Privacy Policy
Effective and last updated: 5 September 2026
This policy explains how Man Sarip, the developer and operator of Obiklip ("Obiklip", "we", "us"), handles personal data through the Obiklip website, desktop application, processing service and support.
Bahasa Melayu: Baca Dasar Privasi.
1. The short version
- Your source video is not uploaded to Obiklip or OpenAI.
- Projects, transcripts, clips, exports and settings are stored on your computer.
- When you request analysis, compressed audio and relevant transcript text are sent through Obiklip to OpenAI.
- We keep only the account, billing and job records needed to run the service.
- The website has no advertising, analytics or tracking cookies.
- We do not sell personal data or use your content to train our own models.
2. Data we process
| Account | Your email address, account identifier, password hash, verification status, account status and account dates. We never store the password itself. |
|---|---|
| Authentication | Hashed session, verification and password-reset tokens, together with their creation, expiry, use and revocation dates. The usable session token stays on your computer. |
| Trial and security | A keyed, one-way code derived from a normalised email identity records whether its one free trial was claimed. Short-lived one-way codes derived from an IP address or account identifier are held in memory to limit abuse. |
| Minutes and purchases | Your balance and ledger; quotes; offer, currency and amount; payment-provider order and product identifiers; purchase and refund status; and relevant dates. Obiklip does not receive your card number. |
| Analysis jobs | A source-content fingerprint, duration, charged or reserved minutes, job status, limited error details and timestamps. We do not store the source filename, transcript, clips or titles in the cloud database. |
| Processing content | Compressed audio chunks; transcript text; spoken-language choice; optional instructions; searches; and text submitted for title suggestions. This content is handled only to answer the request and is not stored in Obiklip's cloud database. |
| Support | Your email address, messages, attachments and the information needed to answer a support, billing, privacy or legal request. Please do not send a source video unless we specifically ask for it. |
| Operational data | API logs contain request method, path, response status, duration and operational errors. Query strings, passwords, session tokens and recording content are not intentionally logged. |
3. Where data comes from
We receive data directly from you when you register, submit content, buy minutes or contact support; automatically from the application and service when you sign in or run a job; and from Lemon Squeezy when it confirms a purchase or refund. Obiklip generates account, security, credit and job records from those activities.
4. Data kept on your computer
Obiklip stores the source path, filename, optional source link, content fingerprint, duration, language, transcript, clips, titles, edits, export records, cached results and settings locally. A source opened from disk stays where it is and is not copied. A source fetched from a link is downloaded directly from that website to the folder you choose.
Obiklip creates temporary local audio and thumbnails. Temporary audio is removed after a successful analysis. After an interrupted or failed run, it may remain in the app's cache until that cache is cleared. Deleting a project removes its local database records but does not delete the source video or exported clips. Uninstalling the app may leave its data folder and exports behind.
5. Why we use data
We process data only as reasonably needed to:
- create, verify, secure and support your account;
- transcribe speech and provide clip, search and title suggestions;
- manage processing minutes, purchases, refunds and failed jobs;
- provide support and communicate essential service information;
- prevent duplicate trials, fraud, abuse and security incidents;
- diagnose faults, protect the service and enforce our terms; and
- comply with accounting, tax, consumer-protection and other legal duties.
Account and payment data is required to provide paid processing. Content is optional, but Obiklip cannot analyse a recording without processing its audio and transcript. Where consent is required, you may withdraw it, but this does not affect earlier lawful processing and may prevent us from providing the affected feature.
6. AI processing
When you select Analyze Video, Obiklip extracts compressed mono audio on your computer. Audio chunks pass through the Obiklip API to OpenAI for transcription. Relevant transcript text, and any instructions or search text you provide, is later sent to OpenAI for the requested suggestions. Responses return to your local project.
Obiklip does not retain this audio or text in its cloud database and does not use it to train its own models. OpenAI states that API inputs and outputs are not used to train its models unless the API customer opts in; Obiklip does not opt in. Under OpenAI's published standard controls on the date above, audio transcription has no abuse-monitoring or application-state retention, while text chat inputs and outputs may be kept for up to 30 days for abuse monitoring, or longer where law requires. See OpenAI's API data controls.
7. Service providers and disclosures
| OpenAI | Processes audio and text needed for the AI feature you request. |
|---|---|
| Resend | Delivers verification, password-reset and other operational email. |
| Lemon Squeezy | Acts as merchant of record, operates checkout, collects payment and tax details, handles receipts and refunds, and sends Obiklip order information. |
| DigitalOcean | Hosts the Obiklip website, API and account database. |
| GitHub | Hosts application installers and receives ordinary download-request data. |
We may also disclose information to professional advisers, authorities or another business where reasonably necessary to comply with law, protect rights or security, resolve a dispute, or complete a business transfer. We do not disclose your content to advertisers or data brokers.
8. International processing
These providers may process data outside Malaysia, including in the United States and other countries where they or their subprocessors operate. We take reasonable steps to use providers and contractual or other safeguards that provide protection comparable to applicable Malaysian requirements. By asking us to process content or complete a purchase, you acknowledge the transfers necessary to fulfil that request.
9. Retention
- Local project data remains until you delete it from your computer.
- Active sessions expire after 90 days. Expired sessions are removed; revoked sessions and used or expired email tokens are normally removed after a short housekeeping period.
- Account, credit, job and purchase records remain while the account is open.
- If the account is deleted, linked cloud records are removed unless retention is reasonably required by law, dispute, fraud-prevention or security needs. A one-way trial-claim code may remain for the life of the trial programme so deletion cannot create another free trial.
- Deleted database data may remain briefly in restricted backups until the ordinary backup cycle replaces it. Backups are used only for recovery.
- Support correspondence is kept only as long as needed to resolve the request and meet legal obligations.
10. Security
We use measures appropriate to the data we hold, including encrypted network connections, restricted database access, password hashing, hashed server-side tokens, signed payment webhooks, rate limits and restricted backups. No system is completely secure. Contact us promptly if you believe your account or data has been compromised.
11. Your choices and rights
Subject to applicable law, you may ask to access or correct your personal data, withdraw consent, object to or limit certain processing, or delete your account. We may ask you to verify control of the account email. Some requests may be limited where data must be retained by law or for a legal claim, security or fraud prevention.
Email support@obiklip.com. You may also lodge a complaint with Malaysia's Personal Data Protection Commissioner. Obiklip sends no marketing email, so there is no marketing list to opt out of.
12. Automated decisions
Automated systems suggest clips and titles, but you decide what to edit, export or publish. Email rules and one-way identity matching may reject a disposable address or withhold a duplicate free trial. Contact support if you believe that decision is wrong.
13. Children
Obiklip is for people aged 18 or older. We do not knowingly collect account data from anyone under 18. Contact us if you believe a minor has created an account.
14. Changes and contact
We may update this policy when the product, providers or law changes. The date above will change, and material changes will be brought to account holders' attention where reasonably practicable.
The data controller is Man Sarip, developer and operator of Obiklip. Privacy and data requests: support@obiklip.com.