Privacy policy

Last updated 13 October 2026

Fluxcut (“we”, “us”) runs the video-making service at www.fluxcut.dev and its agent connection (MCP) server. This policy says what we collect when you use them, why, who it goes to, and what you can ask us to do with it. Questions: support@agentflux.org.

What we collect

Your account. When you sign up we receive your name, email address and, if you sign in with Google, your Google profile picture. We do not receive your Google password or anything else in your Google account.
What you put into a project. Your goal and brief, script lines, notes, approvals, and the files you upload or generate: footage, pictures, logos, voice and music takes, thumbnails and the finished video.
Web pages you point us at. When a project names a website, our server may open its public pages and take screenshots or short recordings for your footage and thumbnail. It never signs in to them.
Agent keys. If you create a key for an AI agent, we keep the key’s name, role, and when it was created and last used. We store only a one-way hash of the key itself.
Usage and spend. Which AI services each run called and what it cost, so we can show your spend and apply your monthly limit.
Technical logs. Our hosting keeps request logs (such as IP address, time and the page requested) for security and troubleshooting.

How we use it

To sign you in and keep your projects private to your account.
To make your video: we send the content a step needs to the AI service that does that step (see below).
To show you what each run cost and to stop runs that would go over your monthly limit.
To keep the service secure, fix problems, and answer you when you write to us.

We do not sell your information, we do not show ads, and we do not use your projects to train AI models.

Information from Google

If you sign in with Google, we use your name, email address and profile picture only to create and identify your Fluxcut account. We do not use Google user data for advertising, do not sell it, do not transfer it to others except the sign-in provider below that operates the login for us, and do not use it to train AI models. Fluxcut’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Who we share it with

Only with the services that run Fluxcut, each for its own part of the work:

Clerk runs sign-in and holds your account details.
Railway hosts the app, its database and the file storage where your projects are kept.
Anthropic (Claude) and xAI (Grok) write briefs, plans, scripts and art direction, read pictures, and generate pictures and video clips, depending on the models you choose for a project.
ElevenLabs turns script lines into voiceover and generates music.
Stability AI paints thumbnails when you choose it for a project.

These providers process what we send them under their own terms and privacy policies. We may also disclose information if the law requires it, or to protect the service and its users from abuse.

How long we keep it

Your account and projects are kept while your account exists. When you delete a project, or a file inside one is replaced, the old files move to a backup area so a mistaken deletion can be undone; backups are removed for good after 30 days. To have your account, your projects or their backups removed sooner, email us and we will do it and confirm when it is done.

Your choices and rights

See and download your projects and videos in the app at any time.
Delete projects in the app, and revoke agent keys in Settings.
Ask us for a copy of the information we hold about you, to correct it, or to delete it.

Depending on where you live you may have further rights, for example under the GDPR or California law. Write to us and we will answer within 30 days.

Cookies

We use only the cookies sign-in needs to keep you signed in, and your browser’s local storage for small preferences such as which panels you left open, and to remember that this browser has signed in before, so the site offers Sign in rather than Sign up. No advertising or tracking cookies.

Security

Connections are encrypted (HTTPS), projects are stored per account, and agent keys are stored only as hashes. No system is perfectly secure; tell us at once if you think your account or a key has been misused.

Children

Fluxcut is not meant for anyone under 18, and we do not knowingly collect information from children.

International transfers

The services above may process information in the United States and other countries. By using Fluxcut you understand your information may be processed outside the country where you live.

Changes

We will post any change to this policy on this page with a new date, and tell signed-up users by email before a change that affects them materially takes effect.