Effective May 12, 2026
Privacy Policy
How CutAgent handles account, billing, desktop, AI, transcript, analytics, and support data.
Controller
Jindřich Tilkovský, IČO: 29512701, Klášterského 193, Bezděkovské Předměstí, 34401 Domažlice, Czech Republic is the controller for CutAgent account, billing, product, support, website, and marketing data unless a separate written agreement says otherwise.
Contact support@cutagent.ai for support and hey@cutagent.ai for privacy requests. Security reports should be sent to hey@cutagent.ai. If you believe your data protection rights have been violated, you may lodge a complaint with the Czech Office for Personal Data Protection or another competent EU supervisory authority.
Data we process
We process account details, email addresses, authentication data, billing identifiers, subscription state, invoices, desktop authorization tokens, app version, platform, session metadata, usage counters, usage events, support messages, security reports, cookie consent choices, account privacy preferences, and marketing email preferences.
We process necessary diagnostics such as incident events, alert fingerprints, provider status codes, error codes, updater status, crash or panic fingerprints, stack traces, app version, platform, and delivery status for operational alerts. We design this telemetry to avoid prompts, media, project files, API keys, tokens, full local file paths, and unrelated user content by default.
When you use hosted AI or speech features, we may process prompts, project context, attachment summaries, file metadata, transcript text, tool inputs and outputs, DaVinci Resolve command results, verifier reports, speech audio, rendered transcript audio, and generated artifacts needed to provide the workflow.
If you opt in to account-level product analytics and AI diagnostics, analytics may include product usage, session replay, hosted LLM usage, prompts, model outputs, tool and debug payloads, and related diagnostics.
When workflows run locally in the desktop app, project and media processing may remain on your device unless you use hosted features, account sync, telemetry, support, or other cloud-connected capabilities.
Why and legal bases
We process data to provide and secure CutAgent, authenticate users, enforce subscriptions and usage limits, process payments, run hosted AI and speech features, troubleshoot errors, respond to support and security requests, improve reliability, prevent abuse, and comply with legal obligations.
For users in the European Economic Area, account, authentication, subscription, desktop authorization, and requested hosted workflows are processed to perform our contract with you. Billing, invoice, tax, accounting, and payment records are processed to perform the contract and comply with legal obligations.
Security, abuse prevention, fraud prevention, service reliability, debugging, and product integrity are processed based on CutAgent's legitimate interests. Website analytics cookies, account-level product analytics and AI diagnostics, session replay, hosted LLM content capture, and marketing emails are processed based on consent. Support, privacy requests, and security reports are processed based on legitimate interests, legal obligations, and, where applicable, performance of a contract.
AI providers and training
CutAgent may route hosted AI, speech, transcript, and verification requests to configured third-party providers. Request payloads are limited to what is reasonably needed for the requested workflow.
CutAgent does not intentionally use your private projects, prompts, media, transcripts, or outputs to train general-purpose AI models. Third-party provider handling is governed by the relevant provider terms, data processing commitments, and product settings available to CutAgent.
Subprocessors
CutAgent shares personal data only with providers needed to operate the service, including hosting, authentication, database, billing, optional analytics, AI, speech/transcription, email, support, security, release hosting, and infrastructure providers. We do not sell personal data.
Current provider categories include Supabase, Stripe, deployment hosting, PostHog where enabled, AI providers, speech/transcription providers, email and alert delivery providers, GitHub for source code, CI/CD, and security scanning, and Cloudflare R2 / updates.cutagent.ai for release hosting and desktop update artifact distribution. GitHub is not intentionally used for customer project media, prompts, transcripts, hosted AI workflow content, or desktop update artifact distribution.
International transfers
Some providers may process personal data outside the European Economic Area, including in the United States. Where required, we rely on appropriate safeguards such as data processing agreements, EU Standard Contractual Clauses, transfer impact assessments, regional processing options, and technical and organizational measures.
Retention
Account and subscription records are kept while your account is active and for a reasonable period after closure. Billing, invoice, tax, and accounting records are kept for the period required by applicable law.
Security, abuse-prevention, fraud-prevention, service reliability, incident telemetry, alert delivery records, and audit logs are kept as needed to protect CutAgent, investigate misuse, resolve disputes, and enforce terms. Support, privacy request, and security report records are kept as needed to resolve the request and maintain an audit trail.
Hosted workflow data may be retained for the requested workflow, troubleshooting, abuse prevention, auditability, product operation, billing, or legal purposes, then deleted or minimized when no longer needed. Local desktop files remain under your control unless uploaded or sent through hosted features.
Your rights
Depending on your location, you may have rights to access, correct, delete, restrict, port, or object to certain processing of your personal data. Where processing is based on consent, you may withdraw consent at any time without affecting processing that occurred before withdrawal.
You may also lodge a complaint with the Czech Office for Personal Data Protection or another competent data protection authority.
Send privacy requests to hey@cutagent.ai. We may retain limited records where required for billing, security, legal, or abuse-prevention purposes.
Automated decision-making
CutAgent does not use personal data for solely automated decisions that produce legal or similarly significant effects for users. AI-assisted editing suggestions, tool plans, transcripts, and workflow outputs support user-requested product functionality and should be reviewed by the user before reliance.
Children
CutAgent is not intended for children under 16. Do not create an account or use the service if you are not old enough to consent to personal data processing in your country.