Kapwing AI

Kapwing states it uses data to 'improve our service' but lacks explicit clarity on whether user-generated content trains AI models. Voice cloning data is explicitly retained for 'research and development purposes, including analysis, maintenance, and enhancement of our tools,' indicating some training use. No clear opt-out mechanism is documented for general AI training.

“[Privacy] 'This recorded data is also stored for research and development purposes, including the analysis, maintenance, and enhancement of our tools.' [Privacy] 'We use the data we collect to provide and improve our service.'”

Users retain ownership of created content, but grant Kapwing a non-exclusive license for service delivery and promotional purposes. The license scope includes 'storing, displaying, reformatting, and distributing' content, and explicitly permits use 'for promotional purposes, such as to promote Kapwing.' This is broader than strict service delivery but includes a prohibition on selling content without permission.

“[ToS] 'you grant us a non-exclusive license to publish it on Kapwing Services, as well as any related activities such as storing, displaying, reformatting, and distributing it' and 'We may also use your content for promotional purposes, such as to promote Kapwing and its products and content.'”

Kapwing shares data with service providers under written contracts and discloses third-party services (Facebook, Google OAuth, YouTube API). However, the policy mentions sharing with 'affiliates' and 'partners' for advertising purposes under CCPA, and allows advertising partners to collect device identifiers and usage activity. Sub-processor list is not published, and data sharing with advertising partners may constitute a 'sale' under CCPA.

“[Privacy] 'Kapwing may transfer or disclose personal data to our service providers under written contracts' and 'we and our partners can deliver ads that are more relevant to you. This type of information sharing with our advertising partners may be considered a "sale" under the CCPA.'”

Kapwing provides specific deletion timelines for user-initiated deletions (7 days for content removal from servers, immediate for account deletion), but retention periods for operational data, backups, and service provider data are not clearly specified. Voice cloning data is retained indefinitely for 'research and development purposes.'

“[Privacy] 'It will be permanently removed from viewing and public access immediately and removed from our servers within 7 days.' [Privacy] 'Users can delete their entire account to remove all personal data, effective immediately.' [Privacy] 'This recorded data is also stored for research and development purposes, including the analysis, maintenance, and enhancement of our tools.'”

Kapwing explicitly states users own the rights to content they create and post. The company claims no ownership of generated outputs, only a non-exclusive license for service delivery and promotion. Users retain full IP ownership and can use content commercially.

“[ToS] 'You own the rights to the content you create and post on Kapwing.' [ToS] 'When you post content to Kapwing, you retain ownership of the rights to that content.'”

No SOC 2, ISO 27001, HIPAA, or formal GDPR compliance certifications are mentioned in the provided documents. While the privacy policy acknowledges CCPA rights and mentions 'commercially reasonable and industry standard means of protecting' data, no formal security certifications, trust page, or Data Processing Agreement are referenced.

“[Privacy] 'we use commercially reasonable and industry standard means of protecting it. However, no method of transmission over the internet or method of electronic storage is 100% secure and reliable, and we cannot guarantee its absolute security.'”