Privacy Policy

We collect three categories of information.

1. Information you provide directly. When you create an account or use the Service, you provide your name, email address, billing information, and any preferences (clip volume, posting schedule, branding assets such as a watermark or logo) you choose to configure.

2. Information you authorize us to access on your behalf. To deliver the Service we need permission, granted via OAuth, to read and post on your behalf to third-party platforms such as YouTube, Instagram, Facebook, and TikTok. With your authorization we receive access tokens, refresh tokens, account identifiers, channel and page metadata, and (for source content) public video metadata, transcripts, and comments.

3. Information we collect automatically. When you use the Service we collect technical data such as IP address, browser type, device identifiers, pages visited, timestamps, and approximate geolocation derived from IP. This data helps us keep the Service secure, performant, and reliable.

We use information to:

• operate the Service — generating, rendering, scheduling, and publishing your clips;
• authenticate you and the third-party accounts you connect;
• process payments and manage your subscription;
• send you transactional notifications (upload status, OAuth re-consent prompts, billing receipts);
• improve our AI clipping models, viral-scoring, and quality of the rendered output;
• diagnose problems, prevent abuse, and enforce our Terms of Service;
• comply with legal obligations.

We do not sell your personal information. We do not share it with advertisers for cross-context behavioural advertising.

Vibeclipper uses OAuth-based authentication for both account sign-in and for connecting your social platforms. We do not see, store, or ever ask for your platform passwords.

When you connect a social account (for example a YouTube channel via Google OAuth or an Instagram account via Facebook Login for Business), your platform issues us an access token and, where supported, a refresh token. We persist these tokens encrypted at rest using AES-256-GCM with keys held only by our servers. Tokens are used solely to perform the actions you have configured (reading source video metadata, publishing clips on your behalf) and are decrypted only inside short-lived worker processes.

You may revoke our access at any time, either from inside the Service’s connections page or directly from your provider’s security settings (e.g. Google account permissions or Meta Business Integrations). Revocation immediately disables further publishing on that platform but does not retroactively recall clips already posted.

Vibeclipper uses cookies and equivalent browser storage (such aslocalStorage and sessionStorage) for a small set of strictly-necessary purposes. We do not use third-party advertising cookies.

Essential

Authentication, session continuity, CSRF protection, and OAuth state tokens. Required for the Service to work.

Functional

Remembering your dashboard preferences and onboarding progress.

Analytics

Aggregate, privacy-respecting usage analytics so we can see which features are actually used. We do not link these signals to your content or identity for advertising purposes.

Most browsers let you block or delete cookies; doing so may prevent you from signing in or completing OAuth flows.

To deliver the Service, Vibeclipper integrates with the following third-party APIs and processors. Each operates under its own privacy policy, linked below.

• Google & YouTube — for OAuth sign-in (where applicable), reading public video metadata and comments via the YouTube Data API, and publishing Shorts via the YouTube Data API v3 videos.insert endpoint. Use of YouTube data is subject to the YouTube API Services Terms of Service and the Google Privacy Policy.
• Meta (Facebook & Instagram) — for OAuth-based account connection and publishing Reels via the Instagram Graph API and Facebook Login for Business. Use of Meta data is governed by the Meta Privacy Policy.
• OpenAI — for transcript analysis (viral-moment detection, captioning intelligence, metadata generation) using the GPT family of models. We do not use OpenAI to train third-party models on your data. See the OpenAI Privacy Policy.
• Groq — our preferred speech-to-text provider (Whisper). Audio is sent only for transcription and is not retained for training. See the Groq Privacy Policy.
• Object storage — rendered clips, thumbnails, and intermediate audio extracts are stored in S3-compatible storage (Cloudflare R2 or AWS S3 in production, MinIO in local development) controlled by Vibeclipper.
• Stripe — payment processing. Vibeclipper never sees or stores your full card number; Stripe handles card data under PCI-DSS Level 1. See the Stripe Privacy Policy.

We share with these processors only the minimum data needed for them to perform their function on our behalf, and only under contractual obligations equivalent to this Privacy Policy.

