Privacy policy

1. Who is responsible

MUSICA & ENTRETENIMIENTO SRL, Montevideo, Uruguay (“TONTRIA”, “we”) is responsible for the personal data processed through TONTRIA Clips. Contact: tontria.ai@gmail.com.

2. What we collect

• Account: name, email, password (stored only as a secure hash), phone, country, date of birth and what you do in music, which you give us when you sign up.
• Your content: the videos, audio, images, links and texts you upload or provide, and the files we create from them.
• Payments: plan, purchases and payment status. Card details go directly to Creem; we never see or store them.
• Technical data: IP address, browser and device, and logs needed to run the Service, prevent abuse and keep it secure.

3. Why we use it

To provide the Service you ask for (process your content and create your exports), run your account, plan and payments, answer you, send service emails (for example to reset your password or tell you a video is ready), prevent fraud and abuse, and meet legal obligations. Where the law requires a legal basis, we rely on the contract with you, our legitimate interest in keeping the Service secure, your consent (for example for news emails, which you can turn off at any time) and legal obligations. We do not use your content to train AI models and we do not sell personal data.

4. Providers that process data for us

• Hetzner (Germany): the servers where the app and your files live.
• Cloudflare: network, security and file storage (R2) for processing and encrypted backups; also cookieless, aggregated visit statistics on this website.
• Modal: GPU processing (transcription, reframing and rendering of your videos).
• Anthropic: AI analysis of transcripts and texts (choosing moments, writing titles and descriptions).
• Resend: sending emails.
• Creem: payments, as Merchant of Record.
• Google, TikTok, Meta (Instagram and Facebook), LinkedIn and X: sign in with Google and publishing to the accounts you connect, only when you use them.
• Meta (Facebook and Instagram), for ad measurement: only if you accept it in the cookie notice. When you visit the website, create your account, open a checkout, export your first clip or pay, we tell Meta through its pixel and its Conversions API, together with your email, country and account ID in hashed form (SHA-256), your IP address, your browser and Meta’s cookies. We use it only to learn which ads work; we never send Meta your content.

They only use the data to provide their service to us, under agreements that protect it. Some of them process data outside your country, including in the United States; in those cases we rely on the safeguards the law provides, such as standard contractual clauses.

5. How long we keep it

Your projects and files stay while your account exists, until you delete them. Temporary copies made for processing are deleted automatically. When you delete your account, we delete your account data, projects, files, fonts and logos from our servers right away, and from encrypted backups within 30 days. We keep, without your account, the records of credits and payments that tax and accounting law requires, and minimal anti-abuse records.

6. Your rights

You can access and correct your data in My account, download your files, and delete your account and everything in it from the app (My account → Delete account). You can also ask us for a copy of your data, object to or restrict some processing, or complain to your data protection authority. Write to tontria.ai@gmail.com; we answer within 30 days.

7. Cookies

We use essential cookies: the one that keeps you logged in, a short-lived one when you sign in with Google, one that remembers which campaign or invitation brought you until you create your account, and the one that stores your answer to the cookie notice. We also save small preferences in your browser, such as your language. Only if you accept, the Meta (Facebook and Instagram) pixel adds its own cookies (_fbp and _fbc) to measure our ads; if you reject, it is not loaded and we send nothing to Meta. If you arrive from a Meta ad, we keep the click identifier (fbclid) with your account’s origin, as we do with campaigns. You can change your answer at any time from “Cookies” at the bottom of the website.

8. Security

Connections are encrypted, passwords are stored as a secure hash, access to your projects is limited to your account and team, and backups are encrypted.

9. Children

The Service is not for children under 13.

10. Changes

If we make important changes to this policy, we will tell you in the app or by email before they apply.

11. Connected social accounts

If you connect YouTube, TikTok, Instagram, a Facebook Page, LinkedIn or X to publish your clips, we receive only what that platform gives us for that purpose (the account’s ID, name, username and picture, and permission to publish the videos you choose), store the access permission encrypted, and use it only to publish what you send or schedule. We never post on our own, and we don’t read your messages or followers. You can disconnect at any time from Posts; we then delete the permission and the account’s details. TONTRIA’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. The TONTRIA privacy policy, which covers every TONTRIA product, explains what each platform shares with us, and data deletion explains how to remove your data.

See also the terms of service and the refund policy.