Privacy Policy

Effective Date: August 1, 2026 · Last updated: October 13, 2026

This Privacy Policy explains how Vidofy AI (“We,” “Us,” or “Our”) collects, stores, uses, and shares your personal information when you use our services, including our website at https://vidofy.ai/ (the “Website”) and the Vidofy mobile application (the “App”) once it is available on the Apple App Store and Google Play Store.

By using our Website or App, you agree to this Privacy Policy. Please read it carefully to understand your rights and how we protect your data.

Definitions

  • Website: Vidofy AI’s website at https://vidofy.ai/.
  • App: The Vidofy mobile application for the Apple App Store and Google Play Store, once it is available there.
  • Account: A unique profile you create to access our services.
  • Cookies: Small files stored on your device to enhance and track your browsing experience.
  • Device: Any device capable of accessing our services (PC, smartphone, tablet, etc.).
  • Personal Data: Any information identifying an individual.
  • Service: All AI-powered products, tools, and features offered via our Website and App.
  • You: The person or entity using our services.

Information We Collect

We may collect the following information:

  • Email address
  • Checkout email — if you start a purchase by entering your email address but do not complete it, we keep that address so we can send you a single reminder about your unfinished checkout. Every such email contains a one-click unsubscribe link, and the address is used for nothing else.
  • Usage data (e.g., browsing patterns, in-app activity)
  • Basic profile data from the sign-in service you choose (Google, Facebook, GitHub or Discord) — see “Third-Party Social Media Login” and “Google User Data” below
  • Cookies and other tracking data
  • Technical device details (e.g., crash logs, app performance data)
  • Card holder name — when you make a purchase, our payment processor tells us the name printed on the payment card. We store it solely to prevent referral and affiliate fraud (for example, to detect many "different" accounts being paid for from one wallet). It is never shown to other users, never used for marketing, and is deleted when you delete your account. We never receive or store your card number, expiry date or security code — those stay with our payment processor.
  • Verified name on your payout account — this applies only if you join a programme that pays you (affiliate or creator) and connect a payout account. When our payout provider verifies your identity, it tells us the name it verified. We store that name solely to prevent payout fraud — for example, to detect someone collecting a commission on purchases they paid for themselves, or one person running several "different" partner accounts. It is encrypted, and the automatic comparison runs on a keyed one-way code rather than on the name itself. It is never shown to other users, never used for marketing, never exported, and is erased when you delete your account and also removed automatically once it is no longer needed for fraud prevention. We never receive your identity document — that stays with the payout provider.
  • Connected social accounts and the performance data of the posts you submit — this applies only if you join our Creator Program and connect an account you publish from. See “Connected Social Accounts (Creator Program)” below for what we read and what we never receive.

Third-Party Social Media Login

You can create an account or sign in with Google, Facebook, GitHub or Discord instead of a password. The service you choose asks for your permission on its own screen and then shares basic account details with us, such as your name or username, your email address and your profile picture. We use your name and email address to create your account and sign you in. We never receive your password for that service, and we do not ask for — or receive — your contacts, friends list, messages, files, or the ability to post on your behalf. If you sign in with Google, the next section explains exactly what we receive and how we handle it.

Google User Data

This section applies if you choose Sign in with Google. It describes everything we do with the information Google shares with us.

  • What we access. We ask Google only for your basic profile and email address (the standard openid, email and profile permissions). Google shares your name, your email address, whether that address is verified, and your profile picture. Signing in with Google does not give us access to Gmail, Google Drive, your contacts, your calendar, your YouTube account or any other Google service, and we never see your Google password. (Connecting a YouTube channel to our Creator Program is a separate, optional step with its own permission screen — see “Connected Social Accounts (Creator Program)” below.)
  • What we store. Your name and email address, kept in your Vidofy AI account. We do not store your Google profile picture.
  • How we use it. To create your account and sign you in (we accept only email addresses that Google marks as verified), to show your name in your account, to send you emails about your account, purchases and security, and — unless you turn them off in your notification settings — occasional product news.
  • Who we share it with. We do not sell it. To measure how well our advertising works, when you create an account, make a purchase or join one of our programs we send the advertising and analytics platforms we use (Meta, TikTok, X, OpenAI and Google Analytics / Google Ads) a one-way encrypted (SHA-256 hashed) copy of your email address, together with our internal account number. They never receive your email address in readable form, your name, or any other Google data. Companies that run parts of the Service for us, such as our hosting and payment providers, receive only what they need for that work, and we may disclose information when the law requires it.
  • No AI training. We do not use information received from Google to develop, improve or train artificial intelligence or machine-learning models.
  • How long we keep it, and how to delete it. We keep it for as long as your account is open. You can delete your account at any time from your account settings: this erases your name, your profile details and your generated media. We keep your email address with a minimal account record, together with payment records, only as long as we need them to prevent fraud and abuse and to meet accounting and legal obligations. You can also remove Vidofy AI’s access to your Google account at any time from your Google Account permissions page.

Vidofy AI’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy.

