Effective date: January 1, 2025Last updated: April 30, 2026
This Privacy Policy explains how Florenzo Technologies ('we', 'us', 'our') collects, uses, and protects information when you use LyrClip (lyrclip.com). We take your privacy seriously — your video content is private, encrypted, and never shared with third parties without your explicit consent. This policy has been updated to reflect our social media integration features and to comply with Google, Meta, and TikTok platform API requirements.

1. Introduction

LyrClip is a video clip extraction and content management platform operated by Florenzo Technologies, a company registered in Nigeria. This Privacy Policy applies to all users of lyrclip.com and any associated mobile applications or services.

By using LyrClip, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use our services.

For questions about this policy, contact us at: privacy@lyrclip.com

2. Information We Collect

Information you provide directly:

  • Account registration: name, email address, church or organisation name
  • Payment information: processed by Stripe — we do not store card details
  • Video files you upload to the platform
  • Transcript edits or annotations you make
  • Brand profile information: church name, logo, colour preferences

Information collected automatically:

  • Log data: IP address, browser type, device type, pages visited, time spent
  • Usage data: which features you use, clips created, upload frequency
  • Cookies and similar tracking technologies (see Section 11)

Information from social media accounts (when connected):

When you connect a social media account (YouTube, Facebook/Instagram, TikTok), we receive only the data necessary to perform the actions you explicitly authorise, including your account name, profile photo, and channel/page identifiers. We do not receive your social media passwords.

3. How We Use Your Data

We use the information we collect to:

  • Provide, operate, and improve the LyrClip service
  • Process your video uploads and generate AI-powered transcripts
  • Render branded video clips via our cloud rendering pipeline
  • Publish or schedule clips to connected social media accounts when you trigger this action
  • Authenticate your identity and manage your account
  • Process payments and send billing communications
  • Send product updates, feature announcements, and support messages (you may opt out at any time)
  • Respond to support requests
  • Detect and prevent fraud or abuse
  • Comply with legal obligations

We do not sell your personal data to any third party.

4. Social Media API Permissions

Important for connected accounts:LyrClip only accesses your social media accounts to perform actions you explicitly trigger — such as clicking "Post to YouTube" or enabling "Auto-Reply." We never post, comment, or take any action on your behalf without your direct instruction.

OAuth permissions we request:

When you connect a social media platform, LyrClip requests the minimum permissions required to deliver the features you enable. These may include:

  • YouTube: youtube.upload (upload video clips), youtube.readonly (read channel info), youtube.force-ssl (manage comments when the Auto-Reply feature is enabled)
  • Facebook / Instagram: pages_manage_posts (publish content to your Page), instagram_content_publish (publish clips to Instagram), instagram_manage_comments (respond to comments when Auto-Reply is enabled)
  • TikTok: video.upload (upload clips), user.info.basic (identify the connected account)

How we use these permissions:

  • Upload permission: Used solely to publish a rendered clip to your channel or page when you click a publish action within LyrClip.
  • Comment management permission: Used solely to post user-defined automated replies to new comments that match keywords you configure. This feature is opt-in and can be disabled at any time.
  • Read-only permission: Used to display channel/page information inside the LyrClip dashboard so you can select the correct destination account.

OAuth token storage:

  • We store encrypted OAuth access and refresh tokens in our Supabase database to maintain your connection between sessions.
  • We never store your social media passwords.
  • Tokens are encrypted at rest using AES-256 and are accessible only by the server-side process performing the action on your behalf.
  • You can revoke access at any time from your LyrClip account settings or directly from the social platform's connected apps page.
  • Revoking access immediately invalidates the stored token and LyrClip will no longer be able to act on that account.

5. Media Processing & Audio Extraction

Technical pipeline disclosure:

When you upload a video to LyrClip, our system performs the following processing steps:

  • The original video file is transferred to Amazon S3 cloud storage over an encrypted connection.
  • An audio-only version is extracted from the video using FFmpeg running on AWS Lambda. This audio file is used exclusively for transcription.
  • The extracted audio is sent to OpenAI's Whisper API to generate a word-level transcript with timestamps.
  • When you export a clip, our Remotion Lambda rendering pipeline processes the original video file to produce a branded 9:16 vertical clip.
  • Rendered clips are uploaded to Supabase Storage and made available for download.

Third-party infrastructure:

  • Video and audio files are stored in Amazon S3 buckets in encrypted form.
  • Audio transcription is handled by OpenAI's Whisper API. Audio sent to OpenAI is governed by OpenAI's API data usage policy — OpenAI does not train on API data by default.
  • Video rendering is performed by AWS Lambda functions using the Remotion framework.
  • All files in transit are protected by TLS 1.2 or higher.

User rights over processed media:

  • You retain full ownership of your original video files and all extracted audio files.
  • Extracted audio files are available for download from your dashboard.
  • You may request deletion of any file — original video, extracted audio, transcript, or rendered clip — at any time.

6. Automated Commenting Policy

What the Auto-Reply feature does:

LyrClip offers an optional automated comment reply feature that allows you to configure keyword-triggered responses on your social media posts. For example, you may configure: "If someone comments 'link', reply with the sermon download URL."

Scope of comment access:

  • LyrClip scans only the public comments on posts that were published through LyrClip.
  • We do not read private messages, DMs, or comments on posts outside of LyrClip.
  • We do not store comment text beyond the moment of evaluation. We check whether a comment matches your configured keywords and, if so, post the reply — the comment content is not retained.

