Skip to main content

Privacy Policy

Effective September 30, 2026

This Privacy Policy explains what information VidPost ("VidPost", "we", "us") collects when you use vidpost.app and related services (the "Service"), how we use it, who we share it with, and the choices you have.

1. Information we collect

Account information

  • Name (optional), email address, and a password (stored only as a secure hash), or a magic-link login.

Content you create

  • Ideas, prompts, questionnaire answers, topic profiles, scripts, and any media you upload.
  • Generated media (videos, images, voiceover audio, subtitles, thumbnails, and music), which we store so you can edit, download, and publish it.

Connected social accounts (TikTok)

  • When you connect a TikTok account we receive account identifiers, display name, avatar, OAuth access and refresh tokens, granted permissions, and token expiration information. With the relevant permissions, we also receive your username, verification status, profile link, and profile description.
  • Tokens are encrypted at rest and used to identify your connected account, check its available publishing settings, publish or upload content you approve, and retrieve analytics when you grant the relevant permissions. Analytics include follower, following, likes, and video counts, plus views, likes, comments, and shares for supported posts. We do not read private messages or lists of your followers or following accounts.
  • We store publishing identifiers, processing status, failure reasons, post links, available engagement counts, and your posting choices and approval record so you can track posts and control what is shared. A video you share yourself is sent to TikTok only after you review and approve it. A Video Series episode is sent either after you review it, or automatically at its scheduled time if you turned on automatic TikTok posting for that series and confirmed its posting settings. In that case we also store that confirmation and the settings it covers.

Usage and device data

  • Log data such as IP address, browser type, pages viewed, and actions taken, used for security, debugging, and improving the Service. If a page breaks, your browser also sends us an error report (the error, the page address and your browser type) so we can fix it. That happens whatever you choose in the cookie notice, and it stores nothing in your browser.
  • Cookies and similar browser storage: sign-in and security cookies, plus first-party analytics ids. Cookies and similar storage below explains each one and how to turn analytics off.

Cookies and similar storage

We use a few cookies and similar browser storage (localStorage and sessionStorage). All of them are our own. No third-party analytics or advertising scripts run on VidPost, and we don't use advertising cookies.

  • Strictly necessary. Sign-in session and security (CSRF) cookies keep you signed in and protect the Service against forged requests. We also store your cookie choice (vp_consent, in localStorage) so we remember your answer. The Service needs these to work, so choosing Reject doesn't remove them.
  • Analytics. A random visitor id (vp_vid, in localStorage) and session keys (vp_sid, vp_sla and vp_smeta, in sessionStorage) let us count visits and page views and see what to improve on the site. They are sent only to VidPost's own servers, and we don't give them to any third party. If you're signed in, these visits are linked to your account.
  • Preferences for your visit. Some pages keep small settings in sessionStorage, such as whether showreel previews play and an idea you typed into the demo so it carries into signup. They clear when you close the tab.

Your choice. Choosing Reject in the cookie notice turns analytics off and deletes those analytics ids from your browser. To change your mind later, use Cookie settings at the bottom of this page, or clear this site's data in your browser settings and the notice will ask again.

2. How we use information

  • To provide the Service: generate scripts and media, render videos, store your library, and schedule or publish posts you request.
  • To operate automated features you configure, such as Video Series that generate and publish episodes on a schedule. TikTok episodes post automatically only when you turn that on for the series and confirm its TikTok posting settings; otherwise each one waits for your review and approval. Other connected platforms publish according to your series settings.
  • To communicate with you about your account, generation results, and important changes.
  • To secure the Service, prevent abuse, and comply with legal obligations.

3. AI processing

Creating your content requires sending relevant inputs to AI infrastructure providers, for example, language models that write scripts and captions (such as Anthropic and OpenAI), image-generation services, text-to-speech voice providers, music generation, and speech-to-text for subtitle timing. These providers process your inputs to return the generated output and handle data under their own terms. We do not use your content to train our own models.

4. How we share information

We share information only with service providers that help us run VidPost:

  • Hosting and storage: Vercel (application hosting and media storage), Neon (database), Google Cloud (video rendering).
  • Job processing: queue infrastructure that coordinates video generation and scheduled posting.
  • AI providers: as described in Section 3, to generate the content you request.
  • Platforms you connect: when you publish or schedule a post, we transmit the video, caption, and settings you chose to that platform (e.g., TikTok).
  • Legal: if required by law, or to protect the rights, safety, and integrity of VidPost and its users.

We do not sell your personal information, and we do not share it for third-party advertising.

5. Data retention and deletion

  • Your content stays in your library until you delete it or delete your account.
  • Disconnecting a social account immediately deletes our stored access tokens for it and stops all scheduled posting to it. You can also revoke VidPost's access from inside the platform's own security settings.
  • Deleting your account removes your personal information and content within a reasonable period, except records we must keep for legal, security, or billing purposes.
  • To request deletion of your account or data, email support@vidpost.app.

6. Security

All traffic to the Service is encrypted in transit (HTTPS). Social-platform tokens are encrypted at rest, passwords are stored only as salted hashes, and access to production systems is restricted. No method of transmission or storage is 100% secure, but we work to protect your information with industry-standard measures.

7. Your rights

Depending on where you live (for example, under the GDPR or the CCPA/CPRA), you may have rights to access, correct, export, restrict, or delete your personal information, and to object to certain processing. You can exercise most of these directly in the app (edit your profile, delete videos, disconnect accounts, delete your account) or by emailing support@vidpost.app. We will respond within the time required by applicable law, and we will not discriminate against you for exercising your rights.

8. Children

The Service is not directed to children and may not be used by anyone under 18. We do not knowingly collect personal information from children; if you believe a child has provided us information, contact us and we will delete it.

9. International transfers

We are based in the United States and process data there and in the regions where our service providers operate. Where required, we rely on appropriate safeguards for international transfers.

10. Changes to this policy

We may update this policy as the Service evolves. If a change is material we will give you reasonable notice (for example, by email or in the app). The effective date above always reflects the current version.

11. Contact us

Privacy questions or requests: support@vidpost.app.

Questions? Contact us at support@vidpost.app.