Privacy Policy

Introduction

This Privacy Policy explains what information CReaper collects, how it is used, who it is shared with and how long it is kept. It applies to the CReaper desktop application, its server and the related website. It describes the Service as it currently operates; much of CReaper's processing takes place on your own computer.

Information we collect

• Account information: when you sign in with Discord, we receive only your basic profile (the "identify" permission): your Discord user ID, username, display name and avatar. We do not receive your email address, server list or messages. We also record when your account was created and when you first and last signed in.
• Session information: hashed copies of your sign-in session tokens, the device each session belongs to and when it was last used. Discord's own access token is revoked immediately after sign-in and is never stored.
• Device identifier: a hashed device ID used for licensing, described in the next section.
• Usage and billing records: for each run that uses tokens, the amount, its status (reserved, charged or refunded), the feature used and the time. Token grants record the amount, who granted them, the reason and the time.
• Purchase requests: the token amount, price, reference code and status of requests created in the Token Store, and which staff member credited them.
• Content you choose to send: the information described under "Video and transcript processing" below.
• Policy acknowledgements: which version of these documents you acknowledged, and when.

Device identifier

CReaper generates a device identifier to enforce licensing and prevent license abuse. It is a SHA-256 hash of your Windows installation identifier (MachineGuid). If that identifier cannot be read, a hash derived from your computer name and network adapter address is used instead. Only the hash is transmitted; the underlying values never leave your computer.

The device identifier is stored with your sessions, licenses and registered devices. It is used only to verify that a license is used on the devices registered to it, and not for advertising or tracking.

If you connect the app to the CReaper website, we also store that device's name, platform, app version, last-seen time, a hashed copy of its connection secret, and the jobs you send to it from the website (the video link and your chosen settings).

Video and transcript processing

Videos are processed on your computer. This includes downloading, trimming, moment analysis and rendering. CReaper does not upload your source videos to its servers. Transcripts of the source video are obtained by your computer from the video's own captions or generated locally by an on-device speech model.

Depending on the features you use, the following is sent to our server:

• Moment review: the words spoken in the strongest candidate moments and the sentence or two just before each (short excerpts, not the full transcript), with their times, CReaper's scores and the kind of video CReaper recognised (for example gaming or podcast), so that they can be reviewed by AI. The video's tags and description are only read on your PC, to recognise the kind of video.
• Pricing: the video's length and the time of the latest moment used, so the run can be priced.
• Captions: when captions are turned on, the audio of each finished clip (not the source video) is sent to our server and transcribed by a third-party speech recognition service to time the caption words. Our server deletes its copy of the audio as soon as the captions are made.
• Campaign rules in Auto Clipper: the full transcript and the text of the requirements file you upload, so the rules can be checked.
• Saved Highlights: the clip's title, link, times, scores, descriptions and transcript, kept for the number of days you select.

How we use information

• to authenticate you and keep you signed in;
• to provide the features you request, including AI review of moments;
• to calculate, reserve, charge and refund tokens, and to process purchase requests;
• to enforce licensing and device limits and prevent abuse;
• to show your own rank on the Statistics page, based on the number of completed runs recorded for each account (only your own position is shown);
• to diagnose problems and keep the Service reliable and secure.

The Statistics page itself is computed from a record stored only on your computer and is not transmitted.

AI processing

To review moments and time captions, our server sends the text and clip audio described above to third-party AI service providers. These requests contain video content only, not your Discord account or device identifier. The providers process this text to return a result and handle it under their own terms and privacy policies.

To avoid repeating identical requests, AI evaluations of moment text may be held in server memory for up to 24 hours.

If you use your own AI service key, it is stored encrypted on your computer and sent with your requests so that they use your key. Our server uses it only for those requests and does not retain it.

If AI services are unavailable, CReaper completes the run using its own analysis on your computer.

Service providers and disclosure

We use the following service providers to operate CReaper:

• Discord: sign-in, community, support and purchase tickets;
• cloud database and hosting providers, which store account, token and purchase records and run the CReaper server;
• third-party AI service providers, for moment review and caption timing only.

We do not sell your personal information. We may disclose information where required by law.

Payments are arranged with staff through Discord tickets. The CReaper app and server do not receive or store your GCash or banking details.

Retention

• Account, license, device and token records: for as long as your account exists.
• Auto Clipper job records (status, results and technical diagnostics): 48 hours.
• Saved Highlights: for the number of days you select when saving.
• AI evaluation cache: up to 24 hours, in memory only.
• Server logs: kept by our hosting provider for troubleshooting, with secret keys removed.
• Information stored on your computer (settings, caches, debug log, statistics): until you clear it or uninstall CReaper.

Security

Your sign-in token and any personal API key are encrypted on your computer using Windows data protection, so only your Windows user account can read them. Session tokens and device secrets are stored on our server only in hashed form, and connections to the server are encrypted. No system is completely secure, but we work to protect the information we hold.

Your rights and choices

Under the Data Privacy Act of 2012 (Republic Act No. 10173), you may request access to, correction of, or deletion of your personal information. To make a request, please open a ticket in #🤝ㆍ𝖡𝖴𝖸.

You can also sign out at any time, delete saved Highlights, and clear local caches from Settings > Storage.

Changes to this Policy

We will update this Policy when our practices change. If a change is significant, the app will ask you to review the updated Policy before you continue.

Contact

For privacy questions or requests, please open a ticket in #🤝ㆍ𝖡𝖴𝖸 in the official CReaper Discord server.