Back to site

Privacy Policy

Last updated: 28 September 2026

This Policy explains what personal data we collect, how we use and safeguard it, and the rights and choices you have. It applies to lastcut.video, our web platforms, and our mobile apps for iOS and Android.

Quinn Care Private Limited ("we", "us", or "our") provides AI-powered tools that help fashion and lifestyle brands generate product video and imagery from their existing photography (the "Service"). LastCut is one of those products. By using the Service, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Service.

01 Who we are

Quinn Care Private Limited is the controller of the personal data described here. Under India's Digital Personal Data Protection Act, 2023 ("DPDP Act") we act as the Data Fiduciary; under the EU/UK GDPR we act as the data controller for our own data and as a processor for the Customer Content you upload. You can reach us at [email protected].

02 Information we collect

Information you provide

  • Account & profile data — mobile apps — your phone number, which is your primary account identifier, along with any name you choose to give us. You sign in with a one-time password (OTP) sent to that number over WhatsApp or SMS; the apps do not use a password.
  • Account & profile data — web platform — your name, work email, company, role, and password.
  • Referrals — if you join through our referral programme, we record the link between your account and the referring user's account, matched by phone number, so that referral rewards can be credited.
  • Billing data — billing name, address, and tax/GST identifiers. Card payments on our web platform are handled by our payment provider; we do not store full card numbers. Credits bought inside the mobile apps are sold through Apple In-App Purchase and Google Play Billing, who act as merchant of record: they process the payment and we receive a transaction record confirming the purchase, never your card details.
  • Customer Content — the product/garment images, flatlays, catalog photos and videos, prompts, and related materials you submit for processing. This may incidentally include images of people (for example, models in your existing shoots). See Photos, videos and face data.
  • Communications — messages you send us for support, sales, or feedback.
  • Connected Meta account data — web platform, and only if you choose to connect one — the access token Meta issues to us, your Meta name and profile picture, and the Businesses, ad accounts, Facebook Pages and product catalogs you grant us access to, including your catalog's product details and photos. See Connecting your Meta account.
  • Connected AI assistant data — only if you choose to connect one, such as Claude or ChatGPT — the requests the assistant sends us on your behalf: the product links, image links and photos you give it, and the choices it passes on, such as a template, a model or a background. We do not receive your conversation with the assistant. See Connecting an AI assistant.

Information we collect automatically

  • Usage & device data — log data, IP address, browser and device information, pages and features used, and diagnostics.
  • Advertising identifiers — in our mobile apps, and only where you have permitted it, the device advertising identifier (Apple's IDFA or the Google Advertising ID) and related install and in-app event data. See Advertising & attribution.
  • Cookies and similar technologies — see Cookies.

03 How we use information

We use personal data to:

  • provide, operate, and maintain the Service, including generating AI outputs from your Customer Content;
  • authenticate you and manage your account — including sending one-time passwords to your phone number over WhatsApp or SMS, recovering access to your account, reaching you about support requests, and operating our referral programme;
  • process payments and detect or prevent fraud and abuse;
  • provide customer support and respond to your requests;
  • improve, secure, troubleshoot, and develop new features;
  • send service, security, and (where permitted) marketing communications; and
  • comply with legal obligations and enforce our terms.

Advertising & attribution

We advertise our products, and we measure whether that advertising works. Our mobile apps include the Meta (Facebook) SDK, which shares app install and in-app event data (for example, that a sign-up or a purchase occurred), together with device and usage data and — only where you have permitted it — the device advertising identifier. Meta acts as our advertising partner and uses this to attribute installs and conversions to the ads that led to them. We use it to measure and improve our own campaigns. We do not sell your personal data, and we do not share your uploaded images, generated videos, or account content with advertising partners.

Your choices. On iOS, we show Apple's App Tracking Transparency prompt; if you decline, we do not use the advertising identifier to track you, and you can change your choice at any time in Settings → Privacy & Security → Tracking. On Android, you can reset or delete your advertising ID and opt out of ad personalisation in your device's Google settings.

Where the GDPR/UK GDPR applies, our legal bases are: performance of a contract with you; our legitimate interests in operating, securing, and improving the Service; your consent (for example, certain cookies and marketing); and compliance with legal obligations. Under the DPDP Act, we process personal data based on your consent or other legitimate uses permitted by law.

