Privacy notice
Updated 23 October 2026
This notice explains the personal data we collect through Cutt, why we need it and your rights under Malaysia's Personal Data Protection Act 2010. It is available in Bahasa Melayu and English.
- Seller
- Cutt
- admin@cutt.my
1. Who we are
Cutt is responsible for the personal data collected through this site (seller details above). For any question about your data, email admin@cutt.my.
2. Data we collect
- Email: to sign you in, deliver access and tie a licence to you.
- Orders: name, email, phone number (optional), payment receipt, affiliate code (if any) and the IP address used when the order was made.
- Connector: the name of the connected Claude app, connection times, and a record of which styles or guides Claude requested. We do NOT receive your videos or your Claude conversations.
- Affiliates: name, bank account details (stored encrypted) and a record of terms accepted (including IP address).
- Server logs: IP address, page requested and time, for security and rate limiting.
- Waitlist: your email, when you ask to hear about a new package.
An email address is required to buy and sign in; without it we cannot deliver access. A phone number is optional.
3. Why we use it
- Sending sign-in codes, access emails and order updates.
- Verifying payments and keeping sales records.
- Limiting a licence to the Claude accounts it allows and detecting misuse.
- Calculating and paying affiliate commission.
- Answering support questions.
We do not sell your data and do not send marketing emails without your consent.
4. Who receives your data
- Purelymail: sends our emails.
- Cloudflare: the network that serves this site.
- Payment gateway: when you pay online, payment details are entered directly on the gateway's page. We never receive your card number or bank login details.
- Anthropic: the connector runs inside Claude, so your conversations and videos are processed by Anthropic under Anthropic's own privacy policy.
- Authorities, only when required by law.
Some of these providers process data outside Malaysia.
5. Cookies
We only use necessary cookies: your sign-in session, language choice, theme choice, and an affiliate referral code (kept 30 days when you arrive through an affiliate link). No advertising or third-party analytics cookies.
6. Security and retention
Every connection uses HTTPS. Receipts are only seen by admins, affiliate bank details are stored encrypted, and the admin panel is protected by two-step verification codes.
Sign-in codes are deleted after a day, expired sessions are deleted, and connector tokens are deleted 30 days after they expire, and the email delivery log (address + email type, no content) is deleted after 90 days. Server logs rotate automatically by size and are not kept in backups. Order records and receipts are kept for as long as they are needed for accounting, tax and payment disputes.
7. Your rights
- Access: download a copy of your account data on the Account page, or email us.
- Correction: email us to fix data that is wrong.
- Withdraw consent: for example showing your first name as a new buyer, or the waitlist.
- Deletion: ask for your account to be deleted. Sales records we must keep by law are retained.
Email admin@cutt.my from your account address. We reply within 21 days.
8. Changes to this notice
When this notice changes, the date above is updated. Important changes will be announced on this site.