01. Overview & Data Controller
This Privacy Policy outlines how ContentVeo ("we", "us", or "our"), operated by Tecnomaxx Digital Ltd, collects, uses, protects, and discloses information when you use our video repurposing, multi-canvas reframing, and social media scheduling platform accessible via contentveo.com and app.contentveo.com (the "Service").
We are committed to maintaining the highest standards of data security, confidentiality, and regulatory compliance under the European Union General Data Protection Regulation (GDPR), the UK Data Protection Act 2018, the California Consumer Privacy Act (CCPA), and applicable international privacy laws.
02. Information We Collect
We collect only the minimum necessary information required to deliver automated video repurposing and multi-channel publishing services:
- Account Information: Name, email address, password hash (via secure Supabase Auth), and billing identifiers.
- Connected Social Media Accounts: Platform user identifiers, channel handles, profile metadata, and delegated publishing permissions authorized by you through official OAuth 2.0 flows.
- Media and Video Content: Video URLs submitted for clipping, uploaded video files, audio tracks, and user-generated project captions.
- Usage & Telemetry Data: Browser user agent, IP address, referral URLs, logging timestamps, and platform API error responses for diagnostic and service improvement purposes.
03. Video Processing & Audio Transcripts
When you submit a long-form video or podcast URL for clipping, our automated pipeline performs the following processing actions:
- Audio extraction and speech-to-text transcription to generate timestamped transcripts.
- Computer vision face and active-speaker detection to crop widescreen video (16:9) into vertical clips (9:16).
- Generation of short-form video clips, captions, title recommendations, and platform captions.
All video and audio files processed by ContentVeo are stored in encrypted object storage and are deleted automatically: uploaded source files within 3 days, clips and covers 3 days after they are made on the Free plan, 15 days on Creator and Pro, and 30 days on Business (see section 07). We do not claim ownership of any content you process through ContentVeo.
04. OAuth 2.0 Security & Token Encryption
ContentVeo connects to external social media platforms (YouTube, Instagram, Facebook, TikTok, LinkedIn, and X) strictly through official OAuth 2.0 API protocols:
Zero Password Storage: ContentVeo never asks for, captures, or stores your social network passwords. You authenticate directly on the third-party provider's official login interface.
AES-256-GCM Encryption at Rest: All received access tokens and refresh tokens are encrypted at rest using industry-standard AES-256-GCM cryptography before being persisted to our database.
Isolated Server Execution: Token exchange and renewal requests run through isolated backend edge routines, preventing credential leakage to client browsers.
05. AI Subprocessors & Data Isolation
To deliver speech transcription, speaker detection, and caption generation, ContentVeo engages trusted infrastructure and enterprise AI subprocessors under strict Data Processing Agreements:
- Supabase Inc.: Cloud database, user authentication, and secure edge execution infrastructure.
- Groq Inc.: Ultra-low latency Whisper speech-to-text inference and summarization.
- Google Cloud & Google AI (Gemini): Video processing servers and encrypted file storage (Cloud Run and Cloud Storage, United States), video analysis and caption generation.
- Anthropic PBC (Claude): Choosing the best moments, hooks and captions from the transcript.
- OpenRouter, Inc. and Zhipu AI (Z.ai): backup AI providers, used only for transcript text when the providers above are unavailable.
- Titan Email (provided through Hostinger): sends account and “your clips are ready” emails.
- Stripe (Stripe, Inc.) — payment processing for paid plans. Stripe receives your billing details and card information directly; ContentVeo never sees or stores your card number.
06. Third-Party Social Platform API Compliance
ContentVeo interfaces directly with developer APIs governed by third-party terms. We request only the minimum scopes necessary to provide automated clip scheduling:
● Meta Platforms (Facebook & Instagram)
ContentVeo uses the Meta Graph API to allow users to publish clips, captions, and thumbnails to their connected Facebook Pages and Instagram Business or Creator accounts.
Requested Scopes: pages_show_list, pages_read_engagement, pages_manage_posts, instagram_basic, instagram_content_publish.
We do not access personal messages, private friends lists, or unrelated personal feed data. Permissions can be revoked at any time from your Facebook or Instagram security settings or from the ContentVeo dashboard.
● TikTok (ByteDance)
ContentVeo utilizes the official TikTok Content Posting API. Video uploads occur strictly when initiated or scheduled by the user.
