Privacy Policy

Last updated: March 13, 2026

1. Introduction

FacelessFlow ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered video generation service.

2. Information We Collect

Account Information

When you create an account, we collect your email address and name. If you sign up using Google OAuth, we receive your basic profile information.

YouTube Data

When you connect your YouTube channel, we access:

  • Your YouTube channel information (channel ID, name)
  • Permission to upload videos on your behalf
  • We do NOT access your private videos, watch history, or subscriptions

Content You Create

We store the video scripts, titles, descriptions, and tags you create or generate using our service.

Payment Information

Payment processing is handled by Paddle. We do not store your credit card information on our servers.

3. How We Use Your Information

  • To provide and maintain our video generation service
  • To upload videos to your connected YouTube channel (user-requested feature)
  • To process your payments and manage subscriptions
  • To send important service updates and notifications
  • To respond to your support requests
  • To prevent fraud, abuse, and security threats

4. Google User Data & YouTube API Services

FacelessFlow uses YouTube API Services. By using our service, you are also agreeing to be bound by the YouTube Terms of Service.

How We Use Google User Data

We access Google user data solely for the following purposes:

  • Core App Functionality: To upload AI-generated videos to your YouTube channel
  • User-Requested Features: To display your channel information and manage video uploads that you explicitly request
  • Security & Abuse Prevention: To verify your identity and prevent unauthorized access to your account

What We DO NOT Do With Google User Data

  • We do NOT sell your Google user data to any third party
  • We do NOT use your Google user data for advertising or marketing purposes
  • We do NOT share your Google user data with third parties for their own purposes
  • We do NOT use your Google user data for AI model training, machine learning, or user profiling
  • We do NOT use your Google user data for analytics, business insights, or improving other services
  • We do NOT transfer your Google user data to any entity outside of providing the core video upload functionality

Data Retention for Google User Data

Your YouTube OAuth tokens are stored securely and encrypted. You can revoke our access at any time, and upon revocation or account deletion, all Google user data is permanently deleted from our systems within 30 days.

You can revoke our access to your YouTube data at any time by visiting Google Security Settings.

For more information about how Google handles your data, please review the Google Privacy Policy.

5. Cookies and Device Information

Our application stores, accesses, and collects information on or from your device, including through the use of cookies and similar technologies such as local storage. This information is used for the following purposes:

  • Authentication & Session Management: We use cookies and local storage to keep you signed in, maintain your session, and store authentication tokens (including YouTube OAuth tokens) securely in your browser.
  • Preferences & Settings: We store your application preferences (such as selected YouTube channel, video privacy defaults, and UI settings) locally on your device to improve your experience.
  • Security: Cookies help us verify your identity, prevent fraud, and protect against unauthorized access to your account.
  • Analytics: We may use third-party analytics services that place cookies on your device to help us understand how users interact with our service. This data is collected in aggregate form and does not personally identify you.

You can manage or delete cookies through your browser settings. However, disabling cookies may affect the functionality of our service, particularly authentication and session management features.

6. Data Storage and Security

Your data is stored securely using Supabase with encryption at rest and in transit. We implement industry-standard security measures including:

  • SSL/TLS encryption for all data transfers
  • Row-level security policies for database access
  • Encrypted storage for OAuth tokens
  • Regular security audits and updates

7. Data Retention

We retain your account data for as long as your account is active. Generated videos and related content are stored until you delete them or close your account.

YouTube API Data Retention

  • YouTube OAuth tokens are stored securely and encrypted. Tokens that have not been used for 30 days are automatically invalidated and require re-authentication.
  • Any data retrieved from YouTube API Services (such as channel information or video statistics) is retained for a maximum of 30 days and is automatically purged thereafter.
  • Upon account deletion or access revocation, all YouTube-related data is permanently deleted from our systems within 30 days.

You can revoke our access at any time, and upon revocation or account deletion, all Google user data is permanently deleted from our systems within 30 days.

8. Third-Party Services

We use the following third-party services:

  • Google/YouTube API: For YouTube channel integration
  • OpenAI: For script generation and text-to-speech
  • ElevenLabs: For voice cloning and text-to-speech
  • Pexels: For stock images and videos
  • Paddle: For payment processing
  • Supabase: For data storage and authentication
  • AWS: For video rendering

9. Your Rights

You have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Delete your account and associated data
  • Export your data
  • Revoke YouTube/Google access at any time via Google Security Settings
  • Opt out of service notification emails

10. Children's Privacy

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

12. Contact Us

If you have any questions about this Privacy Policy, please contact us at: privacy@facelessflow.ai