VidFlow AI Privacy Policy
Effective date: July 29, 2026

This Privacy Policy explains how VidFlow AI handles information when you use the VidFlow AI WordPress plugin, the VidFlow AI website, and related documentation or support resources.

1. Scope

This policy covers:

- the VidFlow AI WordPress plugin;
- the VidFlow AI website; and
- our documentation and related communications.

This policy does not replace the privacy policies of third-party AI video providers, WordPress hosts, analytics services, payment processors, or other third parties you use with the plugin.

2. Core product model

For the current free plugin release, VidFlow AI works as a local WordPress integration layer for supported third-party AI video providers.

In the bundled bring-your-own-key workflow:

- you enter provider API credentials into your WordPress site;
- your WordPress site sends requests directly to the provider you configure;
- provider responses are returned to your WordPress site; and
- VidFlow AI does not require a VidFlow-hosted credit relay for the bundled provider flow.

If you connect YouTube, your WordPress site also communicates directly with Google and YouTube to authorize the channel, validate the connection, and upload videos you explicitly queue for publishing. VidFlow AI does not relay those uploads through a VidFlow-hosted service.

If we later add hosted account systems, licensing, cloud workflows, analytics dashboards, or paid services, we may update this policy to describe those features.

3. Information processed on your WordPress site

Depending on how you use the plugin, VidFlow AI may store or process the following information on your WordPress site:

- provider API credentials or tokens that you choose to save;
- video titles, prompts, negative prompts, generation settings, and aspect ratio or model selections;
- Start Frame or compatible End Frame image URLs, attachment references, or other media inputs you choose to use;
- provider job identifiers, statuses, error messages, timestamps, and returned media URLs;
- Google OAuth client settings, encrypted OAuth secrets or tokens, and connected YouTube channel metadata when you configure YouTube publishing;
- publishing details such as titles, descriptions, tags, categories, visibility choices, destination job statuses, provider video IDs, published URLs, timestamps, and retry information;
- plugin settings, UI preferences, and workflow records such as library and publishing-log entries;
- generated content metadata, optional Media Library attachments, thumbnail attachments, signed-playback metadata, and shortcode or block configuration; and
- operational logs created for debugging, polling, or troubleshooting.

Some of this information may be personal data if it relates to an identified or identifiable person.

4. Information sent to third-party providers and publishing destinations

When you test a connection, submit a generation, retry a job, or poll job status, your WordPress site may send relevant data to the configured provider, such as:

- your provider credential or authorization token;
- prompt text and generation parameters;
- Start Frame or compatible End Frame image URLs or files, where supported;
- callback or polling requests needed to complete the job; and
- related technical request metadata required by the provider API.

Returned provider data may include:

- task or job IDs;
- processing status;
- error details;
- generated media URLs; and
- related output metadata.

Third-party providers process data under their own terms and privacy policies. Review those policies before using a provider.

When you connect or use YouTube publishing, your WordPress site may send the following information directly to Google or YouTube:

- your Google OAuth client ID, client secret, authorization code, redirect URI, requested scopes, access token, or refresh token as required by the OAuth flow;
- a request for the identity of the connected YouTube channel when you test or validate the connection;
- the bytes of a completed video that you explicitly queue for upload; and
- the publishing title, description, tags, category, visibility, and related upload metadata you choose.

Google or YouTube may return channel details, access or refresh tokens, upload-session information, platform video IDs, processing status, errors, and public or embed URLs. VidFlow AI stores the validated refresh token encrypted in WordPress and removes resumable upload-session URLs from publishing logs after successful uploads.

Google and YouTube process this data under their own terms and privacy policies. Review these documents before connecting a channel:

- Google Privacy Policy: https://policies.google.com/privacy
- YouTube Terms of Service: https://www.youtube.com/t/terms
- YouTube API Services Terms of Service: https://developers.google.com/youtube/terms/api-services-terms-of-service

5. VidFlow AI website information

If you visit the VidFlow AI website, contact us, request support, or later purchase a paid offering, we may collect information you submit directly, such as your name, email address, company name, message contents, billing details, or account details.