Requested Scopes: user.info.basic, video.upload, video.publish.
● Google & YouTube API Services
ContentVeo's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
What we access, and why:
- Sign in with Google (openid, email, profile): your name, email address and profile picture, used only to create and secure your ContentVeo account.
- YouTube (youtube.upload, youtube.readonly): to upload the clips you choose to your channel at the time you post or schedule them, and to show which channel is connected. We do not read, change or delete your other videos.
- Google Drive file picker (drive.file): when you choose a video with “Upload from Google Drive”, ContentVeo can read only that file — never the rest of your Drive. The short-lived access token (about one hour) is used once to download the video for processing and is deleted as soon as the download finishes.
- Shared Drive folders (Auto Pilot): if you share a folder with ContentVeo's processing account, we list and download the videos in that folder to make clips. Stop sharing the folder to end access.
How it is stored and shared: OAuth tokens are encrypted at rest and used only by our servers. Downloaded videos are processed in temporary storage and deleted afterwards; uploaded source files are deleted automatically within 3 days. The video's audio and transcript are shared with our processing and AI service providers only to make your clips. We do not sell Google user data, use it for advertising, or use it to train generalized AI or machine-learning models, and humans do not read it except with your permission, for security reasons, or where the law requires.
You can revoke ContentVeo's access at any time in your Google Account permissions, disconnect YouTube under Integrations in the app, or delete your data.
● LinkedIn (Microsoft)
ContentVeo connects via the LinkedIn Community Management API to publish user-approved video posts and captions to your own LinkedIn profile.
Requested Scopes: w_member_social, openid, profile.
● X (formerly Twitter)
ContentVeo interfaces with the X API v2 to upload video media chunks and schedule video tweets upon user direction.
Requested Scopes: tweet.read, tweet.write, users.read, media.write, offline.access.
07. User Data Deletion Instructions
In compliance with Meta Platform Data Deletion requirements, GDPR Article 17, and international privacy standards, ContentVeo provides transparent, automated mechanisms for users to delete their data:
Method A: Disconnecting Connected Social Channels
1. Log into your account at app.contentveo.com.
2. Open Integrations in the left sidebar.
3. Click the Disconnect (trash) icon next to the channel you want to remove (Facebook, Instagram, TikTok, YouTube, LinkedIn or X).
4. The access and refresh tokens for that channel are deleted immediately, and nothing more is posted to it. You can also revoke ContentVeo’s access from the platform’s own settings at any time.
Method B: Complete Workspace & Account Erasure
Delete your account yourself under Settings → Account → Delete account: this cancels any subscription and permanently deletes your account, projects, transcripts, clips, connected channels and stored files immediately. You can download a copy of your data first with Download my data on the same page. You can also ask us to do it: send an email to privacy@contentveo.com or studio@contentveo.com with the subject line Data Deletion Request.
We confirm the request came from the email address on the account, then permanently delete your account, projects, transcripts, clips, connected channels and stored files. This is completed within 30 days (usually within 72 hours), and we email you when it is done.
How long we keep your media
Video files you upload are deleted within 3 days; videos added from Google Drive or a link are downloaded only for processing and are not kept. Clip files and covers are deleted 3 days after they are made on the Free plan, 15 days on Creator and Pro, and 30 days on Business, whether or not they were posted; a clip waiting for a scheduled post is kept until that post goes out, and posts can be scheduled up to 28 days after a clip is made. Projects you move to the trash are deleted permanently after 7 days. Deleting your account removes everything immediately.
08. GDPR & CCPA Privacy Rights
Under applicable privacy regulations, you have the following enforceable rights:
Right to Access & Portability
Request a machine-readable copy of your personal data, video metadata, and connected channels.
Right to Erasure ("Right to Be Forgotten")
Permanently delete your account, saved video clips, tokens, and associated transcripts from all production systems.
Right to Revoke Permissions
Disconnect any or all social media channels instantly from your ContentVeo settings dashboard.
Non-Discrimination
We will never deny services, charge different prices, or degrade service quality for exercising your privacy rights.
09. Contact Us
For privacy inquiries, data subject access requests, or to exercise your GDPR/CCPA rights, please contact our Data Protection officer:
ContentVeo (Operated by Tecnomaxx Digital Ltd)
Company No. 15398595 (England & Wales)
Email: privacy@contentveo.com
Support: studio@contentveo.com
Website: https://contentveo.com