Privacy Policy

VidlyGen Chrome Extension

1. Information We Collect

1.1 Account Information

When you authenticate with our extension using Google OAuth, we collect:

• Google Account Information: Your email address, name, and profile picture
• Google ID: A unique identifier from your Google account
• Authentication Data: JWT tokens and refresh tokens for secure access

1.2 Article Processing Data

When you process articles with our extension, we collect:

• Article URLs: The web pages you choose to convert to videos
• Article Content: Text content extracted from the articles
• Article Metadata: Titles, domains, and publication information
• Processing Preferences: Video style, language, duration, and target audience selections

1.3 Usage Analytics

We automatically collect usage information including:

Data Type	Purpose	Retention Period
Processing attempts and success rates	Service improvement and troubleshooting	90 days
Video generation duration and performance	Optimization and quality monitoring	90 days
Extension usage patterns	Feature development and user experience	90 days
Error logs and debugging information	Technical support and bug fixes	30 days

1.4 Technical Information

• Extension Version: To ensure compatibility and provide support
• Browser Information: Chrome version and user agent (automatically collected)
• IP Address: For security and fraud prevention (automatically collected)
• Session Data: Temporary authentication and processing identifiers

1.5 Payment Information

For subscription services, we collect:

• Billing Information: Payment method details (processed securely by Razorpay)
• Transaction History: Payment records, subscription status, and billing cycles
• Plan Information: Your subscription type (Free, Pro) and usage limits

2. How We Use Your Information

2.1 Core Service Functionality

• Article Processing: Convert web articles into video scripts using AI
• Content Generation: Create images and audio for your videos
• User Authentication: Secure access to your account and data
• Usage Tracking: Monitor your subscription limits and remaining usage

2.2 Service Improvement

• Performance Optimization: Improve processing speed and accuracy
• Feature Development: Add new capabilities based on usage patterns
• Quality Assurance: Monitor success rates and identify issues
• Customer Support: Provide technical assistance and troubleshooting

2.3 Business Operations

• Subscription Management: Process payments and manage plan upgrades
• Fraud Prevention: Detect and prevent unauthorized usage
• Legal Compliance: Meet regulatory requirements and respond to legal requests

3. Data Sharing and Third Parties

3.1 AI Service Providers

We share article content with trusted AI providers to deliver our core functionality:

• OpenAI: Article content analysis and script generation
• ElevenLabs/Azure Speech: Audio generation from scripts
• Runware: Image generation for video scenes

3.2 Payment Processing

• Razorpay: Secure payment processing for subscription services
• Google OAuth: Authentication and identity verification

3.3 Infrastructure Partners

• Cloud Hosting: Secure data storage and processing infrastructure
• CDN Services: Fast delivery of generated media content

4. Data Security and Storage

4.1 Security Measures

• Encryption: All data transmitted over HTTPS/WSS secure connections
• Authentication: JWT tokens with secure signing and expiration
• Database Security: Encrypted storage with access controls
• API Security: Rate limiting and request validation

4.2 Data Storage Locations

Your data is stored securely in:

• Primary Database: European Union data centers with GDPR compliance
• Temporary Processing: Encrypted memory during video generation
• Local Cache: Article content cached locally in Chrome for 7 days

4.3 Data Retention

Data Type	Retention Period	Deletion Method
Account Information	Until account deletion	Secure deletion upon request
Article Content	7 days (cached)	Automatic deletion
Usage Logs	90 days	Automatic deletion
Payment Records	7 years (legal requirement)	Secure archival then deletion

5. Your Privacy Rights

5.1 GDPR Rights (EU Users)

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data
• Right to Portability: Receive your data in a machine-readable format
• Right to Restrict Processing: Limit how we use your data
• Right to Object: Opt-out of certain data processing activities

5.2 CCPA Rights (California Users)

• Right to Know: Information about data collection and sharing
• Right to Delete: Request deletion of personal information
• Right to Opt-Out: Opt-out of data sale (we do not sell data)
• Right to Non-Discrimination: Equal service regardless of privacy choices

5.3 Exercising Your Rights

To exercise any of these rights:

• Account Settings: Access and modify your profile in the extension
• Data Export: Use the built-in export feature for GDPR compliance
• Account Deletion: Delete your account directly from the extension
• Contact Support: Email us for assistance with privacy requests

6. Cookies and Local Storage

6.1 Extension Storage

Our extension stores data locally in your browser using Chrome's storage API:

• Authentication Tokens: Secure access to your account
• User Preferences: Your video style and language preferences
• Article Cache: Recently processed articles for faster access
• Usage Statistics: Local tracking of your video generation activity

6.2 No Traditional Cookies

Our extension does not use traditional web cookies. All data storage is handled through Chrome's secure extension storage APIs.

7. Children's Privacy

Our service is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us to request deletion.

8. International Data Transfers

Your data may be processed in countries outside your home country. We ensure appropriate safeguards are in place:

• GDPR Compliance: Standard contractual clauses for EU data transfers
• Security Standards: Equivalent protection regardless of processing location
• Legal Frameworks: Compliance with applicable international data transfer laws

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes:

• We will update the "Last Updated" date at the top of this policy
• For material changes, we will notify users through the extension
• Continued use of the extension constitutes acceptance of the updated policy
• You can always find the current version at this URL

10. Legal Basis for Processing (GDPR)

We process your personal data under the following legal bases:

• Contract Performance: Providing the video generation service you requested
• Legitimate Interests: Service improvement, security, and customer support
• Consent: Marketing communications and optional features
• Legal Obligation: Compliance with applicable laws and regulations

12. Dispute Resolution

If you have concerns about our privacy practices:

• First Contact Us: We aim to resolve privacy concerns directly
• Supervisory Authority: EU users may lodge complaints with their local data protection authority
• State Authorities: US users may contact their state's attorney general's office