Privacy Policy

Effective date: 5 October 2026
This version replaces the policy dated 2 October 2026.

The short version: What you create is stored on our servers so it works across sessions and devices: your scripts and audit reports, saved drafts, generated narration and images, and reels we assemble for you. To produce results, your content is sent to the providers listed in section 6. API keys you bring are passed to the provider you chose and are never stored. We never sell your data. Questions: hello@vidwhale.com.

1. Who we are

VidWhale ("VidWhale", "we", "us") is a pre-publish content intelligence tool for video creators, operated by VidWhale For Computer Systems & Communication Equipment Software Design, a sole establishment licensed by the Dubai Department of Economy and Tourism (licence no. 1657798), Dubai, United Arab Emirates. This policy explains what information we handle when you use vidwhale.com and the VidWhale application (the "Service").

2. Your account and sign-in

Most features that use our AI services require a free account. You sign in with Google; we request your basic profile (name, email address, and profile picture) and nothing else through sign-in. Signing in sets a session cookie (vw_session) that keeps you signed in for up to 30 days. This cookie identifies your account and is required for the Service to work; we do not use advertising or cross-site tracking cookies.

3. What we store on our servers

When you use the following features, the associated data is stored in our cloud infrastructure (Google Cloud, including Firestore and Cloud Storage), linked to your account:

Audit reports — when you analyze a script, the script text and the resulting report are saved to your Library so you can return to them.
Drafts — when you save a Reel Studio draft, the shot list, settings, and generated narration audio are stored so you can continue on any device.
Scripts and reels: scripts you write or generate (and the idea behind them), and the shot lists of reels you make, are saved to your account.
Reels assembled on our servers: when a reel uses transitions, captions or moving stills, we assemble it on our servers and keep the video file for 15 days.
Generated media — AI images, narration audio you generate and video clips you generate or claim are stored so they can be delivered to you and re-used in your drafts and reels.
Anonymous identifiers — before sign-in, the app uses a random anonymous ID. When you sign in, that ID is associated with your account so your earlier work can follow you.

The reel video file is deleted after 15 days and draft narration audio 45 days after your last save; the Library entry stays. Generated clips, AI images and audit reports are kept with no fixed end date; email hello@vidwhale.com to have them deleted.

Payments are processed by Stripe, our payment processor.

4. Analytics

We use Cloudflare Web Analytics to understand how many people visit the site and which pages they read. It does not use cookies, does not track you across other websites, and does not collect information that identifies you personally. Cloudflare processes this data on our behalf. Some pages load fonts and code libraries from Google Fonts and jsDelivr, which see your IP address when your browser fetches them.

5. What stays on your device

Some reels are assembled inside your browser and are never uploaded to us; reels that use transitions, captions or moving stills are assembled on our servers instead (see section 3). API keys you bring for third-party services (such as ElevenLabs, OpenAI, PlayHT, fal.ai or video generation providers) are stored only in your browser's local storage. When you use one, the key passes through our servers to that provider and is never stored. Your prompt or script is also checked by our content-safety screening first (see section 6).

6. AI processing

To produce results and keep the Service safe, the content you submit is processed by these providers acting on our behalf, solely to fulfil your request:

Google (Gemini models on Vertex AI, and Cloud Text-to-Speech): script analysis, writing help, image generation, video-frame analysis and narration.
xAI (Grok models): writing reel drafts from your idea or script.
ElevenLabs: Premium narration voices.
Microsoft Azure Speech: Included narration voices.
OpenAI (moderation): checking narration scripts for prohibited content before any voice is generated.
Creem (moderation): checking image, video and sound prompts for prohibited content.
Pexels: finding stock footage that matches your shots. We send search terms, not your script.

We also use Google Cloud to host the Service and store your data, Resend to send account and billing emails, Stripe to process payments, and Cloudflare Web Analytics for page statistics (section 4).

7. YouTube account connection

You can optionally connect your YouTube channel. If you do, we request read-only access (youtube.readonly and yt-analytics.readonly) to show your channel statistics inside VidWhale. We store an encrypted refresh token so the connection persists; we can never post, upload, edit, or delete anything on your channel. You can disconnect at any time in the app or via your Google Account permissions page, which deletes the stored token. VidWhale's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

8. What we never do

We never sell your data. We never use your content to advertise to you. We never store the API keys you bring.

9. Deletion

You can request deletion of your account and stored data at any time — see our data deletion page or email hello@vidwhale.com.

10. Where your data lives and how long logs are kept

Our servers and storage run on Google Cloud in the us-central1 region (United States). Server logs are retained for up to 30 days for security and troubleshooting.

11. Your rights

Depending on where you live (including under the EU GDPR and the UAE Personal Data Protection Law), you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise any of these, email hello@vidwhale.com and we'll respond as the law requires.

12. Children

The Service is not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child has provided us data, contact us and we'll delete it.

13. Changes

We'll update this page when our practices change, with the effective date above.

14. Contact

VidWhale For Computer Systems & Communication Equipment Software Design
Flat A 201, Silicon Gate 1, Dubai Silicon Oasis, Dubai, United Arab Emirates
Licence no. 1657798 · hello@vidwhale.com · +971 50 325 5710