Coming soon

Legal

Privacy Policy

Last updated: October 26, 2026

SodaClip is a macOS desktop app. Your original video files stay on your Mac, and speech activity detection, speaker separation, face detection and rendering run on your Mac. In the first release, transcription is done in the cloud.

To suggest topics, cut shorts and apply your edits, some text, frames and audio clips are sent through our gateway to cloud model services. This policy lists what is processed, who receives it, where, for how long, and your rights.

1. Who we are and what this covers

SodaClip is provided by DELIBRAIN LTD (“SodaClip”, “we”, “us”). We are the controller of the personal information described in this policy for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, and, for users in the European Economic Area, the EU General Data Protection Regulation (EU GDPR).

This policy covers the SodaClip desktop app for macOS, its account and credit service (the gateway at api.sodaclip.com), the update and download service (downloads.sodaclip.com) and the website sodaclip.com. Third-party model services and publishing platforms that you connect yourself are covered by their own privacy policies.

2. Information we process, why, and legal bases

The legal bases below are those set out in Article 6 of the UK GDPR and the EU GDPR.

Account information
WhatEmail address, account ID, sign-in session, and your account preferences and styles.
WhyTo create your account, sign you in and provide hosted features.
Legal basisPerformance of our contract with you.
Credit and usage records
WhatCredit balance and credit grants; for each hosted request: model name, provider, token counts, cost, a content hash of the source media, source minutes, billed audio seconds, purpose, status, latency and error information.
WhyTo calculate and reconcile credit and to diagnose problems.
Legal basisContract; legitimate interests in accurate accounting and preventing abuse.
Security and rate-limit records
WhatSHA-256 hashes of email and IP addresses, hashes of sign-in tokens, revoked-session records, and gateway access logs (route, status, latency and an account pseudonym; no request bodies or tokens).
WhyTo prevent abuse and keep accounts and the service secure.
Legal basisLegitimate interests in security.
Content sent to cloud model services
WhatTranscript text, source summaries, chat messages, frames, compressed video clips and audio clips, as described in section 3.
WhyTo suggest topics, cut shorts, apply edits and analyze footage.
Legal basisContract.
Update check information
WhatApp version, platform, CPU architecture, macOS version and update channel (section 6).
WhyTo deliver security and compatibility updates.
Legal basisContract; legitimate interests in software security.
Optional usage analytics
WhatFixed operation event names, stage durations, outcomes and categorized error codes (section 7).
WhyTo improve the product.
Legal basisYour consent. Off by default; you can withdraw it at any time.
Website visits
WhatIP addresses and request logs processed by website hosting and public video delivery providers (section 8).
WhyTo serve and protect the website.
Legal basisLegitimate interests in running the website.
Messages and requests
WhatEmails you send to the contact address and their contents.
WhyTo answer questions and handle rights requests and complaints.
Legal basisLegal obligations; legitimate interests in responding to you.

The content hash is computed from the video and is used to recognize the same source. The video cannot be reconstructed from it.

3. What is sent to cloud model services

When you use our hosted features, the items below are relayed by our gateway (Tencent Cloud, United States). Service keys stay on the gateway and are never sent to your device.

Soda Agent generation and edits, story segmentation, viewer-perspective checks
SentTranscript text, source summaries, chat messages, and frame screenshots when needed.
RecipientAlibaba Cloud Model Studio (international), United States (Virginia) region.
Provider retentionRetained under the provider’s default retention period.
Visual and audio understanding (on by default after sign-in)
SentFrames and compressed video clips extracted as needed for the task; clips include their original sound. Image size and sampling rate vary with analysis and review needs. You can change this in the app’s analysis settings.
RecipientAlibaba Cloud Model Studio (international), United States (Virginia) region.
Provider retentionRetained under the provider’s default retention period.
Cloud transcription (the only transcription method in the first release)
SentOnly segments where speech is detected. If speech detection fails, the full audio track is uploaded. No speech recognition model runs on your Mac in the first release.
RecipientAlibaba Cloud Model Studio (international), United States (Virginia) region.
Provider retentionRetained under the provider’s default retention period.
Vector search
SentFrame images, their time labels and search text.
RecipientOpenRouter, routed to a Voyage AI multimodal embedding model.
Provider retentionDepends on the provider’s terms and routing configuration. We have not completed verification and do not promise zero retention or a fixed deletion period.

The gateway does not write media files to disk or to its database. Content being processed is held only in the gateway’s memory; after a transcription job finishes, its result is kept in memory for at most 1 hour so the app can retrieve it.