The website contact form is provided through Forminator. A contact submission may include your name, email address, request category, subject, message, consent record, and technical anti-abuse metadata such as your IP address. We use this information to route and respond to support, sales, provider setup, security, privacy, and general inquiries.

Contact form submissions are retained for up to 90 days unless they are needed longer for an active support request, security investigation, legal obligation, or accounting record. The website operator may delete submissions sooner when they are no longer needed.

The website may also collect standard technical information such as IP address, browser type, referral data, pages viewed, and approximate usage timing through hosting, security, or analytics tooling.

6. How we use information

We use information to:

- provide and operate the plugin and website;
- generate, manage, embed, download, and publish videos when you request those actions;
- document and explain plugin functionality;
- troubleshoot issues and respond to support requests;
- maintain security, integrity, and abuse prevention;
- improve compatibility, performance, and product decisions; and
- comply with legal obligations and enforce our terms.

7. Legal bases

Where applicable law requires a legal basis for processing, we rely on one or more of the following:

- your consent;
- performance of a contract;
- compliance with legal obligations; and
- legitimate interests such as operating, securing, improving, and supporting our products.

8. Data sharing

We may share information:

- with third-party providers that you choose to connect;
- with Google and YouTube when you connect a channel, validate it, or explicitly queue a video for publishing;
- with hosting, infrastructure, analytics, email, payment, or support vendors that help us operate our website or services;
- with professional advisors or authorities when required by law or needed to protect rights, safety, or security; and
- in connection with a merger, acquisition, financing, reorganization, or sale of assets.

We do not sell your personal information in exchange for money in the ordinary course of operating the current free plugin.

9. Data retention

Data stored by the plugin on your WordPress site remains under the control of the site operator and is retained according to the site's own settings, backups, logs, and deletion practices. Depending on enabled features, this may include generation records, encrypted credentials or OAuth tokens, publishing logs, published destination URLs, locally imported video attachments, and thumbnail attachments. VidFlow AI can remove plugin data during uninstall when the site operator enables the uninstall cleanup setting; WordPress backups or separately managed media copies may remain under the operator's retention practices.

Information we receive through our website, support channels, or future account systems is retained for as long as reasonably necessary to provide services, resolve disputes, maintain records, comply with law, and protect our rights.

10. Security

We take reasonable steps to protect information we control, but no system is completely secure. You are responsible for securing your WordPress site, administrator accounts, hosting environment, backups, and provider credentials.

If you choose to store provider credentials in WordPress, you should limit administrator access and follow security best practices for your host and site.

11. International transfers

Your data may be processed in countries other than your own by third-party providers, infrastructure vendors, or service providers. Those countries may have different data protection laws.

12. Your choices and rights

Depending on your location, you may have rights to access, correct, delete, export, restrict, or object to certain processing of personal information.

For plugin data stored on your own WordPress site, the site operator is generally the party best positioned to respond because that operator controls the site database and settings.

For data we directly control through our website or support systems, you may contact us using the website listed below.

13. Children's privacy

VidFlow AI is not intended for children under 13, and we do not knowingly collect personal information from children through our website or services.

14. Changes to this policy

We may update this Privacy Policy from time to time. The latest version will be included in the plugin package and may also be published on the VidFlow AI website.

15. Contact

Public website status: Pre-launch. The canonical planned public URL is https://vidflow-ai.com/. Until launch, use the WordPress.org plugin page and support forum below for Free plugin support.

Planned website: https://vidflow-ai.com/
Planned contact page: https://vidflow-ai.com/contact/
Planned Privacy Policy page: https://vidflow-ai.com/privacy-policy/
Planned Terms and Conditions page: https://vidflow-ai.com/terms/
Free plugin and support: https://wordpress.org/plugins/vidflow-ai/

Bundled Privacy Policy file: PRIVACY-POLICY.txt
Bundled Terms file: TERMS-AND-CONDITIONS.txt
