Privacy Policy

1. Information We Collect

1.1 Account Information

When you register, we collect your name, email address, and password (stored as a salted hash). If you sign in through a third-party provider (Google, Facebook, or similar), we receive your profile name, email, and profile picture from that provider.

1.2 Connected Social Accounts

To publish videos on your behalf, we request OAuth tokens for platforms you choose to connect (YouTube, Facebook, Instagram, TikTok). These tokens are encrypted at rest and are used solely to upload and schedule content you authorize. We do not read your private messages, contacts, or any data beyond what is necessary for publishing.

1.3 Content You Create

We store the videos, scripts, images, voiceovers, automation settings, and other content you generate or configure through the Service. This data remains associated with your account and is not shared with other users.

1.4 Usage Data

We automatically collect standard technical information such as IP address, browser type, device type, pages visited, and timestamps. This helps us maintain, improve, and secure the Service.

1.5 Cookies

We use essential cookies for authentication and session management. We do not use advertising or third-party tracking cookies.

2. How We Use Your Information

• Provide, operate, and maintain the Service.
• Generate and publish video content as directed by you.
• Authenticate your identity and manage your account.
• Communicate with you about your account, updates, or support requests.
• Monitor usage patterns to improve performance and reliability.
• Comply with legal obligations.

3. Third-Party Services

We integrate with the following categories of third-party services:

• AI Providers — We send prompts and content parameters to AI model providers (e.g., OpenAI, Anthropic, Replicate) to generate scripts, images, and voiceovers. These providers process data under their own privacy policies.
• Social Media Platforms — When you connect YouTube, Facebook, Instagram, or TikTok, we use their APIs to publish content. These platforms govern data they receive under their own policies.
• Hosting & Infrastructure — Your data is stored on servers provided by our hosting providers, secured with industry-standard encryption.

4. Data Retention

We retain your account data and content for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law. Aggregated, anonymized analytics data may be retained indefinitely.

5. Data Security

We implement industry-standard security measures including encryption in transit (TLS), encryption at rest for sensitive credentials (OAuth tokens, API keys), secure password hashing, and regular access reviews. However, no system is 100% secure, and we cannot guarantee absolute security.

6. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access, correct, or delete your personal data.
• Export your data in a portable format.
• Withdraw consent for data processing.
• Object to or restrict certain processing activities.
• Lodge a complaint with a supervisory authority.

To exercise any of these rights, contact us at the email address listed below.

7. Children's Privacy

The Service is not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If we learn that we have collected data from a child, we will promptly delete it.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the “Last updated” date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

9. Contact Us

If you have questions about this Privacy Policy or your data, please contact us at privacy@narrateai.com.