Privacy policy

Draft: Clear Slop is being founded. These texts will be completed with the company details and legally reviewed before launch.

Draft of 15 November 2026. Clear Slop is being founded; the controller's details will be added before launch. The German version is binding.

1. Controller

[Name or company, address, email – will be added before launch, see imprint.]

2. What data we process

Account: name, email address and password (stored only in encrypted form, with our provider Supabase). Content: uploaded ads and product photos, product details, chat messages in the studio, your jobs and the generated files. Credits and plan: balance, ledger (usage, refunds, grants), plan and term. Once payments are active, also customer and subscription IDs from Stripe. We never receive card details. Technical data: to prevent abuse we count requests per IP address or email address (for example login attempts). We delete these counters after one day at the latest. Our hosting provider Cloudflare keeps technical logs (including the requested address, time and errors) for up to 7 days.

3. Purposes and legal bases

Providing the account and features (Art. 6(1)(b) GDPR). Security, abuse and cost protection (Art. 6(1)(f) GDPR; our interest is safe, stable operation). Keeping booking and invoice records (Art. 6(1)(c) GDPR).

4. Recipients (processors)

Supabase (database, sign-in, file storage; stored in the EU, Ireland). Cloudflare (hosting and delivery of the website, background jobs, database connection; requests may be processed in Cloudflare's global network). Brevo (sending account confirmation and password reset emails; EU, France). Stripe (payments, once active). AI providers, only when connected and only for your job: fal.ai (images and video), Anthropic (text, chat, product profile suggestions, script suggestions and the instructions for the image and video models; for this Claude also sees the images concerned and the text of the product page), OpenAI (images, only if used instead of fal.ai), ElevenLabs (voices: the voice-over script; samples are loaded through our server, your browser does not connect to ElevenLabs). We send what the job needs: your instruction, confirmed product details and the images concerned. In demo mode no data is sent to AI providers.

5. Transfers to third countries

Some providers are based in the USA or process data there. Transfers rely on the EU-US Data Privacy Framework or the EU standard contractual clauses.

6. Product import

When you enter a link to a product page, our server fetches that page and the product images it names to suggest the details.

7. Cookies

We only set technically necessary cookies: for logging in, and one that remembers your chosen language (NEXT_LOCALE, kept for one year). Details are on the Cookies page. There are no analytics, advertising or tracking cookies. Fonts are served from our own server; visiting the site does not connect to Google.

8. Retention and deletion

We keep your data as long as your account exists. You can delete your account at any time in your profile; this removes your account, your content and all files. Data we must keep by law (for example invoices) is kept until the legal period ends.

9. Your rights

You have the right of access, rectification, erasure, restriction, data portability and objection (Art. 15 to 21 GDPR), and the right to lodge a complaint with a data protection authority. Contact us at the address in the imprint.