Connecting your Meta account

On our web platform you can choose to connect a Meta (Facebook) account so that we can turn products from your catalog into video ads. You connect it through Meta's own login dialog, where you choose which Businesses, ad accounts, Facebook Pages and product catalogs to share and which permissions to grant. Only an owner or admin of your workspace can connect one, and the connection belongs to that workspace.

We use this access only to: show you your products, ad accounts, Pages and catalogs inside LastCut; make videos from your product photos when you ask us to; create ads in your own ad account at your instruction — always created paused — and start or pause them only when you tell us to; and show you how your ads are performing, such as impressions, clicks and spend. We read your product catalog; we do not change it.

What we store: the access token Meta issues, encrypted; the ad account, Page and catalog you selected; and records of the videos and ads we created for you, including who started or paused each ad. We do not sell this data, use it to advertise to you or anyone else, or share it with third parties other than the service providers that host the Service. We handle data received through Meta's APIs in accordance with Meta's Platform Terms. Your ad spend is billed by Meta to your own ad account; we do not process or charge it.

Your choices. You can disconnect at any time from the Meta ads page, which deletes the stored access token immediately; ads already created stay in your own ad account, under your control in Meta Ads Manager. You can also remove LastCut's access from your Facebook settings, under Business integrations.

Connecting an AI assistant

You can connect an AI assistant that supports the Model Context Protocol, such as Claude or ChatGPT, to LastCut. You connect it by signing in to LastCut and approving the connection for one workspace. The assistant can then act on that workspace for you: read its credit balance, plan and videos; browse templates and models; import product photos; prepare a price quote; and — only with a quote you have approved — start a video, which spends that workspace's credits.

What we receive. Only what the assistant sends to LastCut to carry out your request — for example a product page link, image links, photos you add, and the template, model or background you chose. We do not request, receive or store your conversation with the assistant, its memory, or files you have not asked it to pass to us. When you give us a product page link, our scraping provider fetches that page so we can find its product photos; give us links only to products you have the rights to use.

What we store. A record of the connection — which assistant, which workspace, and when you approved it — and the tokens that authorise it; and the products, photos, quotes and videos made through it, which belong to your workspace like anything else made in LastCut. The assistant receives what LastCut answers: your workspace name, credit balance and plan, and the details and links of your templates, products, quotes and videos. How the assistant's provider handles that is governed by the provider's own privacy policy.

Your choices. You can disconnect an assistant at any time from Connected apps in your LastCut account, which revokes its access immediately. You can also remove the connection from the assistant's own settings.

04 AI processing & your content

We process your Customer Content solely to provide the Service to you — for example, to generate product videos and, on our web platforms, on-model images at your direction.

You retain ownership of your Customer Content as set out in our Terms & Conditions. You are responsible for ensuring you hold the rights and any necessary consents for the content you upload, including for any individuals depicted in it.

05 Photos, videos and face data

We do not collect, detect, extract, generate, store or use face data, faceprints, facial templates, facial geometry or any other biometric identifier. We do not perform facial recognition, facial detection or facial matching, and our mobile apps do not use Apple's TrueDepth camera, ARKit face tracking or the Vision framework.

The photos you upload are garment and product images. We process them only as ordinary image files (JPEG, PNG, WEBP, HEIC). Such images may incidentally contain people — for example, models in your existing shoots — and where they do, we do not analyse, identify, index or derive biometric data from those people. The images are used solely to generate the output you asked for.

Where it is stored. Uploaded images and generated videos are stored on Cloudflare R2, encrypted in transit and at rest.

Who it is shared with. Images are shared only with our video-generation processor, which receives a link to the image for the sole purpose of rendering your video under contract. We do not sell your images, share them with data brokers, or use them for advertising, ad targeting or measurement.

How long we keep it. We retain your uploaded images and generated videos for as long as your account is active, so that your videos remain available to you.

Deletion. You can ask us to delete your account at any time by emailing [email protected], as described at lastcut.video/delete. Once your request is verified, deletion is immediate and permanent: your account, your uploaded images and your generated videos are erased from our database and from storage. There is no grace period and no recovery.