Connected Social Accounts (Creator Program)

This section applies only if you join our Creator Program and connect a social account you publish from. It is different from social login above: logging in reads your profile once to identify you, whereas a connected creator account is read on an ongoing basis so that posts you submit can be measured and paid.

  • We never receive your password. You authorise the connection on the platform’s own screen, which gives us an access token instead of your credentials.
  • We only read; we never post, edit, delete or send messages on your behalf.
  • What we read. With the permissions you grant: your account’s name or handle, ID and follower count, and — where the platform provides them — aggregated statistics about your audience, such as the countries it is in; information about your recent posts, such as their publish dates and engagement, to check that the account is eligible and genuine; and the caption or title, cover image, publish time and performance figures (such as views, likes, comments, shares or saves) of each post you submit. On several platforms these figures are private analytics visible only to you. What we read on each platform is listed in section 4 of the Creator Program Terms.
  • We do not receive personal data about your followers. Audience information reaches us only as aggregated statistics, never as identifiable people.
  • How we use it. To confirm the account is yours and eligible, to review and measure the posts you submit, to calculate and pay rewards, to detect artificial engagement and other abuse, and to answer your support requests. We do not sell it, use it for advertising, or use it to train artificial-intelligence models.
  • Who sees it. You, and our review and support team. Our hosting provider, and the AI service that helps our support team draft replies to the support tickets you open, process it only on our instructions — except data from platforms whose rules keep it out, listed below. Other creators see a leaderboard showing your position with your name masked, your country’s flag and the views your posts earned on every platform except those whose rules below keep their posts off it, and — if we choose one of your posts as an example for a campaign — a link to that post on the campaign’s page (section 9 of the Creator Program Terms). If you switch on your payout card, it shows the name of your most-followed connected account — leaving out the platforms whose rules below keep their accounts off the card — with the total we have paid you.
  • Access tokens are stored encrypted and are used only for the purposes described here.
  • How long we keep it. Account details while the account is connected. A post’s details and figures while it is being tracked, reviewed or appealed, and for up to 30 days after that; then only our reward record — the post’s link, the date it settled, the amounts we paid and the outcome of any review of it — which we keep for accounting, tax and fraud prevention, and so that a reward can still be reviewed under section 7 of the Creator Program Terms.
  • Disconnecting and deletion. You can disconnect an account at any time from your creator dashboard. When you do, when we decline or remove the account, when you delete your Vidofy AI account, or when you ask us through our Contact Us page, we stop reading it, withdraw our access at the platform where the platform allows it, and delete its data within 7 days, keeping only the reward record. If you remove our access in the platform’s own settings instead, we delete it within 30 days.

Platform rules. Each platform sets its own rules for apps that read its data; where they are stricter than the above, they apply:

  • Instagram. We read your account’s insights — private analytics such as reach and views — and your recent posts’ captions and dates. You can also ask for deletion through Meta, by removing our app in your Instagram “Apps and websites” settings: Meta passes the request to us, we delete the data within 7 days and give you a confirmation code. Meta’s own handling of your data is described in the Meta Privacy Policy.
  • TikTok. If you also grant TikTok’s business access, we process the audience statistics it provides on your behalf, only to measure where your submitted videos were watched and to calculate your rewards, and we show them only to you and our review team. TikTok’s own handling of your data is described in the TikTok Privacy Policy.
  • Facebook. For the Page you connect we keep an encrypted Page access token and read its video insights. We do not tell anyone that you manage the Page unless you switch on your payout card. You can also ask for deletion through Meta, by removing our app in your Facebook “Apps and websites” settings: Meta passes the request to us, we delete the data within 7 days and give you a confirmation code. See the Meta Privacy Policy.
  • X. With your agreement we link your X username and account ID to your Vidofy AI account. If a post we hold is deleted, made private or protected, or withheld or suspended by X, we delete or update our copy as soon as reasonably possible, and within 24 hours if you or X ask us to. X data is not sent to our support team’s AI service and is never provided to third parties. See the X Privacy Policy.
  • Threads. The Threads posts you submit are shown only to you and, to review them, our review team. You can also ask for deletion through Meta, by removing our app in your Threads website permissions: Meta passes the request to us, we delete the data within 7 days and give you a confirmation code. See the Threads Supplemental Privacy Policy.
  • Pinterest. Apart from the analytics of the Pins you submit, which you expressly grant us access to, we keep only what identifies your account and those Pins. Your Pinterest data is shown only to you and our review team — not on the leaderboard, your payout card or our support team’s AI service — is never combined with other accounts’ data, and is deleted, with anything derived from it, within 30 days of your deleting your Pinterest account or of our no longer needing it, besides the deadlines above — except our reward record. See the Pinterest Privacy Policy.

YouTube. If you connect a YouTube channel, we use YouTube API Services, under the YouTube Terms of Service; Google’s own handling of your data is described in the Google Privacy Policy. With your permission we read your channel’s name and subscriber count and its aggregated audience statistics (such as viewer countries, age groups and gender); from public YouTube data we read the details and statistics of the videos you submit. We use this only to confirm the channel is yours, measure the videos you submit, calculate rewards and detect artificial engagement — never for advertising — and we do not sell it. Your channel details and analytics are visible only to you and to our review and support team, including the AI service that helps that team answer your tickets; your YouTube videos are not counted on the leaderboard.

