Privacy Policy | KUKU剪

Last updated: October 22, 2026 · Version 1.1

The operator of KUKU剪 ("we", "us", or "our") respects your privacy. This Privacy Policy explains how we collect, use, store, share, and protect your personal information, and the rights you have.

This policy applies to the KUKU剪 website (kukucut.app), application, and related services (the "Service"). By using the Service, you confirm that you have read and understood this policy. Where required by law, we will obtain separate consent for sensitive personal information or cross-border transfers.

1. Who We Are and How to Contact Us

Operator: shihaoi
Address: Lanshan District, Linyi City, Shandong Province, China
Privacy and personal information requests: support@kukucut.app (please include "Privacy Request" in the subject line)
Response time: within 15 business days after receiving your request and verifying your identity

We have not appointed a dedicated data protection officer. If required by law, we will update this policy with the relevant details.

2. Information We Collect

2.1 Information you provide

Account information: email address, password (stored only as an irreversible hash), name or nickname, and optional avatar.
Verification and security information: email verification status, login attempts, and API keys (stored only as a hash or prefix).
Transaction information: plan name, amount, currency, order number, subscription ID, invoice ID, payment status, and billing period. Card numbers, expiry dates, security codes, and wallet accounts are handled by Waffo. We do not collect or store full payment card details.
User content: videos, audio, text, images, and subtitles you upload, as well as translations, voiceovers, and final videos generated by the Service; related file metadata such as file name, size, type, and upload time.
Communications: name, email address, and message submitted through the contact form; emails exchanged with customer support.
Report and moderation information: optional contact details, links, file names or IDs, reported account information, violation description, screenshots, proof of rights, and our review, enforcement, and appeal records.
Newsletter information: email address, subscription status, and unsubscribe records.

2.2 Information collected automatically

Device and network information: IP address, browser and device type, operating system, language, time zone, and request time.
Usage and log information: pages visited, features used, error logs, and performance and security logs used to protect the Service, diagnose problems, and prevent abuse.
Cookie and local storage information: see Section 5.

2.3 Information from third parties

Transaction, subscription, and refund status returned by our payment provider, Waffo;
Email delivery, bounce, and unsubscribe status returned by our email provider, Resend.

We do not purchase personal data from third parties, and we do not use your personal information for advertising profiles or cross-site behavioral tracking.

2.4 Information we do not collect

Precise location;
Contacts, SMS, or call records;
Biometric templates (such as facial recognition or voiceprint templates);
Full payment card numbers or payment passwords.

3. Purposes and Legal Bases

We process personal information only for the following purposes:

Providing and maintaining the Service (performance of contract): creating accounts, uploading and processing materials, generating subtitles/translations/voiceovers/final videos, storing files, and displaying results.
Payments, invoicing, refunds, and subscription management (performance of contract, legal obligation): payments are processed by Waffo, and we retain necessary transaction records.
Security and fraud prevention (legitimate interests, legal obligation): authentication, access control, log auditing, quotas, and abuse detection.
Content safety and violation handling (legitimate interests, legal obligation): receiving and verifying reports, reviewing suspected violations, handling copyright and trademark complaints, enforcing against violating accounts, and responding to regulators and law enforcement.
Customer support and service notices (performance of contract, legitimate interests): responding to inquiries, sending verification emails, billing notices, security alerts, and service change notices.
Product updates and marketing (consent): sending product news, feature updates, and offers. You can unsubscribe at any time.
Service improvement (legitimate interests): analyzing and optimizing features using aggregated or de-identified data.
Legal compliance and dispute handling (legal obligation, legitimate interests): responding to regulators, handling complaints, and establishing or exercising legal rights.

Under the laws of the People's Republic of China, we rely primarily on the bases of performance of contract, compliance with legal obligations, legitimate interests, and consent under the Personal Information Protection Law and related regulations.

