Privacy Policy

Overview

Information We Collect

• Google account information (name, email address, profile picture) obtained through Google sign-in
• Video and audio you upload or record in the editor (recording uses your camera and microphone only while you record), and the transcript we make of it. These can show your face and voice and those of other people
• Your brand profile: name, what you make, audience, tone, offer, social links, colours, fonts, logo, voice choice and brand files
• Ideas, scripts, edit requests (typed or spoken), reference links you add, and problem reports you send
• Generated outputs you accept, edit, or save (scripts, post copy, pictures, voiceovers, and exported videos)
• Payment and billing information processed securely by Stripe (we never store your card details on our servers)
• Communications you send to us (support requests, feedback)

• Usage data: pages visited, features used, credit use, and activity records of what was made or exported (ids and file sizes, not the content)
• Which edits you keep or undo and the styles you pick, used to tailor your own future edits
• Device information: browser type and version, operating system, screen resolution
• Network information: IP address, approximate geographic location (country/region level)
• Cookies and similar technologies for session management and analytics
• Log data: access times, referring URLs, error logs
• Voice commands in the editor are recognized by your browser's built-in speech recognition, which your browser's maker may process under its own policy. We receive only the resulting text

To edit your footage we process the faces and voices in it. We send a few still frames of your video to an AI model provider to find where a face is in the frame, so that captions and graphics stay clear of it, and we send the audio track to a transcription provider to make captions. We use this only to make your edit. We do not ourselves create or keep face templates, faceprints or voiceprints, we do not use your face or voice to identify you or anyone else, and we keep only a few face positions and the transcript with your project. Face positions are deleted when you delete the upload, the project or your account, and in any case within 1 year after the upload. Some laws treat face and voice data as biometric information, so upload footage of other people only as described in the Terms. You can delete your uploads or your account at any time (Section 6).

• We do not collect precise geolocation data
• We do not access your Google Drive, YouTube account, or other Google services beyond sign-in
• We do not store credit card numbers, bank account details, or other financial account information

How We Use Your Information

• Provide, operate, and maintain the Service
• Edit your footage into short videos: transcribe it, plan and apply edits, place captions and graphics around the speaker, mix sound, and render exports
• Tailor suggestions to your own past edits and brand profile (never shared with other accounts)
• Process payments and manage subscriptions and credits
• Authenticate your identity and manage your account
• Communicate with you about your account, billing, and Service updates
• Improve, optimize, and develop new features for the Service
• Detect, investigate, and prevent fraud, abuse, and security incidents
• Comply with legal obligations and enforce our Terms of Service
• Send promotional communications (with your consent where the law requires it, and with the ability to opt out at any time)

We analyze data generated inside the Service (the formats and styles chosen and aggregate usage patterns, never the content of your uploads) in aggregated and de-identified form, to understand what works and to improve the Service. This analysis is not tied to your name, email, or any identifier that singles you out, and we never sell your personal information. Where required, our legal basis is our legitimate interest in operating and improving the Service; you may object to this processing of your de-identified product data at any time by contacting us at the address in Section 14.

• Making your shorts (your uploads, prompts, captions, voice and exports): contract, because we need it to provide the Service you signed up for
• Account, sign-in, credits and support: contract
• Payments, tax and accounting records: contract and legal obligation
• Security, fraud and abuse prevention, and handling copyright and content reports: legitimate interests in keeping the Service and its users safe, and legal obligation where a law requires it
• Usage analytics and improving the Service (de-identified product data): legitimate interests in running and improving the Service
• Product news email: consent, which you give by ticking the box at sign-up and can withdraw at any time with the unsubscribe link
• Optional cookies: consent
• Responding to legal requests: legal obligation

New accounts get a welcome bonus, and we give a daily sign-in bonus and a first-purchase bonus. So that each person gets them once, we keep:

• A one-way hash of your normalized sign-in email (lowercased and trimmed), not the email itself
• A salted one-way hash of your IP address (for IPv6, of its network prefix), used to limit how many accounts one network can create
• The card fingerprint our payment processor gives us for a card payment. It identifies the same card again but is not the card number, and we cannot charge with it

If you join from a friend's invite link, your friend's invite list shows your first name and last initial (or "A friend"), when you joined, whether you made a purchase and the reward status. It never shows your email address or what you spent.

We send account and billing emails, such as receipts and notes about your plan. We may also send a few emails about your use of the Service: a welcome, a reminder about a short you started, tips in your first week, a note when your credits run low, and a note after a long break. If you agreed at checkout to hear from us, we may email you about a checkout you did not finish. Marketing emails go only to people who agreed to them, and every one has an unsubscribe link. When you click a link in one of these emails, we record the click. A small share of accounts, picked at random, gets none of these marketing emails, so we can measure whether they help.