We keep YouTube data only as long as we need it to settle your posts, and we refresh or delete it at least every 30 days. If you disconnect the channel, we revoke our access at Google and delete its YouTube data within 7 days, keeping only our reward record. If you remove our access from your Google Account permissions page, we delete it within 30 days; and if you ask us through our Contact Us page, within 7 days. The full YouTube rules are in section 4 of the Creator Program Terms.

What we do with this data, and the rules of the programme itself, are set out in our Creator Program Terms.

Cookies & Tracking

We use cookies, tags, and scripts to track activity and improve our services. You can disable cookies in your browser, but some features may not function properly. In the App, we may use mobile analytics tools for performance optimization.

Bot Protection

To protect sign-up and our contact form from automated abuse, we use Cloudflare Turnstile. When one of those forms is shown, Turnstile checks your browser to tell people from bots, using signals such as your IP address and technical details of your browser and connection. Cloudflare processes these signals for that purpose, as described in its Turnstile privacy addendum; we receive only whether the check passed. If Cloudflare is unavailable, we ask a simple question instead.

Security Cookies

In addition to the cookies described above, we use a small number of cookies that are strictly necessary for security — for example, to protect your account from unauthorized access and to keep our services safe from abuse. These cookies are processed under our legitimate interest in keeping the service safe, are kept separate from any analytics or marketing tracking, and we do not share their values with third parties. You can clear them at any time from your browser settings.

Permissions in the App

  • Camera & Photos: For video creation and image analysis.
  • Push Notifications: To send updates and alerts.
  • Microphone: If voice input is required.

Face Data & Uploaded Images

We do not create or store biometric identifiers — such as face templates or faceprints — from anything you upload. If you unlock the App with Face ID or another device biometric, that check happens on your device and is handled by Apple or Google; we never receive it.

Images, videos and audio you upload as inputs are used to produce the result you asked for and to check it against our content rules: they pass through automated moderation, which may use a third-party AI service, and are sent to the AI provider behind the model you choose (see Prompts and AI Model Providers below). Temporary copies on our processing servers are deleted once your file reaches our storage. In storage, an input is kept with the generation it belongs to for the storage period of your plan (see our Terms of Use) and is deleted when that generation is removed, or when you delete your account. Files uploaded through our developer API ahead of a generation expire automatically after 6 hours.

Prompts and AI Model Providers

Generating media means sending your request to the company that runs the model you picked. When you start a generation, we pass your prompt — and any image, video or audio you supplied as an input — to the third-party AI provider behind that model, because there is no other way for it to produce the result. Which provider receives it depends on the model you choose, and that routing can change as we add or replace models. Providers process this material to return your result under agreements that restrict them to that purpose; we do not sell it, and we do not share it for advertising. This applies however you reach Vidofy — the website, our mobile apps, the MCP connector inside an AI assistant, or the command line — and your prompts and results are kept and deleted under Data Retention below.

Use of Your Data

  • To provide, improve, and personalize our services
  • To manage your account
  • To send updates and promotional content (unless opted out)
  • To respond to your inquiries
  • For analytics, security, and performance improvements

Data Retention

We retain personal data only as long as necessary to fulfill the purposes described above, comply with legal obligations, and resolve disputes. Usage data is usually retained for shorter periods unless needed for security or functionality improvements. Email addresses collected from unfinished checkouts are deleted after 180 days unless the purchase was completed.

Deleting Your Data

You can delete your account at any time from your account settings, or ask us to delete your account or personal data through our Contact Us page. Deleting your account erases your name, your profile details and your generated media; we keep your email address with a minimal account record, together with payment records, only as long as we need them to prevent fraud and abuse and to meet accounting and legal obligations. Uninstalling the App will also stop further data collection from your device.

Security

We use industry-standard measures to protect your data, but no method of storage or transmission is 100% secure. We recommend enabling device security features such as passwords or biometric locks.

Content Restrictions

The following are prohibited on our platform:

  • Illegal activities
  • Hate speech, harassment, and discrimination
  • Pornographic or excessively violent content
  • Sexual, nude or intimate imagery of any real person without their consent, including AI-generated “deepfake” imagery
  • Any sexual content involving minors
  • Using another person’s face, voice or likeness without their permission
  • Intellectual property infringement
  • False or misleading information
  • Malware, spam, phishing
  • Self-harm or suicide promotion
  • Impersonation of others

Prompts and uploaded images and videos are checked by automated moderation before a generation starts, and requests that break these rules are blocked. Our Terms of Use explain how we enforce them.

Opting Out

  • Disable cookies in your browser settings
  • Request removal from personalized advertising by emailing us
  • Deactivate your account at any time via this page

Changes to This Policy

We may update this Privacy Policy periodically. Changes take effect upon posting. Major updates may also be communicated via email, Website notices, or App notifications.

Contact Us

For any questions about this Privacy Policy, please contact us through our Contact Us page.