4. Services you connect and the publishing center

Model services you connect yourself
If you connect another model service for Soda Agent (for example with an API key, an account sign-in, or a custom service address), Soda Agent’s input is sent directly from your device to that service, not through our gateway, under that service’s own terms and privacy policy. The keys and sign-in details are stored in the app’s data folder on your Mac.
Publishing center (experimental)
When you use the publishing center to post a short to platforms such as YouTube, TikTok or Instagram, the app opens the platform’s website in a built-in browser and the video is uploaded directly from your device to that platform. With your permission, the platform login is kept on your Mac in separate storage and is cleared when you disconnect. To carry out the publishing steps, structural summaries and screenshots of the platform page are sent to the model service you selected (the hosted service or one you connected). The platform handles what it receives under its own privacy policy.

5. What stays on your Mac

  • Original video files stay on your Mac and are not uploaded to us.
  • Speech activity detection, speaker separation, face detection and rendering run on your Mac.
  • App logs are stored only on your computer and we cannot read them. The app does not include a crash-reporting service.
  • Your sign-in session and the keys of services you connect are stored in the app’s data folder, with file permissions limited to your macOS user.

6. Software updates and model downloads

Update checks

The app asks our gateway for updates after launch, every 4 hours, and when a window regains focus (automatic checks run at most once every 5 minutes). The request contains the app version, platform, CPU architecture, macOS version and update channel, and no account information. When you choose to download an update, the app fetches the update manifest and installer from downloads.sodaclip.com, sending a random installation identifier generated on your Mac by the update component, and checks the file digest before installing. These requests reveal your device’s IP address to the recipient. Updates are never downloaded or installed automatically.

First launch and on-demand downloads

On first launch, the app downloads in the background the models and runtime components used on your Mac, about 47 MB in total (about 11 MB more if the bundled face detection runtime cannot be used). Some features download additional models the first time they are used, including a word alignment model of about 365 MB. Sources include Hugging Face, GitHub, Google’s model storage and the npm registry, and every file is checked against its SHA-256 after download. These sites see your device’s IP address and apply their own privacy policies.

7. Optional usage analytics

Usage analytics is off by default. You can turn it on or off with the Usage analytics switch in the app’s Settings. When it is on, the app records fixed operation events for sign-in, import, generation, editing, analysis and export, along with stage durations, outcomes, categorized error codes, app version, platform and interface language. Events use randomly generated event, session and operation IDs. Email addresses, verification codes, media, transcripts, prompts, filenames, paths and raw error text are not collected.

Events are uploaded to our gateway only while you are signed in, and are recorded in the gateway log under an account pseudonym (a short code derived by hashing your account ID). Events waiting to be uploaded are kept on your Mac for at most 7 days and 500 entries.

When analytics is on, the app also loads Microsoft Clarity in a page isolated from app content and sends it fixed event names only. That page cannot access app content or native actions and does not replay the editor interface, and Clarity’s storage consent is set to denied. Clarity processes the request IP address, device information and basic information about that isolated page under the Microsoft Privacy Statement. We do not give Clarity any account identifier, so Clarity records cannot be located by account. Clarity is not loaded while analytics is off.

Turning analytics off stops sending and deletes events waiting on your Mac. You can ask for access to or deletion of records already uploaded to the gateway as described in section 15.

8. The website

  • Website pages are hosted by Tencent Cloud in the United States. Public demonstration videos are stored and delivered through Cloudflare R2. Requests for pages and videos disclose information such as your IP address, request time, requested URL and browser information to the relevant hosting or delivery provider. Cloudflare processes this information under the Cloudflare Privacy Policy. The public video storage contains our website demonstrations, not your private projects or source footage.
  • The website’s pages set no cookies and load no analytics, advertising, tracking or other third-party scripts or fonts. Cloudflare may set strictly necessary security cookies under its own policies.
  • Your language and appearance choices are stored only in your own browser (sodaclip-lang, sodaclip.theme) and are not sent to us.
  • Links to third-party sites (for example, the sources of demo footage) open only when you click them, and those sites apply their own privacy policies.

9. Service providers and other recipients

The service providers below process personal information on our behalf, only as needed to provide their services.

Tencent Cloud
RoleHosting and network access for our gateway and website pages.
RegionUnited States.
Supabase
RoleAccount database and email sign-in codes.
RegionUnited States (us-east-1).
Resend (Resend, Inc.)
RoleDelivers sign-in code emails sent through Supabase Auth; receives your email address and the content of the sign-in email.
RegionUnited States.
Alibaba Cloud Model Studio (international)
RoleText models, visual and audio understanding, cloud transcription.
RegionUnited States (Virginia) region.
OpenRouter and Voyage AI
RoleMultimodal embedding model for vector search.
RegionAs described by the providers.
Cloudflare
RoleStorage and delivery of public website demonstration videos, installers and update files; not storage of your private projects or source footage.
RegionGlobal network.
Microsoft Clarity
RoleOptional usage analytics, only after you turn it on.
RegionAs described by Microsoft.

