Privacy Policy

Last updated: November 4, 2026

This policy explains what personal data Theo VIGNERES EI, trading as SpaceCut (173 rue de Courcelles, 75017 Paris, France, “we”) processes when you visit spacecut.ai (the “Site”), buy a plan, or use the SpaceCut application (the “App”), why, and what your rights are. We are the data controller for the processing described here, under the EU General Data Protection Regulation (“GDPR”) and the French Data Protection Act.

In short: SpaceCut is built so your videos never reach us. The App works on your computer. We only process what we need to sell you a license, check it, answer you, and run our creator program.

1. Your videos and projects stay on your computer

Your media files, projects, transcripts and exports are stored and processed on your computer. Transcription runs on your computer. We do not receive, store or have access to them.

When you use the AI agent, the App sends your instructions and the information the agent needs (such as transcript excerpts and still frames) directly from your computer to the AI provider you connected (for example Anthropic for Claude Code, or OpenAI for Codex), under your own account with that provider. The same applies to optional services you connect, such as Higgsfield. These providers process that data under their own terms and privacy policies, as independent controllers. We are not a party to that processing and do not receive that data.

The App downloads its speech recognition models the first time you transcribe, from Hugging Face, Inc. (United States). That provider sees your IP address, like any download.

The App does not send us analytics, usage statistics or the content of your projects. The only data the App sends to us is described in section 2.3.

2. What we process, why, and on what basis

2.1 Visiting the Site

• Data: technical data needed to deliver the pages (IP address, browser, pages requested, date and time), processed by our host Cloudflare in its security and delivery logs.
• Purpose and basis: delivering and securing the Site, our legitimate interest (Article 6(1)(f) GDPR).
• The Site uses no advertising or analytics cookies and loads no third-party trackers. Our fonts are hosted on our own servers.
• If you arrive with a creator’s referral link (?a=name), the Site keeps that name in your browser’s session storage for the duration of your visit only, to pass it to the checkout so the creator is credited. It is deleted when you close the tab.

2.2 Buying a plan

Payments are handled by Whop (Whop, Inc., USA) and its payment partners. The checkout on our Site is provided by Whop and loads from Whop’s servers; Whop may use its own cookies and processes your payment data under its own privacy policy. We never receive your full card number.

• Data we receive from Whop: your name, email address, country, the plan bought, the price and taxes, payment status and dates, your license key, the referring creator (if any), and the checkout details we attach to the order (offer chosen, date and version of the terms you accepted, your request for immediate delivery).
• Purposes and bases: performing our contract with you (delivering and managing your license, subscription and support, Article 6(1)(b)); keeping accounting and tax records (legal obligation, Article 6(1)(c)); preventing fraud and defending legal claims, including payment disputes (legitimate interest, Article 6(1)(f)); paying creator commissions (legitimate interest).

2.3 Checking your license

When you activate the App and periodically afterwards, the App sends our license server:

• your license key;
• a device identifier: a one-way hash derived from your computer’s hardware identifier, which identifies your computer to our server but cannot be turned back into the original identifier;
• the App version, and, like any internet request, your IP address.

We store the device identifier and the activation date with your order in Whop, to enforce one computer per license. Purpose and basis: performing our contract and protecting our software against unauthorized use (Article 6(1)(b) and (f)). Our license server keeps no other record of these requests beyond short-lived technical logs.

2.4 Applying to the affiliate program

• Data: your name, email address, the links to your channels, your message, and any public information on those channels that we look at to review your application.
• Purpose and basis: reviewing your application and replying to you, at your request (Article 6(1)(b)), and our legitimate interest in choosing the creators we work with (Article 6(1)(f)).
• If you are accepted, your affiliate account, sales and payouts are managed through Whop.
• To keep bots out, the application form uses Cloudflare Turnstile, which checks technical signals from your browser (such as your IP address and browser characteristics) when you load the form. It sets no advertising cookies and is used only for this check, our legitimate interest in protecting the form (Article 6(1)(f)).

2.5 Contacting us

When you email us, we process your email address, your message and anything you attach, to answer you (Article 6(1)(b) or (f)).

We do not sell your personal data, and we do not use it for profiling or automated decisions with legal effects. We may send you emails about your license, your subscription and important changes to SpaceCut (service messages). We will only send you marketing emails if you agreed to receive them or, if you are a customer, about similar products, with a one-click way to opt out in every email.

3. Who receives your data

Only the people at our company who need it, and our service providers, acting on our instructions or as independent controllers where stated:

We may also disclose data if required by law, or to defend our rights, or as part of a merger or sale of our business (in which case this policy continues to apply).

4. Transfers outside the European Union

Some of our providers are located in the United States. These transfers are made under the EU-US Data Privacy Framework where the provider is certified, or under the Standard Contractual Clauses adopted by the European Commission, with additional measures where needed. You can ask us for a copy of the relevant safeguards.

5. How long we keep it

6. Security

We use encrypted connections (HTTPS), keep our payment and API credentials on the server side only, never in the App, and limit access to personal data to what is needed. No method of transmission or storage is perfectly secure, but we take reasonable measures to protect your data, and we will notify you and the authorities of a breach where the law requires.

7. Your rights

You have the right to access your data, to rectify it, to erase it, to restrict or object to its processing, to data portability, and to withdraw your consent at any time where processing is based on consent. You can also give instructions about what happens to your data after your death (French law). Some data must be kept despite an erasure request, such as accounting records.

To exercise these rights, email privacy@spacecut.ai. We will answer within one month. We may ask you to prove your identity.

If you think your rights are not respected, you may lodge a complaint with the French data protection authority, the CNIL (3 Place de Fontenoy, 75007 Paris, www.cnil.fr), or with the authority of the country where you live.

8. Children

SpaceCut is not intended for people under 18, and we do not knowingly collect their data.

9. California and other US residents

We do not sell or share personal information for cross-context behavioral advertising. You may request to know, correct or delete the personal information we hold about you by emailing privacy@spacecut.ai. We will not discriminate against you for exercising these rights.

10. Changes

We may update this policy. The current version is always on this page with its date. If a change materially affects how we use your data, we will tell you by email before it applies.

Contact

Theo VIGNERES EI, trading as SpaceCut, 173 rue de Courcelles, 75017 Paris, France. Email: privacy@spacecut.ai.