Anti-spam commitment:

  • The Auto-Reply feature is entirely opt-in. It is disabled by default.
  • Users set their own reply frequency limits to prevent spam.
  • LyrClip will not post replies that violate the community guidelines of any connected platform.
  • We do not use this feature to generate unsolicited promotional content on your behalf.

How to disable:

You can disable Auto-Reply at any time from your LyrClip dashboard under Settings → Social Integrations. Disabling the feature immediately stops all automated comment actions.

7. Sharing Your Data

We share your data only in the following limited circumstances:

  • Service providers: We use trusted third-party services to operate LyrClip. These include AWS (cloud storage and Lambda rendering), OpenAI (audio transcription), Stripe (payments), Supabase (database and file storage), and Google Cloud Run (API hosting). These parties process data only on our behalf and under strict data processing agreements.
  • Social media platforms: When you authorise a social media connection and trigger a publish action, we transmit your clip and associated metadata (title, description) to the relevant platform's API on your behalf.
  • Legal requirements: We may disclose your data if required to do so by law, court order, or government authority.
  • Business transfer: In the event of a merger, acquisition, or sale of Florenzo Technologies, your data may be transferred to the acquiring entity. We will notify you by email before this occurs.

We do not sell, rent, or trade your personal information to marketers or data brokers.

8. Data Storage & Security

Your uploaded video files are stored in encrypted Amazon S3 buckets via Supabase Storage. All data is transmitted over HTTPS/TLS. We implement industry-standard security practices including access controls, encryption at rest, and regular security reviews.

Data retention schedule:

  • Account data: retained as long as your account is active.
  • Original uploaded sermon videos: retained until you delete them or close your account.
  • Extracted audio files: retained until you delete them or close your account.
  • Transcripts (metadata): retained until you delete them or close your account.
  • Rendered video clips: may be automatically purged from our storage servers after 7 days to manage infrastructure resources. The clip metadata (title, timestamps, export settings) is retained so you can re-render on demand.
  • OAuth tokens: retained until you disconnect the social media account or close your account.
  • Billing records: retained for 7 years as required by applicable law.

While we take all reasonable precautions, no method of electronic storage is 100% secure. We cannot guarantee absolute security.

9. Data Deletion & Account Closure

How to delete your data: You can delete individual files, clips, and transcripts from your LyrClip dashboard at any time. To delete your entire account and all associated data, go to Settings → Account → Delete Account.

What happens when you delete your account:

  • All uploaded videos and extracted audio files are permanently deleted from Supabase Storage within 30 days.
  • All rendered clips are permanently deleted from Supabase Storage within 30 days.
  • All transcript data and clip metadata are permanently deleted from our database within 30 days.
  • All connected social media OAuth tokens are immediately invalidated and deleted.
  • Your brand profile (church name, logo, colours) is permanently deleted within 30 days.
  • Billing records are retained for 7 years as required by applicable law.

How to disconnect a social media account:

To disconnect a social media account without closing your LyrClip account:

  • Go to Settings → Social Integrations in your LyrClip dashboard.
  • Click "Disconnect" next to the platform you wish to remove.
  • LyrClip will immediately delete the stored OAuth token and lose all access to that account.
  • You can also revoke access directly from the platform (e.g., Google Account → Security → Third-party access → LyrClip → Remove access).

Data deletion requests:

To request deletion of specific data or your entire account, or if you are unable to access your account settings, email us at privacy@lyrclip.com with the subject line "Data Deletion Request." We will confirm deletion within 30 days.

10. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you
  • Correction: Ask us to correct inaccurate data
  • Deletion: Request deletion of your account and all associated data
  • Portability: Request your data in a portable, machine-readable format
  • Objection: Object to certain types of processing, including automated decision-making
  • Restriction: Request that we restrict processing of your data in certain circumstances

To exercise any of these rights, contact us at privacy@lyrclip.com. We will respond within 30 days.

11. Cookies

LyrClip uses cookies and similar tracking technologies to:

  • Keep you logged in between sessions (essential cookies)
  • Remember your preferences and dashboard state
  • Analyse usage patterns to improve the product (analytics cookies)

You can control cookies through your browser settings. Disabling essential cookies may affect the functionality of the service. We do not use advertising or third-party tracking cookies.

12. Third-Party Services

LyrClip integrates with the following third-party services. Each is governed by its own privacy policy:

  • Google / YouTube API — for authentication and video publishing. Use of YouTube API Services is subject to Google's Privacy Policy (policies.google.com/privacy). LyrClip's use of data obtained via Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.
  • Meta (Facebook / Instagram) Graph API — for authentication and content publishing. Governed by Meta's Privacy Policy.
  • TikTok API — for video publishing. Governed by TikTok's Privacy Policy.
  • OpenAI Whisper API — for audio transcription. Audio is sent to OpenAI for processing. OpenAI does not train models on API data by default.
  • AWS (S3 + Lambda + Rekognition) — for file storage, video rendering, and smart speaker crop detection. Governed by Amazon Web Services' Privacy Policy.
  • Supabase — for database and file storage. Governed by Supabase's Privacy Policy.
  • Stripe — for payment processing. Governed by Stripe's Privacy Policy.

13. Children's Privacy

LyrClip is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, contact us at privacy@lyrclip.com and we will delete it promptly.

14. Contact Us

Florenzo Technologies
No 19B Regina Nwankwo Avenue, Onitsha,
Anambra State, Nigeria

Privacy inquiries: privacy@lyrclip.com
General contact: hello@lyrclip.com
Website: lyrclip.com

For data deletion requests, use subject line: "Data Deletion Request." We will respond within 30 days.

For data protection inquiries specifically regarding EU/UK users, contact our data representative at the same address.