Privacy Policy

Last updated: July 20, 2026

1. Information We Collect

• Account data, including email address, phone number (for phone-based sign-up), username, password hash, verification status, and login metadata.
• Brand profile data, including company name, industry, brand description, tone, and optional logo preferences.
• User-provided creative inputs, including prompts, briefs, captions, uploaded brand assets, and reference images.
• Generated media and history, including prompt summaries, generated images, generated videos, job status, and publishing history.
• Connected account data from Google/YouTube, TikTok, and Meta, including OAuth tokens, account identifiers, channel/page/account names, scopes, connection status, and dashboard metrics.
• Billing data, including wallet balances, wallet transaction history (grants, charges, refunds, adjustments), pricing shown for generations, and subscription status. We never store card numbers or full payment credentials; payment processing, when introduced, is handled by a dedicated payment provider.
• Support messages you exchange with the Aideo team through the in-app inbox.
• Technical data needed for security and operations, such as request metadata, error logs, and usage records.
• Privacy-safe product usage events that record which features and workflow steps you reach (for example, opening the studio, confirming a plan, or a generation succeeding or failing) so we can understand and improve the product. These events are limited to a fixed set of step names and simple counts; they never include your prompts, briefs, captions, generated media, file contents, or credentials.

2. How We Use Information

We use information to:

• create and secure your account;
• generate AI-assisted creative briefs, images, copy, and videos;
• store your generation history and product workspace state;
• connect social destinations and publish only content you approve;
• show YouTube, Instagram, and Facebook dashboard metrics where you have granted permission;
• send verification, password reset, and service emails;
• measure aggregate product usage and funnel drop-off to improve the product;
• detect abuse, debug errors, protect the service, and comply with law.

3. Google and YouTube API Data

Aideo accesses the following raw Google user data, only after you connect your YouTube channel and only for user-facing features that you initiate: your channel identifier and channel name, metadata about your channel's videos (such as video IDs, titles, and publishing status), YouTube Analytics metrics for your channel (such as views and watch time), and the OAuth tokens needed to keep the connection active. OAuth tokens are encrypted before storage. We do not create aggregated or anonymized datasets from Google user data.

We use this data to show your connected channel, its videos, and its performance metrics in your dashboard, and to upload videos you explicitly approve to your channel. Google user data is processed and stored only by the hosting and database infrastructure providers that operate our service. It is never sold or shared with any other third party, never transferred to advertising platforms or data brokers, never used for retargeting, and never sent to the AI providers described in Section 6 or used to train AI/ML models.

Google user data is retained and deleted as described in Sections 8 and 9. When you disconnect YouTube inside Aideo, we delete the stored OAuth tokens; you can also revoke Aideo's access at any time from your Google Account permissions page.

Aideo's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

4. Meta, Facebook, and Instagram Data

Aideo uses Meta Graph API data only for user-facing Facebook and Instagram features that you initiate, such as identifying manageable Facebook Pages or Instagram Professional Accounts, showing eligible destinations, displaying account metrics, and publishing approved post assets and captions. OAuth tokens are encrypted before storage. We do not sell Meta user data or use it to train foundation models.

5. TikTok Data

Aideo uses TikTok data only for user-facing features that you initiate, including connecting your TikTok account, displaying the connected creator name, and exporting a generated video you explicitly approve to your TikTok inbox. You complete editing and publishing inside TikTok. TikTok OAuth tokens are encrypted before storage. We do not sell TikTok user data or use it to train foundation models.

6. AI Providers and Subprocessors

To provide generation features, Aideo may send relevant prompts, briefs, uploaded references, and brand context to AI providers and infrastructure providers. We limit this sharing to what is needed to provide the requested feature and operate the service.

Phone verification codes are delivered through Alibaba Cloud's SMS service, which processes your phone number on our behalf solely to deliver the message. Verification codes are stored by Aideo only as salted one-way hashes and expire within minutes. When bot protection is enabled, sign-up and verification requests are additionally checked through Alibaba Cloud's CAPTCHA service. We log phone numbers only in masked form.

7. Storage and Security

We use reasonable technical and organizational safeguards, including HTTPS in production, password hashing, encrypted OAuth token storage, role-based admin controls, and access-limited storage for media assets. No internet service can be guaranteed to be perfectly secure.

8. Retention

We retain account data, brand profiles, generated assets, connection records, metrics, and publishing history while your account is active or as needed to provide the service, comply with law, resolve disputes, prevent abuse, or maintain security. You can delete your account from Settings.

Wallet transaction records are financial records: after account deletion they are retained in anonymized form (no longer linked to your identity) where bookkeeping and tax law requires, and are excluded from the deletion described below for that reason.

9. Deletion and Revocation

You may delete your Aideo account in product settings. You may also revoke Google access from your Google Account permissions page, revoke TikTok access from TikTok security settings, and revoke Meta access from Facebook Business Integrations or Meta account settings. See Data Deletion Instructions for details.

10. Children

Aideo is not intended for children under 13 and should not be used by anyone who is not old enough to consent to online services in their jurisdiction.

11. Changes to This Policy

We may update this Privacy Policy as the product, law, or platform requirements change. If we materially change how we use Google, Meta, or other user data, we will provide notice or request renewed consent where appropriate.

12. Contact

Privacy questions can be sent to support@aideo.it.com.