Privacy Notice — Cutwave

1. Who we are

Westros Digital Retail AB, org. nr 559499-1035, Slakterigatan 10, 721 32 Västerås, Sweden ("Westros", "we", "us") is the data controller for personal data processed in connection with Cutwave (Cutwave Captions and CleanCut AI). You can reach us at support@cutwave.ai.

2. What personal data we collect

Account data: name, email address, login credentials, authentication identifiers.
Content you upload: videos, audio, images, transcripts, and prompts you submit to the Service.
Support communications: messages and attachments you send to support.
Usage and telemetry: features used, credits consumed, error logs, timestamps.
Device and connection data: IP address, browser type, operating system, device identifiers.
Cookies and similar technologies: see "Cookies" below.

Payment data (card details, billing address) is collected and processed directly by Paddle as Merchant of Record. We receive only limited transaction metadata such as plan, amount, currency, and customer ID.

3. Why we use your data and on what legal basis

To provide the Service (account creation, processing your content, generating captions and edits) — performance of our contract with you.
To take payments and manage subscriptions via Paddle — performance of contract and legal obligation.
To secure the Service, prevent fraud and abuse, and enforce our Terms — legitimate interests.
To improve and develop the Service, including debugging and aggregated analytics — legitimate interests.
To provide customer support — performance of contract and legitimate interests.
To send service messages (e.g. billing, security alerts) — performance of contract and legal obligation.
To send marketing, where applicable — consent, which you can withdraw at any time.
To comply with law (e.g. accounting, responding to lawful requests) — legal obligation.

4. Who we share data with

We share personal data with the following categories of recipients:

Service providers / subprocessors: cloud hosting and storage, database providers, AI model providers (for transcription, translation, captioning, and watermark/object removal), error monitoring, analytics, and support tooling.
Paddle as our Merchant of Record, for sale of the product, subscription management, payments, tax compliance, fraud prevention, and invoicing.
Professional advisers such as lawyers and accountants, where necessary.
Authorities where required by law or to protect our rights.

5. International transfers

Some of our providers are located outside the EU/EEA, including in the United States. Where we transfer personal data outside the EU/EEA or UK, we rely on adequacy decisions where available, and otherwise on the European Commission's Standard Contractual Clauses (and UK equivalents) together with appropriate supplementary measures.

6. Retention

We keep account data for as long as your account exists, and for a limited period afterwards to handle disputes and comply with legal obligations. Uploaded videos and generated outputs are kept only as long as needed to provide the Service and may be deleted automatically after a project is closed or after a defined inactivity period. Logs and telemetry are kept for a limited security and debugging window. Billing records are kept for the period required by accounting law (typically 7 years in Sweden). After these periods we delete or anonymize personal data.

7. Your rights

Subject to applicable law (in particular the GDPR for users in the EU/EEA and UK), you have the right to:

Access the personal data we hold about you;
Rectify inaccurate or incomplete data;
Erase your data ("right to be forgotten");
Restrict or object to certain processing, including direct marketing;
Data portability;
Withdraw consent where processing is based on consent;
Lodge a complaint with your local data protection authority — in Sweden, the Integritetsskyddsmyndigheten (IMY).

To exercise your rights, contact support@cutwave.ai. We will respond within one month.

8. Security

We use appropriate technical and organizational measures to protect personal data, including encryption in transit, access controls, logging, and regular review of our security practices. No system is fully secure; you are responsible for keeping your account credentials confidential.

9. Cookies

We use cookies and similar technologies for essential functions (e.g. keeping you signed in), for analytics, and where applicable for marketing. Essential cookies are required for the Service to work. You can manage non-essential cookies via your browser settings or any cookie banner shown in the Service.

10. Children

The Service is not directed to children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, contact us and we will delete it.

11. Changes

We may update this Privacy Notice from time to time. We will post the updated version here and update the "Last updated" date above.

12. Contact

Westros Digital Retail AB, Slakterigatan 10, 721 32 Västerås, Sweden. Email: support@cutwave.ai.