OnceClip Privacy Policy

Last updated: April 25, 2026

OnceClip ("we", "us") respects your privacy. This policy explains how we collect, use, and protect your data on clip.oncehit.com and the OnceClip Chrome extension (together, the "Service").

1. Data we collect

Account data: user id, email, display name, and access token, obtained via OnceAccount SSO.
Content you upload: photos, video clips, narration text. We use this only to generate the video you requested.
Usage logs: timestamps, IP addresses, user agent, job ids — for billing, abuse prevention, and debugging.
Page-view analytics: when you browse clip.oncehit.com we log page paths and time on page so we can understand traffic patterns and improve UX.
Payment data: handled by ECPay or PayPal directly. We only store the outcome (success / amount / order id) — never card numbers.

2. About the Chrome extension

The extension only sends files to our servers after you actively click the popup and upload photos.
The bundled content_script is injected only on clip.oncehit.com. Its sole purpose is to mirror your login token into chrome.storage so the popup can authenticate when you're already signed in.
We do not sell extension data to third parties and do not use it for ad tracking.

3. How we use your data

To provide and maintain the Service (generating videos, deducting credits, delivering completion notifications).
For billing and balance reconciliation with OnceAccount.
To detect abuse, spam, and security incidents.
For aggregate, non-identifying analytics to improve the Service.

4. Third parties

Microsoft Edge Neural TTS — text-to-speech synthesis for narration.
OnceAccount — sign-in and credit ledger.
ECPay / PayPal — payment processing.

We do not sell or rent your personal data to third parties beyond what these integrations require.

5. Data retention

Uploaded source files and generated videos: kept for up to 7 days after completion, then deleted automatically.
Job records and billing receipts: retained for 5 years per tax regulations.
Account data: kept for the lifetime of your OnceAccount; deleted within 30 days of account closure.

6. Your rights

You may request access, correction, deletion, or restricted processing of your personal data at any time. Email oncehit.service@gmail.com.

7. Security

We use HTTPS in transit, least-privileged database accounts, and tiered backups. No internet transmission is 100% secure — please use a strong password and protect your sign-in credentials.

8. Children

The Service is not directed to children under 13. If you are a parent and learn that your child has provided us with personal data, please contact us and we will delete it promptly.

9. Updates

If we make material changes to this policy, we will post a notice on our home page and via the OnceAccount notification center. Continued use of the Service after changes means you accept the updated policy.

10. Contact

OnceHit / OnceClip
Email: oncehit.service@gmail.com