Privacy Policy

Last updated October 29, 2026

This policy explains how Mark Studios, LLC handles personal data on donecut.com and when you order an edit. We collect only what we need to price, edit, deliver and support your order.

1. Who we are

DoneCut is a service of Mark Studios, LLC, a Florida limited liability company (“DoneCut”, “we”, “us”). Mark Studios, LLC is the controller of your personal data.

Postal address: Mark Studios, LLC, 7901 4th St N, Ste 300, St. Petersburg, FL 33702, USA
Email: support@donecut.com

We haven't appointed a Data Protection Officer, because the law doesn't require one for what we do.

2. What we collect

Your files and notes: the footage, music, images and PDFs you upload, their file names, your brief, your change requests, and the edits we make from them.
Contact details: the name and email you type on the order form, and the name and email you give at checkout.
Payments: handled by Stripe. We receive your name, email, the amount and whether it went through. We never see or store your card number.
Your account, if you create one: your email and name (and your profile picture if you sign in with Google), handled by our sign-in provider; your saved style (logo, brand colours, caption choice and standing notes); and the edits you approved, which we use so future edits match your style.
Feedback you send about an order, and whether you let us quote it.
Records of what you agreed to: which version of our Terms you accepted and when, your request to start editing right away, your launch-offer permission and any withdrawal request.
Technical data: your IP address and browser details in our hosting logs and for security (for example, limiting repeated requests), and anonymous counts of page views and order steps through our hosting provider's cookieless analytics, which doesn't identify you.
People in your footage: if your files show or mention other people, we process that only to make the edit you asked for, on your behalf.

Our free tools (the YouTube chapters checker and thumbnail preview) run in your browser. What you type or add there isn't sent to us.

3. Why we use it, and our legal bases

If you're in the EU, UK or Switzerland, these are the legal bases we rely on:

To price, edit, deliver and support your order, run your account and send you emails about your order: performing our contract with you (GDPR Art. 6(1)(b)).
To keep billing, tax and accounting records: legal obligation (Art. 6(1)(c)).
To keep the service secure, prevent fraud and abuse, keep a record of what you agreed to, understand which pages work, and defend legal claims: our legitimate interests in running a safe, working service (Art. 6(1)(f)). You can object to these at any time.
To show your before and after from a free launch edit, or quote your feedback: your consent (Art. 6(1)(a)), which you can withdraw at any time without affecting what happened before.

You need to give us your files, a name and an email to place an order; without them we can't do the work. We don't send marketing emails or newsletters. We don't make decisions about you based solely on automated processing that have legal or similarly significant effects.

We share personal data only with service providers that process it for us, under contract, to run DoneCut:

Hosting and server functions (US): our website, request logs and cookieless analytics.
Our order and account database (US).
File storage, delivery and sign-in security (US): your uploads, previews and finished files, and our sign-in pages.
Stripe (US and Ireland): payments. Stripe also uses payment data as an independent controller for its own fraud-prevention and legal duties.
Email delivery (US): sending order emails.
Our support mailbox provider (US): if you email us.
Account sign-in (US): your account, including Google sign-in if you choose it.
AI model providers (US): our editing tools use AI models from third-party providers (for example language, transcription, voice and image or video models). They receive the parts of your files and notes needed for the task.
Our own systems in the USA, where your edit is made.

We also share data with professional advisers (accountants, lawyers), with authorities when the law requires it (for example, we report child sexual abuse material to the National Center for Missing & Exploited Children), and with a buyer or successor if our business is sold or reorganised.

We don't sell personal data, including sensitive personal data, and we don't share it for cross-context behavioural advertising. We don't use your files to train AI models. Nevada residents: we don't sell covered information, and you can still send an opt-out request to support@donecut.com.

5. International transfers

We're based in the United States, and so are most of our providers. When we transfer personal data from the EEA, the UK or Switzerland, we rely on the EU-US Data Privacy Framework (and its UK and Swiss extensions) where the provider is certified, and otherwise on the European Commission's Standard Contractual Clauses (with the UK Addendum). Email us for a copy of the relevant safeguards.

6. How long we keep it

Uploads for an order that was never paid: deleted 48 hours after your last change.
Raw footage and your other uploads: deleted 30 days after delivery, from our cloud storage and our own systems, together with the working files and related records.
An unpaid balance: if the balance isn't paid 60 days after your preview is ready, we email you; 7 days later the order closes and all its files are deleted.
Cancelled orders: files deleted 30 days after cancellation.
Previews and finished files of delivered orders: kept so you can download them again and so your future edits can match your style, then deleted 3 years after delivery.
Your saved style and logo: until you change them or ask us to delete your account.
Order and payment records (name, email, what you ordered, amounts, your notes, and what you agreed to): 7 years, for tax and legal reasons, then deleted.
Security data: IP-based request counters for up to 1 day; hosting request logs for up to 30 days.

We delete any of these sooner if you ask, unless we have to keep something by law (for example, payment records for tax).

7. Cookies and local storage

We use no advertising or analytics cookies, so there's no cookie banner. What we do store is needed to run the site or remember something you asked for:

Sign-in cookies from Clerk (__client, __client_uat and similar), which keep you signed in, for up to about 13 months.
Security cookies from Cloudflare on our sign-in pages (__cf_bm for 30 minutes, _cfuvid for the session), which tell people and bots apart.
Your browser's storage: your light or dark theme, the private links to your orders and an unfinished order on this device, and sign-in settings. Order-step counts are de-duplicated in session storage, which clears when you close the tab.

Do Not Track and Global Privacy Control: we don't track you across other websites and don't sell or share your data, so these signals don't change anything we do. We treat a Global Privacy Control signal as a request to opt out of any sale or sharing.

8. Your rights

You can ask us to give you a copy of your personal data, correct it, or delete it. If you're in the EEA, the UK or Switzerland you can also ask us to restrict how we use it, give it to you in a portable format, and object to processing based on our legitimate interests. Where we rely on your consent, you can withdraw it at any time.

To make a request, email support@donecut.com from the address on your order. We'll reply within one month, and we may ask you to confirm it's you. You can also complain to your local data protection authority (in the UK, the Information Commissioner's Office). If you live in a US state with a privacy law, we honour the same requests.

9. Security

We use encryption in transit, private links that only open your order, short-lived download links and access controls. No system is perfectly secure. If a breach affects your data, we'll tell you as the law requires.

10. Children

DoneCut is for adults (18 or older) and businesses. It isn't directed to children under 13 (16 in the EEA), and we don't knowingly collect their personal data. If footage you send shows a child, you confirm a parent or guardian agreed. If you think a child has given us their data, email us and we'll delete it.

11. Changes to this policy

We'll post any update here with a new date. For material changes, we'll also email customers with an open order or an account before the change takes effect.

12. Contact

Mark Studios, LLC, 7901 4th St N, Ste 300, St. Petersburg, FL 33702, USA · support@donecut.com. See also our Terms of Service and Copyright Policy.