Legal

Privacy Policy

What personal information ZinCut collects, why, and who it's shared with.

Last updated: August 25, 2026

This page covers what ZinCut ("we") collects when you use the product, why, and who it's shared with — for anyone who visits our site or creates an account. For what cookies specifically are set, see the Cookie Policy.

Information we collect

  • Account information — your email address, which is the only account field we store, whether you sign up with a password or via Google or Facebook. If you sign in with Google or Facebook, those providers briefly share your name and profile picture with us as part of that sign-in, but we don't save them beyond your email address.
  • Content you upload and generate — the photos and videos you upload to a tool, any text prompts you type to guide a generation, and the results ZinCut generates from them.
  • Billing information — your plan, subscription status, and a record of payments and credit top-ups. Card and e-wallet details are handled entirely by Midtrans; we only ever see the transaction outcome, not your payment credentials.
  • Usage information — which tools you use, your credit balance and history, and general activity timestamps, so the product can enforce plan limits and show you your own project history.
  • Account notifications — system-generated alerts tied to your account or billing, like a failed payment, a plan change, or a top-up expiry reminder.

We don't request or collect your device's camera, microphone, or location, and we don't collect device advertising identifiers.

How we use it

Every category above is used strictly for a specific, stated purpose — never a general catch-all:

  • Account information — creating your account and signing you in.
  • Content you upload and generate — producing the specific result you asked for. We don't use your uploads to train AI models beyond generating that result.
  • Billing information — processing payments and enforcing your plan's limits correctly.
  • Usage information — tracking and charging credits correctly, and keeping your project history available.
  • Account notifications — keeping you informed about events that affect your account.

We don't sell your information, and we don't use it for advertising — ZinCut doesn't run any ads or analytics/tracking scripts at all.

Tracking

ZinCut does not track you: we don't use advertising SDKs or ad networks, we don't share your data with data brokers, and we don't combine your ZinCut data with data from other companies' apps or sites to build an advertising profile. If we ever build a mobile app, we expect this to mean no App Tracking Transparency prompt is needed — but that will be confirmed against the mobile app's actual code at the time, since a mobile build could introduce SDKs (like crash reporting or push notifications) that aren't part of the web app today.

Who we share it with

We don't sell or rent your data. It's only shared with the service providers that make the product work, and each only receives what it needs to do its job:

ProviderWhat for
SupabaseHosts your account record and signs you in — including via Google or Facebook if you choose to sign in that way instead of email/password.
Cloudflare (R2 storage)Stores the photos and videos you upload, and the results ZinCut generates from them.
fal.aiRuns the AI models. Your uploaded photo or video, and any prompt you type, is sent to fal.ai only to generate the specific result you requested.
MidtransProcesses subscription payments and credit top-ups. ZinCut never sees or stores your full card number — Midtrans handles that directly.
GoogleOnly involved if you choose "Continue with Google" — handles that sign-in and shares your Google account's basic profile info with us instead of a password.
FacebookOnly involved if you choose "Continue with Facebook" — handles that sign-in and shares your Facebook account's basic profile info with us instead of a password.

None of these providers are permitted to use your data for their own advertising purposes — they process it solely to provide their service to us.

International data transfers

Because the providers above operate internationally, your information may be processed outside your own country as part of using the service. Where required, we rely on appropriate safeguards — such as our providers' own standard contractual protections — for data transferred this way.

How long we keep it

Your generated photos and videos are kept for as long as your plan's retention window (3 days on Free, 30 on Pro, 60 on Max, 90 on Business), then automatically deleted — we'll notify you before that happens so you can download anything you want to keep. Files uploaded into the video editor before a generation completes are deleted after 3 days regardless of plan. Your account information is kept for as long as your account exists. If you delete your account, billing and payment records are kept without a link to your identity, for standard accounting purposes.

Your rights and choices

  • Most account details are read-only today — Settings doesn't currently have editable profile fields. Email us (below) to update anything.
  • Request a copy, correction, or restriction of your data — email support@zincut.com and we'll help, consistent with applicable law.
  • Delete your account directly from Settings — see below.

Account deletion

You can permanently delete your account any time from Settings → Delete Account — no need to contact support first. This immediately revokes your login, cancels any active subscription, and deletes your profile, projects, and their files, including from storage. Payment records are kept without a link to your deleted account, which is standard practice for accounting purposes. This can't be undone.

Children's privacy

ZinCut isn't directed at children, and our Terms of Use require users to be at least 13 years old. We don't currently verify age at sign-up beyond this requirement, and we don't knowingly collect information from anyone under 13. If we learn we have, we'll delete it — parents or guardians who believe a child has provided us data should contact us below.

Security

Your connection to ZinCut is encrypted, and access to your data is restricted to what the product needs to function. No method of storing or transmitting data online is perfectly secure, but we take reasonable steps to protect your information.

Changes to this policy

If how we collect or use your information changes meaningfully, we'll update this page and the date above.

Questions?

Reach out to support@zincut.com and we'll help.