06 How we share information

We do not sell your personal data. We share personal data only with:

  • Service providers and sub-processors who help us run the Service — including cloud hosting and storage, AI compute infrastructure, payment processing, analytics, email delivery, and support tooling — under contracts requiring appropriate safeguards and use limited to our instructions.
  • Advertising partners — currently Meta (Facebook) — who receive app install and in-app event data, device and usage data, and, where you have permitted it, your device advertising identifier, solely so that we can measure the performance of our own advertising. They do not receive your uploaded images or generated videos. See Advertising & attribution for how to opt out.
  • Meta, at your instruction — if you connect a Meta account, we send Meta the videos, product links and ad settings you approve, to create and run ads in your own ad account. See Connecting your Meta account.
  • The AI assistant you connect, at your instruction — the answers LastCut returns to it while it acts on your workspace. See Connecting an AI assistant.
  • Professional advisors such as lawyers, auditors, and accountants, where needed.
  • Authorities or other parties where required by law, to enforce our terms, to protect the rights, property, or safety of Quinn Care Private Limited, our users, or others, or in connection with a merger, acquisition, financing, or sale of assets.

07 International transfers

We may process and store personal data in countries other than your own, including outside the EEA, the UK, or India. Where required, we put appropriate safeguards in place for such transfers (for example, the European Commission's Standard Contractual Clauses or an equivalent mechanism).

08 Data retention

We keep personal data for as long as your account is active or as needed to provide the Service. Your uploaded images and generated videos are retained for the life of your account so that your outputs stay available to you.

A connected Meta account's access token is kept only while the connection exists: it is deleted as soon as you disconnect it, or when the workspace it belongs to is deleted. Records of the videos and ads we created for you are kept with that workspace, so that its history stays accurate.

A connected AI assistant's access lasts only while the connection exists: disconnecting it revokes its tokens at once. Products, photos and videos made through it are kept with your workspace like any others. A price quote stops being valid after 30 minutes; its record is kept with the workspace, so that the history of what was charged stays accurate.

Deletion is immediate and permanent. When your account is deleted — on a request to [email protected], as described at lastcut.video/delete — your account record, your uploaded images and your generated videos are erased from our database and from object storage in a single operation. There is no soft-delete flag, no grace period, and no recovery.

What we keep afterwards. We deliberately retain payment and transaction records after account deletion, because tax and accounting law requires us to. We may also retain the limited records needed for security, fraud prevention, or resolving a dispute, and to comply with other legal obligations. Nothing else survives deletion.

09 Security

We use technical and organizational measures designed to protect personal data, including encryption in transit, access controls, and monitoring. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security. If we become aware of a personal-data breach, we will notify affected parties and authorities as required by applicable law.

10 Your rights & choices

Depending on where you live, you may have some or all of the following rights:

  • access a copy of your personal data and information about how it is processed;
  • correct or update inaccurate or incomplete data;
  • delete your personal data;
  • port your data to another provider;
  • object to or restrict certain processing, and withdraw consent at any time (without affecting prior processing);
  • nominate another person to exercise your rights in the event of death or incapacity (under the DPDP Act); and
  • lodge a complaint with your data protection authority or the Data Protection Board of India.

California residents: under the CCPA/CPRA you may request to know, delete, and correct your personal information, and to opt out of the "sale" or "sharing" of personal information. We do not sell or share personal information as those terms are defined. We will not discriminate against you for exercising your rights.

Deleting your account. Email [email protected] from the email address or phone number registered to your account, as described at lastcut.video/delete. Once your request is verified, deletion is immediate and permanent — see Data retention.

To exercise any other right — access, correction, portability, objection, or withdrawal of consent — email [email protected]. We will verify your request and respond within the timeframes required by applicable law.

11 Cookies

We use strictly necessary cookies to operate and secure the site, and — with your consent where required — analytics cookies to understand how the site is used so we can improve it. You can control or delete cookies through your browser settings; disabling some cookies may affect functionality.

12 Children

The Service is intended for businesses and is not directed to children under 18 (or the age of majority in your jurisdiction). We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will take appropriate steps to delete it.

13 Changes to this Policy

We may update this Policy from time to time. We will post the updated version here with a new "Last updated" date and, where the changes are material, take additional steps to notify you. Your continued use of the Service after an update means you accept the revised Policy.

14 Contact & grievances

For any question, request, or complaint about this Policy or your personal data, contact us at [email protected]. If you are in India, you may also contact our Grievance Officer at the same address regarding any concern under the DPDP Act; we will acknowledge and address grievances within the timelines prescribed by law.