You retain ownership of the source videos you direct Vibeclipper to process and of the clips we generate from them. By using the Service you grant us a limited, worldwide, non-exclusive, royalty-free licence to ingest, transcode, transcribe, analyse, render, and publish that content solely to deliver the Service to you. This licence terminates when you delete the content or close your account, except for backups and copies needed to comply with law or to resolve disputes.

You are responsible for ensuring you have the rights to the source videos you connect, including rights granted by the original creator, campaign, or platform. Vibeclipper is a tool; you remain the publisher of record on your social accounts.

We do not use your content, transcripts, or comments to train third-party AI models. Aggregate, de-identified signals (e.g. clip duration distributions, scoring outcomes) may be used to improve our own models and the quality of Vibeclipper’s output.

Paid plans are billed via Stripe on a monthly or annual recurring basis. Vibeclipper stores only the metadata Stripe returns to us (a customer id, the last four digits of your card, the card brand, subscription status, invoice history). We do not store your full payment instrument.

Refunds, plan changes, and quota grants are documented in our Terms of Service. Tax invoices and receipts are available from the dashboard at any time.

For questions about a specific charge, contact billing@vibeclipper.ai.

Clips, captions, titles, descriptions, and hashtags produced by Vibeclipper are generated using machine-learning systems including, but not limited to, transcription, large language models, and rule-based heuristics. Outputs are statistical predictions, not editorial judgements.

As a result, AI-generated content may occasionally contain factual errors, mis-transcriptions, mis-attributions, or copy that is inappropriate for a particular audience or platform. Vibeclipper does not warrant that any specific clip will be accurate, comply with any platform’s community standards, achieve any minimum performance, or be suitable for any commercial purpose.

You are responsible for reviewing clips before publication when applicable, for following each destination platform’s rules, and for any disclosures (including AI-generated-content labels) that those platforms or applicable law may require.

We retain personal data only as long as needed for the purposes described in this policy.

• Account data is retained until you delete your account, after which it is removed within 30 days except where law requires longer retention.
• OAuth tokens are deleted immediately when you disconnect a social account.
• Source videos and intermediate working files are deleted within 7 days of pipeline completion.
• Rendered clips are retained for 90 days, then archived or deleted unless your plan provides longer storage.
• Transcript caches keyed to public video identifiers may be retained indefinitely to reduce processing costs; they are not associated with any individual user account.
• Billing and tax records are retained for the period required by applicable law (typically 7 years).

Depending on where you live, you may have rights under privacy laws such as the EU/UK GDPR or the California Consumer Privacy Act (“CCPA”), including the right to:

• access the personal data we hold about you;
• correct inaccurate data;
• delete your data;
• port your data to another service;
• object to or restrict certain processing;
• withdraw consent at any time, where processing is based on consent;
• lodge a complaint with your local data protection authority.

To exercise any of these rights, write to privacy@vibeclipper.ai. We respond within the timelines required by applicable law (typically 30 days).

We protect your information using transport encryption (TLS 1.2+ in transit), at-rest encryption for sensitive material such as OAuth tokens (AES-256-GCM), least-privilege access controls, audit logging, and routine dependency hygiene. No system is perfectly secure; if you believe you have found a vulnerability, please contact security@vibeclipper.ai.

Vibeclipper is operated from the United States and uses processors located in the United States and the European Economic Area. Where required, we rely on Standard Contractual Clauses or equivalent mechanisms to lawfully transfer personal data internationally.

Vibeclipper is not directed to children under 13 (or under the minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact privacy@vibeclipper.ai and we will delete it.

We may update this Privacy Policy from time to time. When we make material changes we will update the “Effective” date at the top of this page and, where required, notify you by email or in-product banner before the changes take effect.

For questions about this Privacy Policy or our data practices:

Entity

Vibeclipper Technologies, Inc.

Mail

1 Market Street, Suite 100
San Francisco, CA 94105
United States

Privacy

privacy@vibeclipper.ai

Legal

legal@vibeclipper.ai

Support

support@vibeclipper.ai

Security

security@vibeclipper.ai