Privacy Policy

Vidax generates videos from the briefs you write. This policy explains what we collect, why, and what we never do with it. The service is operated by Social Jool LLC, 8th Dover, Delaware, United States ("we", "us"), which is the data controller for the information described here.

What we collect

• Account details. Your email address and display name, so you can sign in and we can attribute your projects to you.
• Your projects. The briefs you write and the scripts, audio and video we produce from them.
• Connected accounts. If you connect a YouTube channel, the access credentials needed to publish on your behalf — see below.
• Billing records. Your plan, subscription status, minute balance and which invite code introduced you. Payments are processed by Whop — we receive confirmation that a payment succeeded and never see your card number.
• Usage data. Product analytics (PostHog) recording page views and feature use against your account id, plus standard server logs including IP address, used to keep the service secure and to work out what to improve.

YouTube

Connecting a channel is entirely optional; Vidax works without it. When you do connect one, Vidax uses YouTube API Services. By using that feature you agree to the YouTube Terms of Service, and Google's handling of your data is governed by the Google Privacy Policy.

We request only two permissions, and use them only as described:

• youtube.upload — to upload the videos you ask us to publish. We never upload anything you have not explicitly told us to.
• youtube.readonly — to read your channel's name and picture, so the app can show you which channel is connected.

We store a Google refresh token so scheduled uploads work while you are away. It is held server-side in a database table that is unreachable from any browser, is never sent to your browser or any third party, and is used for nothing but the two purposes above. We do not read your videos, comments, analytics, or subscriber data.

Revoking access

You can disconnect your channel at any time from inside Vidax, which revokes the token with Google immediately and deletes it from our database. You can also revoke it yourself at Google's security settings, which cuts off our access whether or not you tell us.

What we never do

• We do not sell your data, and we do not share it for advertising.
• We do not use your projects to train models.
• We do not post to your channel without an explicit instruction from you.

Service providers

We use third parties to run the product — hosting, storage, authentication, and the AI models that write and render your videos. They process data only to provide those services to us.

Why we are allowed to hold it

Where the GDPR or UK GDPR applies, we rely on: performance of a contract for your account, projects and billing; legitimate interests for security logging and product analytics; and consent where you connect a YouTube channel, which you can withdraw at any time by disconnecting it.

Your rights

Depending on where you live, you may have the right to access a copy of your data, correct it, delete it, object to or restrict processing, and receive it in a portable format. California residents additionally have the right to know what is collected and to opt out of "sale" or "sharing" of personal information — we do neither. Exercise any of these by emailing [email protected]; we will respond within 30 days and will not discriminate against you for asking.

How long we keep it

Projects and their files are kept while your account is open and deleted when you delete them or close your account. Billing records are kept for as long as tax and accounting law requires (generally seven years). Server logs are kept for a short operational period. Deletion requests are honoured within 30 days, except where the law requires us to retain a record.

Where your data goes

We are a US company and our providers are largely US-based, so your data is processed in the United States and other countries where those providers operate. Where data is transferred out of the UK or EEA, we rely on the providers' standard contractual clauses or equivalent safeguards.

Children

Vidax is not for anyone under 18. We do not knowingly collect data from children; if we learn that we have, we delete it.

Deleting your data

Deleting a project removes its files. To delete your account and everything attached to it, email [email protected] and we will erase it.

Changes

If this policy changes materially we will email account holders and update the date above.

Contact

Social Jool LLC, 8th Dover, Delaware, United States. Questions about this policy or your data: [email protected].