01. Overview & Data Controller
This Privacy Policy outlines how ContentVeo ("we", "us", or "our"), operated by Tecnomaxx Digital Ltd, collects, uses, protects, and discloses information when you use our video repurposing, multi-canvas reframing, and social media scheduling platform accessible via contentveo.com and app.contentveo.com (the "Service").
We are committed to maintaining the highest standards of data security, confidentiality, and regulatory compliance under the European Union General Data Protection Regulation (GDPR), the UK Data Protection Act 2018, the California Consumer Privacy Act (CCPA), and applicable international privacy laws.
02. Information We Collect
We collect only the minimum necessary information required to deliver automated video repurposing and multi-channel publishing services:
- Account Information: Name, email address, password hash (via secure Supabase Auth), and billing identifiers.
- Connected Social Media Accounts: Platform user identifiers, channel handles, profile metadata, and delegated publishing permissions authorized by you through official OAuth 2.0 flows.
- Media and Video Content: Video URLs submitted for clipping, uploaded video files, audio tracks, and user-generated project captions.
- Usage & Telemetry Data: Browser user agent, IP address, referral URLs, logging timestamps, and platform API error responses for diagnostic and service improvement purposes.
03. Video Processing & Audio Transcripts
When you submit a long-form video or podcast URL for clipping, our automated pipeline performs the following processing actions:
- Audio extraction and speech-to-text transcription to generate timestamped transcripts.
- Computer vision face and active-speaker detection to dynamically crop widescreen video (16:9) into vertical shorts (9:16), square feeds (1:1), or cinematic widescreen cuts (16:9).
- Generation of short-form video snippets, kinetic subtitles, title recommendations, and platform captions.
All video and audio files processed by ContentVeo are stored in encrypted object storage and are purged automatically in accordance with your workspace data retention settings. We do not claim ownership of any content you process through ContentVeo.
04. OAuth 2.0 Security & Token Encryption
ContentVeo connects to external social media platforms (YouTube, Instagram, Facebook, TikTok, LinkedIn, and X) strictly through official OAuth 2.0 API protocols:
Zero Password Storage: ContentVeo never asks for, captures, or stores your social network passwords. You authenticate directly on the third-party provider's official login interface.
AES-256-GCM Encryption at Rest: All received access tokens and refresh tokens are encrypted at rest using industry-standard AES-256-GCM cryptography before being persisted to our database.
Isolated Server Execution: Token exchange and renewal requests run through isolated backend edge routines, preventing credential leakage to client browsers.
05. AI Subprocessors & Data Isolation
To deliver speech transcription, speaker detection, and caption generation, ContentVeo engages trusted infrastructure and enterprise AI subprocessors under strict Data Processing Agreements:
- Supabase Inc.: Cloud database, user authentication, and secure edge execution infrastructure.
- Groq Inc.: Ultra-low latency Whisper speech-to-text inference and summarization.
- Google Cloud & Google AI (Gemini): Video analysis and multi-lingual semantic caption generation.
- Anthropic PBC (Claude): Narrative hook extraction and virality scoring.
06. Third-Party Social Platform API Compliance
ContentVeo interfaces directly with developer APIs governed by third-party terms. We request only the minimum scopes necessary to provide automated clip scheduling:
● Meta Platforms (Facebook & Instagram)
ContentVeo uses the Meta Graph API to allow users to publish clips, captions, and thumbnails to their connected Facebook Pages and Instagram Business or Creator accounts.
Requested Scopes: pages_show_list, pages_read_engagement, pages_manage_posts, instagram_basic, instagram_content_publish.
We do not access personal messages, private friends lists, or unrelated personal feed data. Permissions can be revoked at any time from your Facebook or Instagram security settings or from the ContentVeo dashboard.
● TikTok (ByteDance)
ContentVeo utilizes the official TikTok Content Posting API. Video uploads occur strictly when initiated or scheduled by the user.
Requested Scopes: user.info.basic, video.upload, video.publish.
● Google & YouTube API Services
ContentVeo's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Users can revoke ContentVeo's access to their Google account at any time via the Google Security Settings page.
● LinkedIn (Microsoft)
ContentVeo connects via the LinkedIn Community Management API to publish user-approved video posts and captions to member profiles or designated organizational pages.
Requested Scopes: w_member_social, openid, profile, email.
● X (formerly Twitter)
ContentVeo interfaces with the X API v2 to upload video media chunks and schedule video tweets upon user direction.
Requested Scopes: tweet.read, tweet.write, users.read.
07. User Data Deletion Instructions
In compliance with Meta Platform Data Deletion requirements, GDPR Article 17, and international privacy standards, ContentVeo provides transparent, automated mechanisms for users to delete their data:
Method A: Disconnecting Connected Social Channels
1. Log into your account at app.contentveo.com.
2. Navigate to Settings → Integrations & Connected Accounts.
3. Click Disconnect next to the desired network (Facebook, Instagram, TikTok, YouTube, LinkedIn, or X).
4. All associated encrypted OAuth access tokens, refresh tokens, and channel IDs are instantly and permanently purged from our database.
Method B: Complete Workspace & Account Erasure
To request permanent deletion of your complete user account, project history, generated video files, and transcripts, send an email to privacy@contentveo.com or studio@contentveo.com with the subject line Data Deletion Request.
Our automated compliance system verifies your account email and executes a cryptographic purge of all associated rows across Supabase tables and encrypted storage buckets within 72 hours, sending you a formal confirmation certificate.
Automated Storage Hygiene
All transient video rendering chunks and intermediate audio stems are automatically scrubbed from production storage after 30 days of inactivity.
08. GDPR & CCPA Privacy Rights
Under applicable privacy regulations, you have the following enforceable rights:
Right to Access & Portability
Request a machine-readable copy of your personal data, video metadata, and connected channels.
Right to Erasure ("Right to Be Forgotten")
Permanently delete your account, saved video clips, tokens, and associated transcripts from all production systems.
Right to Revoke Permissions
Disconnect any or all social media channels instantly from your ContentVeo settings dashboard.
Non-Discrimination
We will never deny services, charge different prices, or degrade service quality for exercising your privacy rights.
09. Contact Us
For privacy inquiries, data subject access requests, or to exercise your GDPR/CCPA rights, please contact our Data Protection officer:
ContentVeo (Operated by Tecnomaxx Digital Ltd)
Company No. 15398595 (England & Wales)
Email: privacy@contentveo.com
Support: studio@contentveo.com
Website: https://contentveo.com