Privacy Policy

The minimum needed to run the service:

• Account identifier: a Clerk user ID and email address. We do not store passwords — Clerk handles authentication on our behalf.
• Usage data: job history (Twitch URL submitted, scan results, credits charged/refunded, timestamps) and purchase records (Stripe transaction IDs, pack purchased, amount, date).
• Source content (temporarily): when you submit a Twitch URL we fetch the audio (and, on confirmation, short video sections around detected burps) onto our worker for processing. These files live in a temporary container directory and are deleted as soon as the job finishes — typically minutes, never longer than the worker run.
• Generated supercuts: the MP4 output is stored on Cloudflare R2 for up to 24 hours so you can download it, then automatically deleted.
• Operational logs: request paths, error traces, and IP-derived rate-limit signals. Sensitive values (filenames, secret keys, payment intent IDs) are hashed rather than stored verbatim.

• To run jobs you submit and deliver your supercut.
• To bill credits and process purchases.
• To send transactional emails about your account (e.g. sign-in codes, receipts) — never marketing.
• To detect and mitigate abuse (rate limits, bot protection, anti-fraud on signup).

We use the following processors strictly to run the service. Each handles data under its own privacy terms; we link them here so you can read them:

• Clerk — authentication (your email + session). Clerk privacy
• Neon — Postgres database hosting (account + job rows). Neon privacy
• Cloudflare R2 — object storage for the temporary supercut output. Cloudflare privacy
• Modal — compute for the burp-detection and encoding worker. Modal privacy
• Vercel — hosting for the website and API routes. Vercel privacy
• Stripe — payment processing. We never see or store your card details. Stripe privacy
• Twitch — when you submit a URL, our worker fetches the content from Twitch's servers under Twitch's own terms.

We do not sell or share your data with anyone outside this list, and we never use your content to train any AI model.

• Source audio/video: deleted at the end of each job (minutes).
• Supercut output: deleted automatically 24 hours after creation.
• Job records: we keep only your 25 most recent jobs. When you submit a 26th, the oldest is permanently deleted (including any remaining R2 output).
• Account data: kept until you delete your account.
• Transaction records: kept for at least 7 years for tax and accounting purposes, even after account deletion. Records are dissociated from your account where legally permitted.

• Access: your dashboard shows your jobs, credits, and purchases. Email us for anything else we hold.
• Delete: the "Delete my account" button in the dashboard wipes your R2 objects, your DB rows, and your Clerk identity in a single action.
• Export: email us and we'll send your data in a machine-readable format within 30 days.

Passwords are not stored anywhere (Clerk uses passwordless email codes + OAuth). Payment card details never reach our servers (Stripe Checkout). Sensitive secrets are encrypted at rest in Vercel + Modal. We use HTTPS on every endpoint.

We use a single first-party session cookie set by Clerk to keep you signed in. No advertising or tracking cookies.

Privacy questions or data requests: hello@getburps.io.

We may update this policy as the service evolves. Material changes will be announced via email and reflected in the Effective date at the top of this page.