Privacy Policy
Effective date: July 6, 2026
1. Overview
Topping (“we”, “us”) takes your privacy seriously and complies with applicable privacy laws in connection with the service provided at topping.video. This policy explains what information we collect and how we use and protect it. Privacy inquiries: hello@topping.video
2. Information we collect
- Account information: email, name, password (stored hashed with bcrypt), and profile image. If you sign up with Google, we receive your Google profile (email, name, profile picture, account identifier).
- Service data: files you upload and their metadata (file name, size, type — files are stored in Cloudflare R2), AI generation prompts, generation parameters and output URLs, YouTube source URLs you submit, and project data.
- Billing data: Polar customer and subscription IDs, plan and billing cycle information. Payment details such as card numbers are collected and held directly by our payment provider Polar — we never store them.
- Email verification and password reset tokens (kept briefly, then destroyed).
- Cookies: see section 9.
3. How we use information
- Member management: signup, authentication, and login
- Providing the service: video editing, rendering, and AI generation
- Managing subscriptions, payments, and credits
- Sending transactional email such as verification and password reset messages
- Security, fraud prevention, and service reliability
4. Retention
When you delete your account, we destroy your personal information without delay, except where the law requires us to retain records:
- Records of contracts, withdrawals, payments, and supply of goods or services: 5 years (Korean e-commerce law)
- Records of consumer complaints and dispute resolution: 3 years (Korean e-commerce law)
- Verification and password reset tokens: destroyed immediately once used or expired
5. Third-party disclosure
We do not sell or provide your personal information to third parties.
6. Processors and international transfer
We use the following overseas service providers to operate the service, which may involve transferring personal information abroad. Data is retained until the processing agreement ends or you delete your account.
| Processor | Data | Purpose |
|---|---|---|
| Supabase | Account information, project and service data | Database hosting |
| Cloudflare | Uploaded files, AI prompts | File storage (R2) and AI generation relay (prompts are sent to AI model providers) |
| AWS (Amazon Web Services) | Project data, video files | Video rendering and YouTube import processing |
| Polar | Email, payment information | Subscription payment processing (card details are collected and held directly by Polar) |
| Resend | Email address | Transactional email (verification, password reset, and similar) |
| Pexels | Stock media search queries | Stock image and video search |
| Usage statistics (cookie identifiers, approximate location, device and browser information) | Service usage analytics (Google Analytics — only with your analytics cookie consent) | |
| Crisp | Email, name, chat conversation content, plan information | Customer support chat widget |
7. Destruction of personal information
Personal information is destroyed without delay once its retention period ends or its purpose is fulfilled. Electronic records are deleted using methods that prevent recovery.
8. Your rights
You may request access to, correction or deletion of, or suspension of the processing of your personal information at any time — directly in your account settings or by contacting hello@topping.video. We will act on requests without delay.
9. Cookies
The service uses the following cookies:
- NEXT_LOCALE (essential): stores your language preference (1 year)
- Sign-in cookies (Auth.js, essential): keep you signed in, protect against CSRF attacks and complete social sign-in
- topping_consent (essential): stores your cookie consent choices (1 year)
- crisp-client/* (essential, Crisp): keeps your support chat session and message history across pages and visits (6 months, renewed on return visits)
- topping_ref (marketing): stores the invite code when you visit through a referral link, so the inviter's reward can be attributed at sign-up (30 days)
- _ga, _ga_* (analytics, Google Analytics): usage statistics (up to 2 years)
Analytics and marketing cookies are used only if you agree in the cookie banner, and you can change or withdraw your consent at any time via “Cookie settings” in the page footer. You can also block cookies in your browser settings, but some features such as login may not work.
10. Security
- Passwords stored with one-way hashing (bcrypt)
- Database access restricted to the server side (no direct browser access)
- TLS encryption in transit
- Signed temporary URLs (presigned URLs) for file uploads
- Signature verification on payment webhooks
11. Children
The service is not directed to children under 14, and we do not knowingly collect personal information from children under 14.
12. Contact
For privacy questions, complaints, or remedies, contact hello@topping.video.
13. Changes
If this policy changes, we will announce it on this page, with advance notice for material changes. This policy takes effect on July 6, 2026.