Privacy Policy

Last updated: September 7, 2026

VideoForge Studio ("VideoForge", "we", "us") operates the video automation service available at this website (the "Service"). This Privacy Policy explains what personal data we collect, why we collect it, and the choices you have about it.

1. Data we collect

• Account data: your email address, display name, and password (stored as a salted hash, never in plain text)
• Workspace data: niches, data/spreadsheet rows, prompts, generated scripts, card images, audio, and videos you create
• Social account connections: Facebook, Instagram, and TikTok page IDs and long-lived access tokens you authorize us to use for publishing
• Billing data: handled by Stripe — we never see or store your card number; we receive invoice/plan records only
• Contact data: name, email, and message when you use the contact form
• Device data: basic diagnostic data (IP address, user-agent, error logs) needed to operate and secure the Service

2. How we use your data

• To provide the Service: generate video content, schedule agents, and publish posts to the pages you authorize
• To manage your account, plan, and billing (via Stripe)
• To keep the Service secure and to prevent abuse or spam
• To respond to support and contact requests
• To send transactional notices (billing, agent failures, security alerts) — we do not sell your data and we do not send marketing email without consent

3. AI-generated content disclosure

VideoForge publishes AI-assisted content with the disclosure flag required by each platform (for example is_ai_generated=true, provenance_info for photos). We send whatever label the target platform requires; final platform policy remains yours to follow.

4. Third-party services

• Stripe — payment processing. Card data never touches our servers.
• OpenAI — used to generate scripts, titles, card images, and voiceovers from your prompts and data.
• Meta (Facebook/Instagram) and TikTok — the pages you connect, and the posts we publish for you.
• Google Sheets — only if you opt in to pull data from a spreadsheet you own.

Each provider processes data under its own privacy policy and data-processing terms.

5. How we protect your data

• Access tokens and API secrets are encrypted at rest (Fernet) and never shown in full in the UI
• Traffic is served over HTTPS
• Password hashes use a strong hash function
• Access to production data is restricted to the operators who need it

6. Data retention

We keep your data while your account is active. If you delete your account, your workspaces, niches, projects, agents, and generated files are removed. Backups may retain encrypted snapshots for a limited period and are then purged. Billing records are retained as required by law.

7. Your rights

Depending on where you live (for example under the GDPR or CCPA), you may have the right to access, correct, export, or erase your personal data, or to object to or restrict certain processing. To exercise these rights, contact us using the details below.

8. Children

The Service is not directed to children under 13 (or under 16 in the EU/EEA). If you believe a child has provided us personal data, contact us and we will delete it.

9. Changes to this policy

We may update this policy from time to time. Material changes will be posted on this page with a new "Last updated" date.

10. Contact

Questions about this policy: use the contact page or email [email protected].