aggregate form; they contain no personal identifiers. Published skills and creator profiles remain public until you ask us to remove them.

To have a skill, profile, or result report removed, email privacy@editvideowithai.com from a way that lets us verify you are the creator (for example, the account behind the linked video). We remove verified requests within 30 days, including from backups within 90 days.

Under the GDPR you have the right to:

• access the personal data we hold about you (Art. 15),
• have inaccurate data corrected (Art. 16),
• have your data erased (Art. 17),
• restrict processing (Art. 18),
• data portability in a structured, machine-readable format (Art. 20),
• object to processing based on legitimate interest (Art. 21),
• withdraw any consent you have given, with effect for the future (Art. 7(3)).

Requests are free of charge and answered within one month. You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77), for example the authority of the German federal state in which the operator resides.

The Service is not directed at children under 16 and we do not knowingly process their personal data.

Skill pages link to videos and creator profiles on external platforms. We have no control over those sites and are not responsible for their privacy practices.

We may update this policy to reflect changes to the Service or the law. The current version is always available at this address; the effective date at the top tells you when it last changed.