Content you upload may contain sensitive personal information such as faces and voices. We process this information only to the extent necessary to provide speech recognition, translation, voiceover, and video synthesis services, and we apply strict security measures. Before uploading content that contains another person's face or voice, you must obtain that person's explicit consent.

We do not sell your personal information. We share it only in the following circumstances:

Service providers acting on our instructions, with confidentiality and security obligations:
- Cloudflare: website hosting, cloud database, object storage, caching, logging, and security;
- Resend: verification emails, transactional notices, contact form emails, and newsletters;
- Waffo Pancake: payment processing, Merchant of Record services, invoicing, taxes, and refunds;
- Feishu: internal purchase notifications to our team, which may include username, amount, order number, or session ID but not full payment details;
- Alibaba Cloud Bailian (DashScope): speech recognition;
- APIMart and Volcengine: subtitle translation, rewriting, and verification;
- MiniMax and ElevenLabs: speech synthesis;
- FFmpeg: audio/video composition and rendering (open-source component, not a generative AI model).
Payment provider: Waffo independently processes payments, invoicing, taxes, refunds, and payment disputes as Merchant of Record, and its privacy policy also applies. You can find its privacy information at waffo.ai.
Legal and security requirements: we may disclose necessary information to comply with laws, regulations, judicial or administrative requirements, or to protect the rights, property, and safety of you, us, or others.
Business transfers: in a merger, acquisition, reorganization, or asset transfer, we may transfer personal information under equivalent protections and will notify you.
With your consent: in other circumstances where you separately consent.

4.1 AI Models and Data Processed

As of October 22, 2026, we mainly use the following models:

Processing step	Provider	Model/component	Data processed
Speech recognition	Alibaba Cloud Bailian (DashScope)	`paraformer-v2`	Videos and audio you upload, and the extracted audio
Translation, rewriting, and verification	APIMart	`gpt-6.1-sol`	Transcripts, subtitle content, and necessary context
Backup translation	Volcengine	`doubao-seed-translation-250915`	Transcripts and subtitle content
Speech synthesis	MiniMax	`speech-2.8-turbo` (default), `speech-2.8-hd`	Translated text and voice samples
Optional speech synthesis	ElevenLabs	`eleven_v4_turbo`	Translated text and voice samples
Video composition and rendering	FFmpeg (open source)	—	Audio, video, subtitles, and rendering parameters

We provide these providers only with the data necessary for the relevant processing and require them to process it on our instructions and not for their own marketing or model training, except as required by law or with your separate consent. Model names, versions, and availability are controlled by the providers. We may change models due to provider updates, availability, price, or quality, and will update this policy and the model list. For more information about model use, see Section 10 of our Terms of Service.

5. Cookies and Similar Technologies

We use a small number of cookies and browser storage features to operate the Service:

Strictly necessary cookies: login sessions, authentication, security, and load balancing. Infrastructure providers such as Cloudflare may also set cookies necessary for security and performance. Disabling necessary cookies may prevent you from logging in.
Functional cookies and local storage: remembering your language preference, theme (dark/light), and sidebar state to improve your experience.
We do not use advertising cookies, and we do not run third-party analytics SDKs such as Google Analytics. We currently do not use third-party analytics or advertising tracking services.

You can delete or block cookies in your browser. Blocking necessary cookies may affect login and some features.

6. Data Security

We implement security measures appropriate to the risk, including:

TLS/HTTPS encryption in transit;
Irreversible hashing of passwords;
Least-privilege access controls for API keys and access tokens;
Limiting internal access and requiring confidentiality from service providers;
Security logging and periodic review;
If a personal information breach, tampering, or loss occurs, notifying you and reporting to regulators as required by law (generally within 72 hours of discovery where applicable).

No internet environment is completely secure. Please use a strong password, do not share your account or verification codes, and contact us immediately if you notice anything suspicious.

