Privacy Policy

Last updated: April 20, 2026

1. Introduction

Vidiking ("we", "our", "us") respects your privacy. This Privacy Policy explains how we collect, use, and protect your personal information when you use our platform at vidiking.com and associated APIs and tools.

2. Information We Collect

Data Type	What	Why
Account info	Email, name, password (hashed)	Authentication and account management
Payment info	Processed by Stripe — we do not store card numbers	Processing deposits
Usage data	API calls, job types, timestamps, costs	Billing, analytics, service improvement
Uploaded content	Media files you upload for processing	Providing the rendering service
Generated content	Output files from render/AI operations	Delivering results to you
Technical data	IP address, browser type, request logs	Security, debugging, abuse prevention

3. How We Use Your Information

To provide and maintain the Service
To process payments and manage your wallet
To communicate with you about your account, billing, or service updates
To detect and prevent fraud and abuse
To improve the Service based on usage patterns

We do not sell your personal information to third parties.

4. Third-Party Services

We use the following third-party services to provide the platform:

Stripe — Payment processing. See Stripe's Privacy Policy.
OpenAI — Image generation (DALL-E). Prompts and generated images are sent to OpenAI's API.
Anthropic — Script generation (Claude). Text prompts are sent to Anthropic's API.
ElevenLabs — Voiceover generation. Text is sent to ElevenLabs' API.
Replicate — Image generation (Flux). Prompts are sent to Replicate's API.
Runway — Video generation. Prompts and images are sent to Runway's API.
Connected destinations — TikTok, YouTube (Google), Dropbox, Meta (Facebook/Instagram), Vimeo. When you connect a destination, the finished video file and any metadata you configured (caption, privacy setting, hashtags) are sent to that provider using the OAuth token you authorised.

Each provider processes data according to their own privacy policies. We recommend reviewing them if you use AI generation features or connected destinations.

5. OAuth Tokens and Connected Destinations

When you connect a destination (for example, TikTok or YouTube), Vidiking stores the OAuth access token (and refresh token, where the provider issues one) linked to your user account. We use the token exclusively to:

Publish a video to that destination when a render job you created targets it, or when you explicitly invoke a delivery endpoint.
Read the basic profile display name of the connected account so the Destinations page can label the connection (e.g. "TikTok — @yourhandle").

We do not read your feed, your followers, your direct messages, your private content, your analytics, or any other account data. We never post to a destination on a schedule you did not configure or share anything with third parties beyond the destination you chose. You can revoke access at any time from the Destinations page, and we will delete the stored token within 24 hours of revocation. Revoking access inside the destination provider's own settings (for example, TikTok's "Manage app permissions") will also invalidate the token immediately.

6. Data Retention

Account data: Retained while your account is active, deleted within 30 days of account closure.
Rendered output: Retained for 30 days (production) or 24 hours (sandbox), then deleted.
Uploaded media: Processed and deleted after the job completes. Not stored permanently.
Transaction history: Retained for 7 years for tax and legal compliance.
Server logs: Retained for 90 days.

7. Data Security

We use industry-standard security measures including:

HTTPS/TLS encryption for all data in transit
Bcrypt password hashing
Encrypted API key and OAuth token storage
Daily automated database backups
Restricted server access

8. Your Rights

Depending on your jurisdiction, you may have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data ("right to be forgotten")
Export your data in a portable format
Withdraw consent for data processing
Lodge a complaint with a data protection authority

To exercise these rights, contact support@vidiking.com.

9. Cookies

We use essential cookies for authentication (JWT tokens stored in localStorage). We do not use tracking cookies or third-party analytics cookies.

10. Children's Privacy

The Service is not intended for users under 18 years of age. We do not knowingly collect personal information from children.

11. International Data Transfers

Your data may be processed in countries outside your jurisdiction. By using the Service, you consent to the transfer of your data to our servers and third-party providers.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a notice on the platform.

13. Contact

For privacy-related questions, contact us at support@vidiking.com.