Privacy Policy (English)

What we collect

A user identifier from our authentication provider (Clerk); the content you upload (videos, transcripts, captions, cover images, brand settings); encrypted access tokens for the social platforms you connect; and an activity log containing action summaries only. We never store your password.

Where your data goes

• Transcription: the audio track of your video is sent to OpenAI (Whisper API).
• Caption generation: the transcript and your brand settings are sent to Anthropic (Claude API).
• Publishing: your video, caption and cover are sent to the platforms you have personally authorised — Facebook, Instagram, Threads, YouTube, TikTok and Bluesky.
• No other step sends data outside this system.

Both OpenAI and Anthropic state that content submitted through their paid APIs is not used to train their models by default. This service uses those APIs exclusively.

Google / YouTube data usage

We request exactly two Google scopes, and only when you explicitly connect your YouTube account. youtube.upload is used to upload the video, title and description you prepared in this service to your own YouTube channel as a Short. youtube.readonly is used solely to read your channel name and channel ID so we can show you which channel a video is about to be published to; the YouTube Data API offers no narrower scope for that.

We do not read or modify your existing videos, playlists, analytics, comments, subscribers or revenue data, and we never subscribe, comment or like on your behalf.

Limited Use disclosure: this application's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, Google user data is used only to provide the publishing feature you requested; it is never used for advertising, never sold or transferred to third parties, advertising platforms, data brokers or information resellers, and never used to train AI or machine learning models. No humans read this data except as required for legal compliance, security, or with your explicit consent.

Use of YouTube features is also subject to the YouTube Terms of Service and the Google Privacy Policy. You may revoke access at any time from the Connections page in this service, which immediately deletes the stored refresh token, or at https://myaccount.google.com/permissions.

TikTok data usage

We request exactly two scopes. user.info.basic is used to display which TikTok account a video will be published to, and to retrieve the privacy options that account is actually allowed to use. video.publish is used to publish the video you prepared in this service to your own TikTok profile.

We do not read your video list, follower counts or any analytics, and we never follow, comment or send messages on your behalf. Privacy level, interaction settings and commercial content disclosure are chosen by you before every publish; the system never selects them for you. You may disconnect at any time from the Connections page, or revoke access in the TikTok app.

Retention and deletion

Your content stays until you delete it. Deleting your account data from the "Account & Data" page removes all content, files and stored access tokens. Posts already published to a platform remain on that platform and must be deleted there.

Security

Access tokens are encrypted at rest with AES-256-GCM and decrypted only at the moment of publishing. Media is served through pre-signed URLs that expire after one hour. Uploaded cover images are stripped of EXIF metadata, including GPS coordinates. Each user's data is isolated and every query is scoped to the authenticated identity.