VidForge

Privacy Policy

Last updated: May 19, 2026

This Privacy Policy explains how VidForge (“VidForge”, “we”, “us”, or “our”) collects, uses, stores, and shares information when you use vidforge.tv and the VidForge application (the “Service”). By using the Service, you agree to this Policy.

The short version

  • We collect only the data needed to run the Service and bill you.
  • We never sell your data — including any data we receive from Google.
  • We never train AI models on your content, and our AI providers are contractually barred from doing so.
  • You can disconnect YouTube or delete your account at any time from Settings.
  • We use no third-party advertising trackers (no Google Analytics, no Meta Pixel).

1. Information we collect

Information you give us directly:

  • Your email address and password, or your Google sign-in identifier, when you create an account.
  • Optional profile details: display name and avatar image URL.
  • Payment information processed by Stripe. We receive billing metadata (plan, status, last four digits) but never your full card number.
  • Content you submit to our tools — for example video titles, descriptions, outlines, topics, and thumbnail images you upload.

Information collected automatically:

  • IP address, used for security logging and rate-limiting.
  • Browser type, request timestamps, and the routes you access.
  • Session cookies required to keep you signed in, and a short-lived CSRF cookie used during the OAuth flow.

Information from Google / YouTube — see Section 3.

2. How we use information

  • To provide the Service — run the tools you request, generate results, and store your history.
  • To bill you — process subscription payments, send receipts and renewal reminders.
  • For security — detect and prevent abuse, enforce rate limits, and respond to legal requests.
  • For communication — transactional emails (receipts, renewal reminders, security notices) always send; marketing email is opt-in only.

3. Google user data and YouTube API Services

VidForge uses YouTube API Services. When you connect your YouTube channel, you authorize VidForge — through Google OAuth — to access certain Google user data on your behalf.

What we access. With your authorization, VidForge accesses, through the official YouTube Data API and YouTube Analytics API: your channel's profile (ID, title, thumbnail, description, country, and statistics); your videos' metadata (titles, descriptions, tags, view/like/comment counts, durations, and publish dates); and channel-level analytics. Access is read-only — VidForge does not upload, edit, delete, or post anything to your channel.

How we use it. Google user data is used solely to provide and improve the VidForge features you request — for example, computing your Channel Audit, scoring titles against real search demand, and surfacing keyword and competitive context. We do not use Google user data for advertising.

Limited Use. VidForge's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data, we do not use it for advertising, and we do not transfer it to others except (a) as necessary to provide or improve the user-facing features you request, (b) to comply with applicable law, or (c) as part of a merger or acquisition, with notice to you.

AI processing of Google data. To generate certain results, limited Google user data — such as recent video titles and channel statistics — may be sent to our AI providers (OpenAI and Anthropic) for inference only. These providers are contractually prohibited from training their models on this data. See Section 5.

Your control. You can disconnect your YouTube channel at any time from VidForge Settings, which deletes the OAuth tokens we store. You can also revoke VidForge's access entirely from your Google Account permissions page. By connecting your channel you also agree to the YouTube Terms of Service and acknowledge the Google Privacy Policy.

4. Who we share information with

We use the following service providers (subprocessors) to operate VidForge:

  • Supabase — database, authentication, and file storage.
  • Vercel — application hosting and edge compute.
  • Stripe — payment processing (PCI-DSS Level 1).
  • OpenAI — primary AI provider.
  • Anthropic — fallback AI provider.
  • Resend — transactional email delivery.
  • Google / YouTube — data source under your OAuth authorization.

We share information only with these providers to operate the Service, in response to valid legal requests, or with your explicit consent. We do not sell personal information or Google user data.

5. AI providers — no training on your content

Content you submit to our AI tools is sent to OpenAI (primary) or Anthropic (fallback) for inference only. Both providers' API terms prohibit training their models on data submitted through their APIs, and we do not enable any feature that would broaden that use. Submitted content persists in their systems only for the limited abuse-monitoring window their terms permit (typically up to 30 days).

6. How long we keep information

  • Account data — until you delete your account, then removed within 30 days.
  • YouTube OAuth tokens — until you disconnect your channel or delete your account, then deleted promptly.
  • Tool result history — retained while your account is active; you can clear it from Settings.
  • Server and security logs — 30 days.
  • Uploaded thumbnails (signed-in) — auto-deleted after 30 days. Demo thumbnails submitted without an account are discarded immediately after analysis.
  • Invoice and payment records — 7 years, as required for tax and accounting.
  • Email delivery logs — 90 days.

7. Your rights

Depending on where you live, you may have the right to:

  • Access the personal information we hold about you.
  • Correct inaccurate information.
  • Delete your account and associated data, self-serve from Settings.
  • Export your data in a portable format.
  • Opt out of marketing email at any time.
  • Lodge a complaint with your local data protection authority.

To exercise any of these rights, email privacy@vidforge.tv. We respond within 30 days.

8. Cookies, children, and international transfers

Cookies. We use session cookies for sign-in and a short-lived CSRF cookie during the OAuth flow. We do not use third-party analytics or advertising cookies.

Children. The Service is not directed to and may not be used by individuals under 13 (or under 16 in the EEA and UK). If you believe a minor has created an account, email us and we will delete it.

International transfers. VidForge is operated from the United States. If you use the Service from outside the US, your information will be processed in the US and in the regions our subprocessors operate, under the safeguards their terms provide.

9. Changes and contact

We may update this Policy from time to time. For material changes, we will notify account holders by email at least 7 days before the changes take effect, and we will update the “Last updated” date above.

Questions about this Policy or your data: privacy@vidforge.tv.