VdoZen Privacy Policy
At VdoZen, we prioritize your privacy. Our AI-powered video and content creation tools are designed to generate awesome content while collecting only what is necessary to operate the service.
1. Data We Collect
We collect only what the service needs to operate:
- Email address and account ID: For account creation, login, and communication
- Usage timestamps and token balance: For billing and quota enforcement
- Feature usage data: Which tools you run, to operate and improve the service
- Your content: Scripts, prompts, uploaded video and audio, and the media we generate for you
- Service logs: Technical records of each generation, including short excerpts of your script, used to fix errors and improve video quality — see Section 9
- Device identifier and IP address: Collected only when a free trial or promotional credit is claimed, and used solely to prevent the same person from claiming the same free offer repeatedly. We do not use these for advertising, tracking across other websites, or building behavioral profiles.
We do NOT use advertising trackers, third-party analytics pixels, or cross-site browsing profiles. Personally identifiable information is stored securely and is never sold or rented to third parties.
2. Content Storage & Automatic Deletion
Your uploads and the media we generate are stored in Google Cloud Storage and deleted automatically by a storage lifecycle rule enforced by Google Cloud — not by a manual process we have to remember to run:
- Finished videos and generated media: automatically deleted 7 days after they are created
- Work-in-progress uploads and intermediate processing files: automatically deleted 1 day after they are created
- Local caching: Browser cache for performance (you control)
- No backups: Content is permanently lost after deletion and cannot be recovered
Deletion is permanent. Once the retention window passes, the file is gone from our storage and we have no copy of it.
Important: Download and save your content locally if you want to keep it permanently. We recommend backing up all generated content during this MVP phase.
4. MVP Phase Limitations
As an MVP in budget-constrained development:
- Data retention periods may change with notice
- Storage capacity is limited (first-come, first-served)
- Some features may be temporarily unavailable
- Backup systems are minimal during this phase
We'll communicate any significant changes affecting your data or content.
5. Google OAuth & YouTube Integration
VdoZen uses YouTube API Services to upload your videos to your channel and to show which channel is connected. By connecting a YouTube channel you agree to be bound by the YouTube Terms of Service, and the Google Privacy Policy applies to the data Google processes.
VdoZen connects to your YouTube account via Google OAuth 2.0. When you choose to connect your YouTube account, we:
- Access your YouTube channel information (name, ID and profile picture) to display your connected account inside VdoZen
- Upload videos to your YouTube channel on your behalf, only when you press upload or schedule a video, with the title, description and visibility (public, unlisted or private) you chose
- Store your OAuth tokens solely to maintain your connection between sessions. They are held in Google Cloud Firestore, Google's own managed database, on Google Cloud infrastructure — encrypted at rest and in transit by Google, and reachable only by our authenticated backend service. They are never sent to your browser and never leave Google Cloud.
We do NOT:
- Read any YouTube data beyond what is listed above
- Post, delete, or modify videos without your explicit action
- Share your YouTube credentials or tokens with any third party
You can disconnect your YouTube account at any time from your Profile page. Disconnecting immediately revokes VdoZen's access at Google and deletes your stored tokens from our database. You can also revoke VdoZen's access from Google's security settings page at security.google.com/settings/security/permissions.
We request only the following Google API scopes:
- https://www.googleapis.com/auth/youtube.upload — to upload a video to your channel when you press upload
- https://www.googleapis.com/auth/youtube.readonly — to read your channel name, ID and profile picture so we can show which channel is connected. We do not read your channel's statistics or any of its videos.
We request no other scopes. We do not access your watch history, subscriptions, comments, private playlists, messages, or any video on your channel that VdoZen did not upload.
What we store, and for how long
When you connect a channel we store your Google OAuth access token and refresh token, plus your channel name and channel ID, in Google Cloud Firestore — the same Google-operated infrastructure that runs YouTube itself, not a server we run ourselves. Google encrypts this data at rest and in transit, and only our authenticated backend service can read it; it is never sent to your browser. These tokens are kept only to keep your channel connected between sessions so scheduled uploads can run without asking you to log in again. They are deleted when:
- you disconnect the channel in VdoZen — we revoke VdoZen's access at Google and delete the stored tokens immediately;
- you revoke VdoZen's access from your Google Account — the tokens stop working, and because we check every connected channel weekly, we delete our stored copy within 30 days of the revocation (normally within a week);
- you delete your VdoZen account — see Section 8.
The same weekly check re-reads your channel name, so the copy we store is never more than 30 days old.
Because a connected channel is meant to stay connected for scheduled uploads, we keep these tokens for as long as the connection is active. They are not subject to the 7-day media deletion window described in Section 2, which applies to video files, not to your account connection.
Limited Use
VdoZen's use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, we do not use Google user data for advertising, we do not sell it, we do not transfer it to third parties except as needed to provide the upload feature you requested or where required by law, and we do not allow humans to read it except with your explicit consent, for security purposes, to comply with applicable law, or where the data has been aggregated and anonymized.
6. Google & Third-Party Services We Use
VdoZen is built on Google Cloud and Firebase. For transparency, here is every Google service we use and what it touches:
- Firebase Authentication — account sign-up and login, including “Sign in with Google.” If you sign in with Google we receive only your basic profile and email address; we request no additional scopes at sign-in.
- Cloud Firestore — our application database: your account record, token balance, project metadata, scheduling settings, and your YouTube connection.
- Google Cloud Storage — stores your uploaded and generated media, subject to the automatic deletion rules in Section 2.
- Firebase Hosting — serves this website.
- Google Cloud Run — runs our backend servers that process your videos.
- Google Cloud Tasks — queues background jobs such as scheduled uploads.
