Privacy Policy

1. Introduction

Vidito ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service. We operate in accordance with UK data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

2.1 Information You Provide

We collect information you provide directly to us, including:

• • Account information (name, email address, password) when you register via Clerk authentication
• • Payment information processed securely through Paddle
• • YouTube channel information (channel name, ID, niche, description)
• • Video data you upload (titles, view counts, performance metrics)
• • Generated video ideas and content preferences
• • Communications you send us (support requests, contact form submissions)

2.2 Automatically Collected Information

When you use Vidito, we automatically collect certain information, including:

• • Usage data (features accessed, pages viewed, time spent on service)
• • Device information (browser type, operating system, device identifiers)
• • Log data (IP address, access times, referring URLs)
• • Analytics data via Plausible Analytics (privacy-friendly, no personal tracking)

2.3 Cookies and Tracking

We use cookies and similar tracking technologies for:

• • Authentication and security (via Clerk)
• • Analytics and performance measurement (Plausible Analytics)
• • Advertising attribution (Reddit Pixel, Facebook Pixel for conversion tracking)

3. How We Use Your Information

We use the information we collect to:

• • Provide, maintain, and improve our services
• • Process your subscription payments and manage your account
• • Generate AI-powered video ideas tailored to your channels
• • Send you technical notices, updates, and support messages
• • Respond to your comments and questions
• • Monitor and analyze usage trends and preferences
• • Detect, prevent, and address technical issues and fraudulent activity
• • Comply with legal obligations

4. How We Share Your Information

We do not sell your personal information. We may share your information with:

4.1 Service Providers

• • Clerk: Authentication and account management
• • Paddle: Payment processing and subscription management
• • Supabase: Database and data storage
• • Vercel: Hosting and serverless functions
• • OpenAI (via Vercel AI Gateway): AI-powered idea generation
• • Plausible Analytics: Privacy-friendly analytics
• • Resend: Email delivery service

4.2 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., court orders, subpoenas).

4.3 Business Transfers

If Vidito is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

5. Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes outlined in this Privacy Policy. When you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes.

6. Your Rights Under UK GDPR

Under UK data protection law, you have the following rights:

• • Right of access: Request a copy of your personal data
• • Right to rectification: Correct inaccurate or incomplete data
• • Right to erasure: Request deletion of your personal data
• • Right to restrict processing: Limit how we use your data
• • Right to data portability: Receive your data in a portable format
• • Right to object: Object to certain types of processing
• • Right to withdraw consent: Withdraw consent for data processing at any time

To exercise any of these rights, please contact us at info@vidito.ai. We will respond to your request within one month.

7. International Data Transfers

Your information may be transferred to and processed in countries other than the UK. We ensure that such transfers are protected by appropriate safeguards, including standard contractual clauses approved by the UK Information Commissioner's Office (ICO).

8. Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is 100% secure.

9. Children's Privacy

Our service is not intended for users under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. Continued use of our service after changes become effective constitutes acceptance of the revised policy.

11. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection authority, at ico.org.uk.