CapCut
ByteDance · Image and video · CN · www.capcut.com
services/capcut.yamlVendor data-handling terms
“to understand how you use the Services, and to improve and develop the Services, including to train and improve our technology, such as our machine learning models and algorithms.”
“We retain information for as long as necessary to provide the Services and for the other purposes set out in this Privacy Policy. / Once an effect that uses face or body information has been applied to your User Content, that information is deleted and not retained.”
“We store the information we collect in secure servers located in Malaysia, Singapore and the United States. / The personal information we collect from you may be stored on a server located outside of the country where you live.”
Domains and endpoints
observed means seen in Unseen deployments; vendor-documented means listed by the vendor. Vendors do not publish complete lists.
| Host | Role | Source |
|---|---|---|
| capcut.com | app | observed |
Assessment
Reasoning: Uploaded video, audio, and text are processed for model training with no opt-out described, and stored in Malaysia, Singapore, and the United States by a ByteDance subsidiary. Content that reaches this service at work is typically marketing or internal video, which can carry faces, voices, and screen content. There is no business tier with different terms in the policy checked.
Flags: GDPR Chapter V (storage in Malaysia, Singapore, US) · No training opt-out · Assessed 2026-09-16. The assessment is Unseen's; the terms above are the vendor's.
Changelog
- 2026-09-16Documented. Training, retention, and storage terms verified against the CapCut privacy policy.
- 2026-09-15Listed from the Unseen catalogue with observed domains.
Corrections
Pull request on GitHub, or the form below. Changes are reviewed and recorded in the changelog.