Privacy Policy

RocketClip acts as the data controller for personal data required to operate the service.

For privacy-related requests, contact us at contact@rocketclip.io.

Account data: email, user identifier, and authentication-related details managed by our identity provider.

Product data: projects, slideshows, user-provided content, settings, publication metadata, and technical logs.

Technical data: IP addresses, session identifiers, security diagnostics, and strictly necessary performance metrics.

Service delivery (create, edit, export, publish TikTok drafts): contractual necessity.

Security, fraud prevention, and platform integrity: legitimate interest.

Compliance duties (tax, accounting, legal defense): legal obligation.

Account and project data are retained while the service is actively used.

Technical logs are retained for a limited period aligned with security and audit requirements.

Upon account deletion, data is deleted or anonymized unless legal retention applies.

We rely on essential technical vendors (hosting, database, storage, authentication, task orchestration, observability) to provide the service.

When transfers occur outside the EEA, we apply appropriate safeguards (such as Standard Contractual Clauses or equivalent mechanisms).

You may request access, correction, deletion, restriction, objection, and portability, subject to applicable law.

You may also lodge a complaint with your competent data protection authority.

We implement reasonable technical and organizational safeguards: access control, encryption in transit, logging, and environment separation.

No method is fully infallible, and we continuously improve security and resilience controls.

We use strictly necessary cookies and local storage for core functionality and security (session, authentication, essential preferences).

Product analytics: when you accept via the consent banner, we load PostHog to measure product journeys (pageviews, activation steps, exports, paywall, checkout). Session replay, heatmaps, and intrusive autocapture are disabled. You may refuse or withdraw consent; no browser PostHog tracker loads before acceptance.

We do not send emails, prompts, slide text, or brand content to PostHog. Technical identifiers (user UUID, slideshow/run ids) may be used for deduplication and funnels.

Some business events may be recorded server-side (generation, export, subscription) to keep the funnel reliable; browser consent remains required for the client SDK and pageviews.

This policy may evolve to reflect legal, technical, or product changes.

For substantial updates, we will revise the date above and notify users through appropriate channels.