Privacy policy

1. What we collect

• Account data: your email address and a salted hash of your password (Argon2id). We never store the plaintext password.
• Instance metadata you configure: instance name, GPU model label, hourly price, currency, billing mode, dedicated-GPU flag and GPU count.
• Job events reported by your collector: prompt ID, status transitions (queued / running / success / failed / interrupted), UTC timestamps, execution duration, error type (exception class name only), workflow hash (SHA-256 of the workflow structure) and an optional project tag.
• Your manual inputs: project names and budgets, quality marks (usable / unusable), alert thresholds, and payment status records when you pay via PayPal.

2. What we do not collect by default

The collector is read-only and deliberately minimal. It does not upload:

• Full prompt text or node parameter values
• Generated images, videos or any media files
• The raw workflow JSON (only a local SHA-256 hash is sent)
• Your ComfyUI credentials, API keys or authentication tokens
• Filesystem paths beyond what ComfyUI itself reports in job events

3. How we use your data

• To compute cost estimates, budgets and alerts for your own account.
• To keep the collector connection authenticated (tokens are stored as hashes only).
• To process payments through PayPal when you upgrade to Pro.
• We do not sell your data or use it for advertising. We may publish aggregate, anonymized statistics about product usage; individual job records are never shared with other users.

4. Cookies

We use two strictly functional cookies: a session cookie (clipcost_session, HttpOnly) to keep you logged in, and a CSRF token cookie (clipcost_xsrf) for request forgery protection. We do not use tracking or advertising cookies.

5. Third parties

• PayPal: when you pay for Pro, your order is processed by PayPal. We store the resulting payment status; card details are handled by PayPal, not us.
• Email delivery: optional email alerts will use a transactional email provider once configured. Until then, all alerts are in-app only and no emails are sent.

6. Retention and deletion

Your data is kept while your account exists. Free-plan job history is limited to the most recent 100 jobs; older records are removed automatically. When you delete your account (Settings → Delete my account), we delete your account, instances, tokens, projects, jobs and payment records. Deletion completes within a few days including backups.

7. Contact

Questions or data-access requests: hello@clipcost.app