Privacy Policy

1. What We Collect

Account information

Your name, email, and password when you register. If you sign in with Google OAuth, we receive your name, email, and profile picture from Google.

YouTube channel data

When you connect your YouTube account, we access channel metadata (name, subscribers), your video catalog (titles, thumbnails, publish dates), and analytics (views, watch time, engagement, demographics, traffic sources) via the YouTube Data API and YouTube Analytics API.

This data stays within VideoDuck. It is never sent to AI providers or third parties.

Workspace and creative content

Prompts you submit, creative direction settings (voice, tone, style), characters, backgrounds, and other content you create within your workspaces.

AI-generated content

Videos, images, stories, and ideas generated on the platform, along with the prompts and parameters used to create them.

Usage and device data

How you interact with VideoDuck (features used, pages visited), plus technical data like IP address, browser type, and operating system.

2. How We Use Your Data

• Operate your workspaces — sync YouTube data, compute analytics trends, and power your dashboards.
• Generate content — send your prompts and generation parameters to third-party AI providers to produce videos, images, and stories.
• Deliver recommendations — provide AI-generated content ideas, trending signals, and insights tailored to your niche.
• Improve the platform — understand how features are used and develop new ones.
• Communicate with you — account updates, service changes, and product news.
• Prevent abuse — detect fraud, enforce our terms, and protect the platform.

3. What We Send to AI Providers

When you generate content, we send only your prompts and generation parameters (model, resolution, style settings) to the selected AI provider — such as Runway, Kling, Veo, Minimax, Luma, or Pika.

We never send AI providers your:

• Account information (name, email, password)
• YouTube analytics or channel data
• Workspace settings or creative direction
• Usage history or personal data

AI providers process your prompts to generate content and are contractually bound to handle data in accordance with their privacy policies.

4. YouTube API Data and Google Compliance

VideoDuck's use of Google API data adheres to the Google API Services User Data Policy, including the Limited Use requirements:

• We only access data you explicitly authorize through the OAuth consent screen.
• Your YouTube data is used solely for workspace features — analytics, dashboards, and content recommendations.
• We do not sell, lease, or share YouTube data with third parties for advertising or data brokering.
• You can disconnect YouTube and revoke access anytime from workspace settings.

5. Data Sharing

We do not sell or share your personal data for advertising purposes.

We share data only with service providers who help us operate the platform:

• Cloud infrastructure (AWS) — hosting, storage, and databases.
• AI providers — prompts and generation parameters only (see Section 3).
• Authentication — Google OAuth for sign-in and YouTube connection.
• Analytics — anonymized usage data to improve the platform.

All providers are contractually required to protect your data and use it only for the services they provide to us.

6. Data Retention

We keep your data for as long as your account is active. YouTube analytics snapshots are retained to compute trends and week-over-week comparisons in your dashboards.

When you delete your account

We delete your personal information, workspace data, and generated content within 30 days of account deletion. Some anonymized, aggregated data may be retained for platform analytics.

When you disconnect YouTube

We stop syncing new data immediately. Previously synced analytics data remains in your workspace until you request its deletion or delete your account.

7. Security

We protect your data with:

• Encryption in transit (TLS) and at rest.
• HTTP-only session cookies for authentication.
• Secure OAuth token storage.
• Regular security reviews and monitoring.

API keys are stored securely and can be managed or revoked from your account settings.

8. Your Rights

Depending on your jurisdiction, you have the right to:

• Access and receive a copy of your personal data.
• Correct inaccurate data.
• Request deletion of your data.
• Object to or restrict certain processing.
• Disconnect YouTube and revoke data access.
• Export your generated content.
• Withdraw consent at any time.

To exercise any of these rights, email us at support@videoduck.ai. We respond to all requests within 30 days.

9. Cookies

We use essential HTTP-only cookies to maintain your session and preferences. These are required for the platform to function.

We may use analytics cookies to understand platform usage. You can manage cookie preferences through your browser settings.

10. Changes to This Policy

We may update this policy from time to time. Changes are posted on this page with an updated date.

For material changes — especially those affecting how we handle YouTube data — we'll notify you by email and request renewed consent where required.

11. Contact

Questions about your data or this policy? Email us at support@videoduck.ai.