- Google Cloud Text-to-Speech — converts your script into a voiceover. Your script text is sent to this service to be spoken.
- Google Cloud Speech-to-Text — transcribes audio to generate captions and subtitles. Your audio is sent to this service to be transcribed. We currently use this service's data-logging option, which means Google may retain and use the audio we send it to improve its speech-recognition models. We do this because it lowers our transcription cost while VdoZen is early-stage, and it is what lets us keep caption generation included rather than charged separately. The audio involved is the voiceover generated from your script, or audio from media you upload for captioning. If you would rather your audio not be used this way, do not upload it — and tell us, because we will turn this off if people ask.
- Google Gemini and Vertex AI — generates and analyses scripts, titles, keywords, and selects clip-worthy moments from video. Your prompts, scripts, and video content may be sent to these services for processing.
- Google Cloud Logging — stores the service logs described in Section 9, deleted automatically after 30 days.
- Google Secret Manager — stores our own API credentials. It holds no user data.
- YouTube Data API v3 — as described in Section 5.
We also use non-Google providers to deliver parts of the service: OpenAI for some script editing, titles, language checks, stock-clip checks and OpenAI voiceovers; other AI model providers for text, image, voice and video generation; Pexels and Pixabay for stock footage; Pixabay for background music; Paddle, our Merchant of Record, for checkout, payment processing, tax and invoicing (we never see or store your card details); and Upstash Redis for caching and rate limiting.
These providers process your data only to perform their function for us, with two exceptions we want to state plainly rather than bury:
- Google Cloud Speech-to-Text, as described above, may also use the audio we send it to improve its own speech models.
- OpenAI: we take part in OpenAI's data-sharing program, which means OpenAI may use what we send it to improve its models. That includes the text we send (parts of your script or prompt, your video topic or title, and the voiceover text when you pick an OpenAI voice) and small thumbnails of the stock clips we are considering for your video. We do this because the program gives us free daily usage, which keeps these steps free while VdoZen is early-stage. We do not send your account details or payment information to OpenAI. If you would rather your content not be used this way, tell us, and we will turn this off if people ask.
We do not sell your data to anyone.
7. Content Licensing & YouTube Content ID
You own the videos you create with VdoZen, and you are responsible for how you publish and monetize them. Regarding the media we supply:
- AI-generated video, images and voiceovers, and stock footage we source from royalty-free libraries, are cleared for your use and are not expected to generate copyright claims.
- Background music is sourced from royalty-free libraries and we actively try to avoid tracks known to trigger claims. However, royalty-free does not always mean claim-free: a rights holder or a music distributor can still register a track with YouTube's Content ID system, and a claim can appear on your video even when the track is licensed for your use.
We therefore cannot guarantee that background music will never trigger a YouTube Content ID claim, and VdoZen is not liable for any claim, demonetization, strike or revenue loss arising from music used in your videos. If you monetize your videos, verify the music's licensing status before you publish, or mute or replace the background track. Most Content ID claims on royalty-free music can be disputed successfully with the license documentation from the original source.
8. Deleting Your Data
You can delete your data at any time:
- Disconnect YouTube: from your Profile page. We revoke VdoZen's access at Google and delete your stored Google tokens immediately.
- Revoke Google access: at myaccount.google.com/permissions.
- Delete your account: email us at jh@vdozen.com from your registered address and we will delete your account record, stored Google tokens and remaining media within 7 days.
Your generated media is deleted automatically regardless, on the schedule in Section 2.
9. Service Logs & Quality Review
While a video is being made, our servers write technical log records so we can find and fix problems and make the results better. For each video these can include:
- your account ID and the video's generation ID;
- short excerpts of your script (each scene's line, up to 200 characters);
- the stock-footage search terms we used, the clip we chose, and how well our image-matching model scored it against the scene;
- a one-way fingerprint (hash) of your script — not the script itself — kept for 30 minutes, so we can tell when the same script is made again shortly after, which usually means the first result needs improving.
Logs are stored in Google Cloud Logging and deleted automatically after 30 days. We use them only to operate, debug and improve VdoZen. We may review samples of them, together with the matching stock clips, to judge clip quality. They are never sold, used for advertising, or used to train AI models.
10. Emails We Send
Today we email you only one-time codes (to verify or recover your account) and, occasionally, a direct message about your own account, such as a refund confirmation.
In the future VdoZen may also email the address on your account about your account, billing, security, changes to these policies, and product updates or announcements. Account, billing, security and policy emails are part of running the service. You can unsubscribe from product updates and announcements at any time, using the link in the email or by contacting us. We do not sell or share your email address for anyone else's marketing.
11. No Warranty & Limitation of Liability
VdoZen is an early-stage service provided “as is” and “as available,” without warranties of any kind. To the fullest extent permitted by applicable law, VdoZen is not liable for any loss or damage arising from your use of the service, including loss of content or data (see Section 2: we keep no backups), service interruptions, errors or inaccuracies in AI-generated output, failed or delayed uploads, actions or outages of third-party services (including Google, YouTube, payment and stock-media providers), or any indirect, incidental, special or consequential damages. Our Terms of Service set out the full terms. Nothing in this policy limits any right you have under data-protection law that cannot be waived.
12. Changes to This Policy
We may update this Privacy Policy if our practices change. We'll notify you via our platform or email if significant changes occur.
13. Contact Us
Have questions or feedback about our privacy practices? Reach out to us:
VdoZen — Sole Proprietorship, owned by Md. Jubair Hasan Miraz
Trade License No.: TRAD/DNCC/019269/2026 (Dhaka North City Corporation)
Address: House-160, Road-03, Mohammadia Housing Limited, Mohammadpur, Dhaka-1207, Bangladesh
Email: jh@vdozen.com