7. Retention Periods

We retain personal information only for as long as necessary for the purposes described above:

Account and profile: while your account is active; after you delete your account, we delete or anonymize it within 30 days.
User content and Output: until you delete the files or your account; after deletion, removed from active systems within 30 days, with residual backup and log copies retained for no more than 90 days.
Payment and transaction records: retained as required by law. For example, the E-commerce Law of the People's Republic of China requires transaction information to be retained for at least three years from completion of the transaction. Waffo retains payment data under its own policies.
Contact and support records: 12 months after the matter is resolved.
Report, moderation, and enforcement records: 3 years after resolution or the end of any appeal, to address repeat violations, appeals, disputes, and legal or regulatory requirements.
Security logs: generally no more than 90 days, or as determined by our cloud provider's log retention period.
Newsletter: until you unsubscribe; removed from marketing lists within 30 days after unsubscribe, with necessary unsubscribe records retained for compliance.

After the retention period, we delete or anonymize the information unless law requires otherwise.

8. Your Rights

To the extent permitted by applicable law, you have the right to:

Be informed about how we process your personal information;
Access and copy your personal information;
Correct or complete inaccurate or incomplete information;
Delete your personal information in circumstances provided by law;
Restrict or object to certain processing;
Withdraw consent at any time, without affecting the lawfulness of processing before withdrawal;
Delete your account under "Settings → Account" or by emailing support@kukucut.app;
Report illegal, violating, or infringing content and learn the outcome;
Data portability, receiving a structured, commonly used copy where applicable;
Complain to the Cyberspace Administration of China or another competent regulator.

Please submit requests to support@kukucut.app and cooperate with identity verification. We will respond within 15 business days. After account deletion, data and content may not be recoverable.

9. Cross-Border Transfers

We use global cloud and AI services, including Cloudflare, Resend, Waffo, and ElevenLabs, so your personal information may be stored or processed outside the People's Republic of China. Some providers (such as Alibaba Cloud Bailian, Volcengine, and MiniMax) process data within China; the actual location depends on the features you use and the relevant provider's configuration. We will:

Require overseas service providers to provide protections comparable to those in China through contracts, encryption, access controls, and other measures;
Fulfill obligations regarding notice, consent, security assessments, or standard contracts as required by law;
Obtain separate consent for cross-border transfers where required by law.

Personal information protection standards may differ between countries and regions. By using the Service and agreeing to this policy, you acknowledge and understand these cross-border processing arrangements. Where separate consent is required by law, we will obtain it from you.

10. Marketing Emails and Unsubscribing

When you register an account, we add your email address to our product update and marketing list. You can unsubscribe at any time by:

Clicking the unsubscribe link at the bottom of a marketing email;
Turning off marketing emails in your account settings;
Emailing support@kukucut.app.

Unsubscribing does not affect service-essential messages such as email verification, password reset, security alerts, billing, and subscription changes. We do not sell or rent your email address to third parties for their own marketing.

11. Minors

The Service is intended for adults aged 18 or older. We do not knowingly collect personal information from anyone under 18. If we become aware of such an account or data, we will delete the account and the information.

If you are under 18, please do not register for or use the Service. If you are a parent or guardian and believe a minor has provided personal information to us, contact support@kukucut.app and we will address it promptly.

12. Third-Party Links and Services

The Service may contain links to third-party websites, payment pages, or integrations. Those third parties have their own privacy policies, and we do not control their data practices. Please read their privacy policies before providing personal information.

13. Changes to This Policy

We may update this Privacy Policy and publish the updated version on this page. We will provide 15 days' advance notice of material changes through a website notice or email. After changes take effect, your continued use of the Service constitutes acceptance. If you do not agree, you may stop using the Service and delete your account.

14. Contact Us

Operator: shihaoi
Address: Lanshan District, Linyi City, Shandong Province, China
Email: support@kukucut.app
Content reports: support@kukucut.app (subject line "Content Report")
Response time: within 15 business days

If you are not satisfied with our response, or believe our processing violates applicable law, you may complain to a competent regulator.