Who we are
nine16 is run by , registered in (company number ), at . We decide how your personal data is used, which makes us the "controller" under UK data protection law.
What we collect
When you create an account
- Your name and email address.
- Your password, which we store only as a one-way scrambled hash. We can't read it.
When you make clips
- The links you paste and the files you upload.
- The video, its title and its captions, which we download from YouTube when you give us a link.
- The clips we make, with their titles, descriptions, hashtags and scores, and any titles you give your projects.
When you pay
- Your plan, credit balance and purchase history, including refunds and when you asked for credits to be supplied straight away.
- The reference numbers Stripe gives your customer record and subscription, so we can match payments, renewals and refunds to your account.
- You enter your card and billing address on Stripe's checkout page, not ours. We never see or store your card number.
When you use the site
- Technical data such as IP address, browser and device type, and error logs, which we need to run the service and keep it secure.
- Cookies, described in our Cookie policy.
How we use it
Data protection law requires a legal reason for each use of your data. Ours are:
| What we do | Legal reason |
|---|---|
| Run your account, make your clips and show them to you | To perform our contract with you |
| Match payments, renewals and refunds to your account, and keep records of purchases | Contract, and our legal duty to keep financial records |
| Send emails about your account, purchases and the service | Contract |
| Prevent fraud and abuse, and keep the service secure | Our legitimate interest in protecting nine16 and its users |
| Measure how the site is used (analytics) | Your consent, which you can withdraw at any time |
| Send marketing emails | Your consent. Every email has an unsubscribe link |
We don't sell your personal data, and we don't use your videos to train AI models.
International transfers
Some providers, including Anthropic and Stripe, are based in the United States. When data leaves the UK we rely on safeguards approved under UK law, such as the UK Extension to the EU–US Data Privacy Framework or the UK International Data Transfer Agreement.
How long we keep it
- Projects, source videos and clips: until you delete the project or close your account.
- Account details: while your account is open, then deleted within 30 days of closing it.
- Purchase and credit records: six years, as UK law requires for financial records. Stripe keeps its own payment records under its privacy policy.
- Security logs: up to 90 days.
Your rights
You can ask us to:
- give you a copy of your personal data;
- correct anything that's wrong;
- delete your data;
- stop or limit how we use it, or object to a use based on our legitimate interests;
- send your data to you or another service in a common format.
Email and we'll reply within one month. You can withdraw consent for cookies at any time with .
If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk. We'd appreciate the chance to fix things first.
Security
Passwords are hashed with scrypt, connections are encrypted, and each account can only reach its own projects and clips. No system is perfectly secure, so please use a password you don't use anywhere else.
Children
nine16 isn't meant for children under 13, and we don't knowingly collect their data. If you think a child has signed up, contact us and we'll delete the account.
Changes to this policy
If we make important changes, we'll tell you by email or in your dashboard before they take effect. The date at the top shows when this page last changed.