Download sites (section 6), model services you connect yourself and publishing platforms (section 4) are independent recipients and do not act on our behalf. Apart from these cases, we share personal information only where required by law or where necessary to protect the rights of users, SodaClip or the public.

10. Limits on use

  • The information above is used only for the purposes described in this policy.
  • We do not sell personal information, do not use it for targeted advertising, and do not share it for cross-context behavioral advertising.
  • We do not make solely automated decisions based on personal information that have legal or similarly significant effects on you.

11. International transfers

We are based in the United Kingdom, but personal information is processed outside the UK and the European Economic Area:

  • United States: Tencent Cloud (gateway and website page hosting), Supabase (account database and sign-in), Resend (sign-in code emails), Alibaba Cloud Model Studio (international), United States (Virginia) region (model requests) and OpenRouter (vector search).
  • Cloudflare delivers public website videos and downloads through its global network; related request information may be processed in countries where it operates.
  • Other service providers listed in section 9 may process information in further countries or regions.

Transfers are made only where permitted by the UK GDPR and, for users in the European Economic Area, the EU GDPR. Where the law requires safeguards for a transfer, such as approved contractual clauses, we will put those safeguards in place. You can ask for more information about the safeguards that apply by contacting us.

12. Retention

  • Account, credit and usage records are kept while your account exists.
  • Analytics events waiting on your Mac are kept for at most 7 days; transcription results in gateway memory are kept for at most 1 hour.
  • Expired rate-limit records are removed periodically.
  • Content sent to model providers is handled under the provider retention periods in section 3.
  • Gateway logs are kept subject to the hosting provider’s log settings.
  • After you ask for your account to be deleted, we delete or anonymize its account information, preferences and usage records within 30 days, except for the minimum records that the law requires to be kept or that are needed to handle disputes or prevent abuse; those are deleted when that purpose ends.

13. Security

  • Traffic between the app and the gateway is encrypted with HTTPS.
  • Gateway database tables live in a separate schema that is not exposed through Supabase’s public data API.
  • Sign-in tokens are stored only as hashes; rate-limit records store only hashes of email and IP addresses.
  • Model service keys stay on the gateway and are never sent to your device.
  • Update installers are checked against their file digest before installation, and downloaded models are checked file by file against SHA-256.

No method of transmission or storage is completely secure. To report a security issue, email the contact address.

14. Your rights

Depending on where you live, you may have the right to: access your personal information and get a copy; correct or complete inaccurate information; delete your information or close your account; restrict or object to certain processing; receive the information you provided in a structured, commonly used format (portability); and withdraw consent at any time, without affecting processing before withdrawal.

United Kingdom, European Economic Area and Switzerland

These rights apply under the UK GDPR and the Data Protection Act 2018, the EU GDPR, and the Swiss Federal Act on Data Protection, subject to the conditions and exceptions in those laws. You also have the right to complain to the UK Information Commissioner’s Office (ico.org.uk) or to the data protection authority where you live, work or where an alleged violation took place. We would appreciate the chance to address your concern first, so please consider contacting us before complaining.

California and other US states

You may ask to know, access, correct and delete your personal information under applicable state privacy laws. We do not sell personal information and do not “share” it for cross-context behavioral advertising. You will not be treated differently for exercising your rights.

15. How to exercise your rights

Email contact@pattinghead.com from your registered address and describe your request. To verify your identity, we may ask you to confirm from your registered address or provide other information needed for verification, which is used only to handle the request. You may use an authorized agent, who must provide valid proof of authorization.

We respond within 30 days of receiving a request. For complex requests this period may be extended as permitted by applicable law, and you will be told why. Requests are normally free of charge; requests that are manifestly unfounded or excessive may be refused or subject to a reasonable fee where the law allows. The app does not yet offer in-app account deletion, so account deletion is requested through the address above.

16. Children

SodaClip is not intended for anyone under 16. If a minor has signed up without a guardian’s consent, tell us at the contact address and the account will be deleted.

17. Changes to this policy

When data flows or recipients change, this policy will be updated and the date at the top revised. Significant changes will be announced in the app.

18. Contact

Email: contact@pattinghead.com

DELIBRAIN LTD · Registered in England and Wales · Company number 16244964 · Registered office: 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom