CapCut

ByteDance · Image and video · CN · www.capcut.com

Last verified 2026-09-16
Entry services/capcut.yaml
Training on your data (default tier)
Content used to train and improve machine learning models; no opt-out described
Retention
As long as necessary to provide the Services; face and body effect data deleted after use
Data residency
Stored on servers in Malaysia, Singapore, and the United States

Vendor data-handling terms

Training on your data (default tier)
Content used to train and improve machine learning models; no opt-out described
to understand how you use the Services, and to improve and develop the Services, including to train and improve our technology, such as our machine learning models and algorithms.
checked 2026-09-16
CapCut Privacy Policy
Retention
As long as necessary to provide the Services; face and body effect data deleted after use
We retain information for as long as necessary to provide the Services and for the other purposes set out in this Privacy Policy. / Once an effect that uses face or body information has been applied to your User Content, that information is deleted and not retained.
checked 2026-09-16
CapCut Privacy Policy, Data retention
Data residency
Stored on servers in Malaysia, Singapore, and the United States
We store the information we collect in secure servers located in Malaysia, Singapore and the United States. / The personal information we collect from you may be stored on a server located outside of the country where you live.
checked 2026-09-16
CapCut Privacy Policy, Where we store information

Domains and endpoints

observed means seen in Unseen deployments; vendor-documented means listed by the vendor. Vendors do not publish complete lists.

HostRoleSource
capcut.comappobserved

Assessment

All accounts: high

Reasoning: Uploaded video, audio, and text are processed for model training with no opt-out described, and stored in Malaysia, Singapore, and the United States by a ByteDance subsidiary. Content that reaches this service at work is typically marketing or internal video, which can carry faces, voices, and screen content. There is no business tier with different terms in the policy checked.

Flags: GDPR Chapter V (storage in Malaysia, Singapore, US) · No training opt-out · Assessed 2026-09-16. The assessment is Unseen's; the terms above are the vendor's.

Changelog

  • 2026-09-16Documented. Training, retention, and storage terms verified against the CapCut privacy policy.
  • 2026-09-15Listed from the Unseen catalogue with observed domains.

Corrections

Pull request on GitHub, or the form below. Changes are reviewed and recorded in the changelog.

Edit on GitHub