AI Processing and Training

• An AI model provider for ideas, scripts, edit plans, chat edits, post copy and checks, and to locate the speaker's face on a few still frames of your footage
• Image generation providers for pictures, characters and presenters in generated shorts
• A voice synthesis provider for voiceovers, using stock and public library voices (we do not clone voices)
• A transcription service that receives the audio track of your uploads
• Render compute that assembles your exports
• A cloud storage provider that holds encrypted backups of our database for up to 35 days

How We Share Your Information

• Service providers that help us operate the Service: sign-in and database hosting, payment processing, media storage and delivery, background jobs, email, application hosting and analytics, and the AI, voice, image, transcription and render providers in Section 4. Each is named on the subprocessors page
• Our staff: a small number of authorized staff can see account details, titles, credit records, activity records and problem reports in our admin tools to provide support, prevent abuse and keep the Service running. They do not browse your media except to resolve a problem you report or a legal request
• The person who invited you: if you join with an invite link, your inviter sees your first name and last initial and whether you joined or made a purchase, never your email
• Legal authorities when required by law, legal process, or to protect our rights, property, or safety
• Business transfers: in connection with a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity

YouTube API Services

Connected Assistants

• What we receive: only what the assistant sends with each request, such as a topic, an edit asked in your words, a style, length or writer choice, a YouTube channel link for a channel check, or brand kit settings. We do not receive the rest of your conversations with the assistant. Videos and pictures reach us only through a one-time upload link that you open yourself
• What the assistant receives: your plan name and credits, your shorts' titles, status, scripts and post copy, prices, your brand kits, channel check results, and short-lived links to your exports and preview images. The assistant's provider handles that data under its own terms and privacy policy, not ours
• Sign-in tokens: the assistant gets an access token that lasts one hour and a renewal token that expires after 30 days without use. We store only a one-way hash of each token
• What we keep: a record of each request with the tool, the time, the outcome, the credits charged and the ids of the shorts, quotes or uploads involved, but not the words sent with it. A price quote keeps the request it priced, so the action charges exactly that quote. These are activity records, kept as Section 6 describes and deleted with your account
• Processing and training: requests from an assistant are processed the same way as in the app, including by the providers in Section 4. We do not use what an assistant sends us, or what we return to it, to train AI models
• Disconnecting: open Settings, Connected apps, and choose Disconnect. The connection and its tokens stop working at once. You can also set a daily credit cap for each connection there

Data Retention and Deletion

• Account data is retained for as long as your account is active
• Uploads, recordings, generated media and exports are kept while your account is active so you can edit and export them again, and stored media may be removed after a limited period, so keep your own copy of anything you need
• Uploads that you start but never use are removed automatically after about 2 days, and uploads that were never completed are removed within about a day
• If every paid plan has ended for 30 days, with no activity and no credits left, we may remove your media files. Scripts, transcripts and settings remain until you delete your account
• You can delete your account yourself in Settings. This cancels billing and removes your media and records, keeping only the one-way email hash described below. You can also delete any video yourself in the Library or the room, which removes its files and exports and charges nothing. For anything else, email legal@viewgum.com. We complete those requests within 30 days, except where retention is required by law
• Backups are encrypted and kept for up to 35 days. Deleted data can remain in them until the backup that holds it expires
• If you unsubscribed, we keep your address on a do-not-email list so we never email you again
• Problem reports you send are kept to fix the problem. If you delete your account they are kept without the link to your account
• Payment records are retained as required by tax and accounting laws (typically 7 years)
• Activity records are kept for 90 days or more, and error records, which hold ids and a short technical message and never your content, are deleted after 30 days. Server logs are retained for up to 90 days
• We keep a one-way hashed form of your sign-in email (not the email itself), also after your account is deleted. It is used only so a welcome or daily bonus is given once per email, a deleted account is not recreated to get a new welcome bonus, and, for accounts removed for abuse or a legal takedown, the same account cannot be recreated. The hash cannot be reversed to your email and is not used for anything else
• Hashed IP addresses used for sign-up limits are kept only as long as those limits need them. Card fingerprints are kept with the purchase records they belong to

Children's Privacy (COPPA)

Your Privacy Rights

• Access your personal data we hold
• Correct inaccurate personal data
• Delete your account and associated data
• Opt out of marketing communications at any time

• Right to know what personal information is collected and how it is used
• Right to delete personal information
• Right to opt out of the "sale" or "sharing" of personal information (we do not sell or share your personal information for cross-context behavioral advertising)
• Right to non-discrimination for exercising your privacy rights
• Right to limit the use of sensitive personal information (we do not collect sensitive personal information as defined by CPRA)

• Right to access, rectify, and erase your personal data
• Right to object to processing based on our legitimate interests
• Right to data portability (receive your data in a structured, machine-readable format)
• Right to restrict or object to processing
• Right to withdraw consent at any time (without affecting the lawfulness of prior processing)
• Right to lodge a complaint with your local data protection authority

Cookies and Tracking

• Essential cookies: Required for authentication, session management, and security. These cannot be disabled.
• Analytics: We use cookieless page analytics to count page views, page speed and a few steps such as starting sign-in, in aggregate. It sets no cookies, records no name or email, and does not track you across other sites.
• Link attribution: When you arrive from a link with a campaign tag, a first-party cookie (vg_attr) remembers which link brought you, for up to 90 days, so we know which links work. We do not set it for visitors in the EEA, the UK or Switzerland, or when your browser sends Global Privacy Control.
• Editor preferences: We also store your editor preferences (theme, layout, which ideas you have seen) in your browser. These stay on your device.

Data Security

• Encryption in transit (TLS/HTTPS) for all data transmissions
• Encryption at rest for stored data
• Access controls on our database
• OAuth-based authentication (no passwords stored)
• Webhook signature verification on billing events
• Regular security reviews of our infrastructure

International Data Transfers

Do Not Track

Changes to This Policy

Contact Us