Back

Privacy
Policy

1. Introduction

Vireel ("we", "us", "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and share your information when you use our AI-powered video clip generation platform ("Service").

2. Information We Collect

Account Information. When you register, we collect your name, email address, and authentication credentials. If you sign in with Google, we receive your Google profile name and email.

Payment Information. When you purchase a plan, payment is processed by Stripe. We store your Stripe customer ID for subscription management but do not store credit card numbers, CVVs, or full card details on our servers.

Content You Provide. Videos you upload and URLs you submit for processing. Uploaded videos are deleted from our servers immediately after processing. Generated clips are stored temporarily and auto-expire.

Usage Data. We collect information about how you use the Service, including clip generation history, feature usage, and error logs. This helps us improve the Service.

Technical Data. IP address, browser type, device information, and access timestamps collected automatically through server logs.

3. How We Use Your Information

• Service Delivery: To process your videos, generate clips, burn captions, and deliver results.
• Account Management: To manage your account, token balance, and subscription.
• AI Processing: Video content is analyzed by AI models for scene scoring, transcription, and caption generation. Content is processed in memory and not retained after clip generation.
• Communication: To send account-related emails (confirmation, password reset, plan changes). We do not send marketing emails without your consent.
• Improvement: To analyze usage patterns and improve the Service, fix bugs, and develop new features.
• Security: To detect and prevent fraud, abuse, and unauthorized access.

4. Third-Party Services

We use the following third-party services to operate Vireel:

Service	Purpose	Data Shared
Supabase	Authentication, database, file storage	Account info, metadata, clips
Stripe	Payment processing	Email, payment method (processed by Stripe)
OpenAI	AI scene analysis, caption rewriting	Transcriptions, scene metadata (no raw video)
Railway	Server hosting	Server logs, IP addresses
TikTok	Optional: publish generated clips directly, pull back analytics for performance-based learning	Video file + caption (on publish), view/like/share/comment/save counts (on analytics pull), your TikTok user ID and display name (on connect)

Each third-party service has its own privacy policy. We encourage you to review them. We do not sell your personal data to any third party.

TikTok Integration (Optional)

If you choose to connect your TikTok account to Vireel via the official TikTok Developer API, we request permission to:

• Read your basic profile information (user ID, display name, avatar) to confirm which account is connected.
• Retrieve engagement metrics (views, likes, shares, comments, saves, completion rate) for posts you generate with Vireel, so our algorithm can learn which clip styles perform best for you.
• Optionally publish a clip you generated directly to your TikTok account, at your explicit request, on a per-post basis.

We do not: access videos you did not post through Vireel, read your TikTok inbox or messages, follow/unfollow users on your behalf, post content without your explicit per-post confirmation, or share your TikTok data with other third parties.

You can revoke Vireel's access to your TikTok account at any time from the Vireel dashboard or directly from your TikTok account settings (Settings → Privacy → Third-party apps). When you revoke access, we delete your TikTok access tokens within 24 hours; engagement metrics already fetched are retained only for the purpose of training our scoring model and are never associated with personally identifying TikTok data.

Our use of information received from the TikTok APIs adheres to the TikTok Developer Terms of Service.

5. Data Retention

• Uploaded videos: Deleted immediately after processing is complete. We do not retain original video files.
• Generated clips: Stored for the retention period defined by your plan (typically 48-168 hours), then automatically and permanently deleted.
• Account data: Retained while your account is active. Deleted within 30 days of account deletion request.
• Token history: Transaction records retained for 12 months for accounting purposes.
• Server logs: Retained for 30 days for security and debugging purposes.

6. Data Security

We implement industry-standard security measures to protect your data:

• All data transmitted between your browser and our servers is encrypted using TLS (HTTPS).
• Database access is protected by Row-Level Security (RLS), ensuring users can only access their own data.
• API endpoints are protected with JWT authentication and rate limiting.
• Administrative access is restricted and requires elevated permissions.
• We regularly review our security practices and update them as needed.

While we strive to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

7. Your Rights

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data and account.
• Portability: Request your data in a machine-readable format.
• Objection: Object to processing of your personal data for certain purposes.
• Restriction: Request restriction of processing in certain circumstances.

To exercise any of these rights, contact us at privacy@vireel.xyz. We will respond within 30 days.

8. Cookies and Local Storage

Vireel uses minimal browser storage for essential functionality only:

• Authentication tokens: Stored in local storage to maintain your logged-in session.
• Preferences: UI preferences (e.g., sidebar state) stored locally on your device.

We do not use third-party tracking cookies, advertising cookies, or analytics cookies. We do not participate in cross-site tracking.

9. Children's Privacy

The Service is not directed to individuals under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.

10. International Data Transfers

Your data may be processed in countries other than your own. Our servers and third-party services operate in the United States and other regions. By using the Service, you consent to the transfer of your data to these locations. We ensure appropriate safeguards are in place for international transfers.

11. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal data we collect, the right to delete your data, and the right to opt out of the sale of personal data. We do not sell personal data.

12. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA) or United Kingdom, we process your data under the following legal bases: consent (where you have given it), contract performance (to provide the Service), and legitimate interests (to improve and secure the Service). You have the right to lodge a complaint with your local data protection authority.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or a notice within the Service at least 30 days before taking effect. The "Last updated" date at the top indicates the most recent revision.

14. Contact Us

For privacy-related inquiries, data requests, or concerns:

• Email: privacy@vireel.xyz
• General: legal@vireel.xyz