Last updated 2026-09-09

Privacy policy

This policy covers personal data processed through the pedalclass website and app, including accounts, workspaces, class creation, and video exports.

1. Who is responsible

CLIPIN FIT SL operates pedalclass and is the controller of the personal data described here. A controller decides why and how personal data is used.

For privacy questions or requests, email hola@clipin.fit. Company information appears in our Legal notice.

2. Data we collect and its sources

We receive data you enter, data from your sign-in and payment providers, and technical data produced when you use the service. A workspace member may provide your email address to invite you.

  • Account details, such as your name, email address, profile image, and sign-in identifiers.
  • Workspace names, invitations, membership, roles, and actions on shared resources.
  • Classes, coaching cues, player designs, uploaded audio and images, file metadata, and generated exports.
  • AI instructions, class details sent for generation, generated results, and job status.
  • Billing contact details, subscription status, invoices, payment references, and usage against plan limits. Stripe handles card details through its hosted payment pages.
  • Support messages and technical records, such as IP addresses, browser information, errors, and security logs.

Provide only information needed for your classes. Do not put sensitive health information or another person's private information into uploads or AI instructions unless you have a lawful basis to do so.

3. Purposes and legal bases

  • To perform our contract with you: create and authenticate accounts, provide workspaces, save and edit classes, process requested AI generation, export videos, manage subscriptions, and provide service support.
  • For our legitimate interests: protect accounts, prevent abuse, diagnose faults, respond to enquiries, and manage business relationships. We balance these interests against your rights.
  • To meet legal obligations: maintain required accounting records and respond to lawful requests from authorities.
  • With your consent: carry out any optional processing for which we request consent. You can withdraw that consent without affecting earlier lawful processing.

4. Workspace access and your content

Content in a personal workspace is available through your account. Content in a team workspace is accessible to members according to their role. Owners and administrators can manage membership and workspace settings. Do not upload content to a team workspace if you do not want authorized members to access it.

We process files to store, edit, play, and export your classes. We do not publish your uploads in a public user library. People who receive an exported file can keep and use their copy outside pedalclass.

If a business uses pedalclass to process personal data on its behalf, that business may be the controller of that content. Contact us to arrange any required data-processing agreement.

5. AI class generation

When you request AI generation, we send the class title and the generation details needed for your request to OpenAI. These details can include your instructions, duration, level, and training goals. We store the job and result to provide the feature. Avoid including personal information that the request does not need.

AI output can contain errors. Review it before use. We do not use this feature to make automated decisions about you that have legal or similarly significant effects.

6. Providers and other recipients

We use Clerk for account authentication, Convex for application data, Cloudflare R2 for media storage, Stripe for payments, OpenAI for requested AI generation, and Resend for workspace invitation emails. Hosting and video-processing providers also process the data needed to deliver the service.

Providers receive data needed for their functions. Payment and sign-in providers may also process data for their own security and legal purposes under their privacy policies. We may disclose information to professional advisers or public authorities when necessary to meet legal obligations or protect legal rights.

Some providers process data outside the European Economic Area. Such transfers require a lawful safeguard, such as an applicable adequacy decision or the European Commission's standard contractual clauses. Contact us for details of the safeguards applicable to your data or to request a copy.

7. How long we keep data

We retain account and workspace data while needed to provide the service. Classes and media remain until deleted, the workspace is closed, or an applicable plan limit or retention rule requires removal. Removing a member does not delete the team's shared content.

Export downloads expire according to the retention period of your plan. Expired export files are scheduled for deletion. Keep your own copy of files you need.

We keep billing records for the legally required accounting and tax periods. We retain support and security records for as long as needed to resolve the issue, investigate abuse, or handle a legal claim. Deleted data may remain in backups until those backups are replaced under the provider's retention cycle.

To request account closure or deletion of personal data, contact us. Some records must remain where a legal obligation or a valid legal claim prevents deletion.

8. Your rights

Under applicable data-protection law, you can request access, correction, deletion, restriction, and portability of your personal data. You can object to processing based on legitimate interests and withdraw consent for processing based on consent.

Send your request to hola@clipin.fit. We may ask for information needed to verify your identity. We normally respond within one month. If the law permits an extension, we will explain the reason within that month.

You can complain to the Spanish Data Protection Agency (AEPD) or your local data-protection authority.

Account details are needed to provide account features. If you do not provide them, you can still view the public website. Optional AI instructions and uploads are only needed for the features you choose.

9. Security, storage, and changes

We use access controls and authenticated requests to protect account and workspace data. No online service can guarantee complete security. Keep your credentials private and report suspected unauthorized access to us.

Our Cookies and browser storage notice describes sign-in storage and local settings. We do not use advertising or analytics trackers on pedalclass.

We will update this page when our processing changes. For material changes, we will provide an appropriate notice through the service or email. The date above identifies the latest version.