Privacy Policy

1. Who we are

VidMyth LLC, a Delaware limited liability company in the United States, operates VidMyth and is responsible (the "controller") for the personal data described here. For anything in this policy, including a data request, write to info@vidmyth.com.

2. What we collect

We collect only what we need to run VidMyth:

• Account data — your email address, display name and profile photo, from the sign-in method you choose. If you sign in with Google, we receive these from Google; we never see your Google password.
• Your content — the projects, ideas, scripts, thumbnails, videos, captions, ebooks and product pages you create; the prompts, briefs and YouTube links you supply; and files you upload, such as character photos and audio. Product page details you enter (your name, contact email, bio, social links, prices) are published on that page when you publish it.
• Account activity — your credit balance and history, which tools you used and when, and your plan and subscription status.
• Payment data — Stripe handles card payments. We receive a customer ID, what you bought, when, for how much and the status of your subscription and invoices. We never see or store your card number. Older purchases made through PayPal keep their PayPal transaction record. If you join the referral programme, we keep the email address you give us for payouts.
• Support and feedback — tickets, contact-form messages, and reports or ideas you send, including any screenshots you attach and the page, browser type and screen size they were sent from.
• Assistant chats — the conversation you have with the in-app assistant, kept with your account, and a log of the questions asked (for visitors who are not signed in, without any identity) so we can improve its answers.
• Technical data — a one-way hash of your IP address, used to stop abuse and repeated free-credit signups (we do not store the address itself), sign-in and activity timestamps, and error logs.

3. Why we use it, and on what basis

• To provide the service you asked for — running generations, storing your work, hosting your product pages, keeping your balance correct. Basis: performance of our contract with you.
• To take payment and prevent payment fraud and free-credit abuse. Basis: performance of the contract, and our legitimate interest in not being defrauded.
• To email you about your account — a finished or failed video, a receipt, a support reply. Basis: performance of the contract.
• To send the newsletter, only if you subscribed. Basis: consent, which you can withdraw at any time.
• To keep the service working and secure — diagnosing errors, monitoring provider health, rate-limiting abuse. Basis: our legitimate interest in a service that works.
• To meet legal and tax obligations. Basis: legal obligation.

We do not sell your personal data, and we do not use it to train AI models.

4. How AI processing works

When you run a tool, the inputs it needs — your topic, brief, script, uploaded photo or pasted link — are sent to the AI provider that does the work, and the result is stored in your account. Providers process it under their own API terms. We do not use your content to train our own models, and we do not let anyone use it to build profiles of you.

Some research tools ask Google Search for current information through Gemini; the searches are built from your request, not from your identity.

5. Who we share it with

We use a small number of providers (processors) to run VidMyth. Each receives only what it needs:

• Google Firebase and Google Cloud — sign-in, database and file storage. This is where your account and your work live.
• Google (Gemini API) — text, image and vision generation, and Google Search grounding for research. Receives the prompts and inputs you submit.
• Anthropic (Claude API) — text generation for some tools and as a fallback. Receives the prompts you submit.
• Frame Nebu — video generation and the video editor. Receives the script, template or visual style, voice and caption choices for a video, and any character photo you upload. It uses Google Cloud (planning and narration), OpenAI (images) and Amazon Web Services (rendering and storage) to make and deliver the video.
• Stripe — card payments and subscriptions. Receives your payment details directly; we receive the records described above.
• PayPal — referral payouts, and payments made before card checkout replaced it.
• Resend — transactional email. Receives your email address and the message we send you.
• Vercel — application hosting. Every request to vidmyth.com passes through it.
• Amazon Web Services (S3 and CloudFront) — storing and serving the product pages you publish.
• Google (YouTube Data API) and YouTube — public video, channel and transcript information for the YouTube links you paste. Never your YouTube account or password.

We may also disclose data when the law requires it, to protect people's safety or our rights, or to a buyer if the business is sold — in which case we will tell you first. We do not sell personal information or share it for cross-context behavioral advertising.

6. Visitors to product pages

Product pages that users publish at name.vidmyth.com are made by those users, who are responsible for what they say and sell. The pages set no cookies, run no analytics, contain no forms that send data to us, and are blocked from sending data anywhere.

To deliver a page, Amazon CloudFront processes the visitor's IP address and request. Pages load fonts from Google Fonts, so the visitor's browser also contacts Google. A Buy button opens the seller's own checkout or an email to the seller; what happens there is between the visitor and the seller.

If a visitor reports a page, we store the report and a one-way hash of their IP address, used only to stop repeated reports.

7. International transfers

VidMyth is run from the United States, and our providers process data in the United States and other countries. Where personal data leaves the UK, the EU or another region with transfer rules, we rely on the mechanisms our providers offer, such as the EU Standard Contractual Clauses. You can ask us which mechanism applies.

8. How long we keep it

• Account data and your content — until you delete it or your account. Deleting your account from your profile takes effect immediately; a deletion request by email is completed within 30 days.
• Product pages — each page and its earlier versions, until you delete the page or your account. Deleting takes the page offline first.
• Payment records — kept as long as tax and accounting law requires, typically seven years, even after your account is deleted.
• Accounting records — the credit and video-cost ledgers are kept after deletion, with your identity removed.
• Signup protection — after an account is deleted we keep a one-way hash of its email address and of the IP address it signed up from, without your identity, so the free signup credits cannot be claimed again.
• Support tickets — up to 24 months after the ticket is closed. Feedback reports and their screenshots — until your account is deleted.
• Assistant conversations — until you clear them or delete your account.
• Newsletter subscribers — until you unsubscribe. An unsubscribed address is kept, not deleted, precisely so we do not email it again by mistake.
• Error and diagnostic logs — up to 90 days.

9. Security

Data is encrypted in transit, stored with providers that encrypt it at rest, and reachable only through access-controlled servers; most records cannot be read from the browser at all. Card details never reach us. No system is perfectly secure: if a breach affects your personal data, we will tell you and the authorities where the law requires.

10. Your rights

Depending on where you live, you can ask us to tell you what we hold, give you a copy, correct it, delete it, restrict or object to how we use it, or send it to another provider. You can withdraw consent where we relied on it.

Two of those you can do yourself, immediately, from your profile page: Export my data downloads what we hold about you as a single file, and Delete my account erases it. Deletion cannot be undone — it also cancels your subscription and takes down any product pages you published, so export first if you want them.

If you live in California or another US state with a privacy law, you have the rights to know, delete and correct, and to opt out of the sale or sharing of personal information — which we do not do. We will not treat you differently for using any of these rights.

To use any right, email info@vidmyth.com from the address on your account, so we can verify it is you; someone acting for you needs your signed permission. We respond within 30 days (45 where US state law allows) and do not charge unless a request is repetitive or excessive.

To stop marketing emails, use the unsubscribe link in any message or the Unsubscribe page. Receipts, video notifications and replies to your support tickets are not marketing and keep arriving while your account is open.

If you think we have handled your data badly, you can complain to your data protection authority. We would rather you told us first so we can fix it.

11. Cookies and local storage

We use only what the site needs to work: keeping you signed in, remembering your platform choice and holding unsaved drafts on your device. We run no advertising, analytics or cross-site tracking cookies. Every item is listed in the Cookie Policy.

12. Children

VidMyth is not for children under 13, and we do not knowingly collect their data. If you believe a child under 13 has given us personal data, tell us and we will delete it.

13. Changes to this policy

If we change how we use your data in a way that affects you, we will update the date at the top of this page and email you before the change takes effect.

14. Contact

VidMyth LLC · info@vidmyth.com · or through the contact page.