Privacy Policy

• Account information. Your name, email address, and a cryptographically hashed password when you create an account. We never store your password in plain text.
• Connected channel data. When you connect a YouTube channel, we retrieve public channel information (name, avatar, subscriber, view, and video counts) via YouTube API Services to build your workspace.
• Content you create. Prompts, chat messages with the AI producer, story settings, custom characters, and the media the studio generates for you (scripts, images, audio, video).
• Technical basics. Standard server logs (IP address, browser type, timestamps) used for security, rate limiting, and debugging.

• To provide the service: generating videos, syncing channel stats, and saving your projects.
• To secure accounts: authentication sessions, abuse prevention, and rate limiting.
• To communicate with you: transactional emails such as password resets, and replies when you contact us.
• To improve the product: understanding aggregate usage. We do not use your private content to train our own models.

Generating a video requires sending relevant content to the AI providers that power the pipeline. Depending on the features you use, prompts and generated assets may be processed by: Google (Gemini models), fal.ai (video motion models), ElevenLabs (voice synthesis), and — for transactional email — Resend. Each provider processes data under its own terms and privacy policy; we send only what the requested generation needs.

VidElixir uses YouTube API Services to read public information about channels you connect. By using this feature you also agree to the YouTube Terms of Service. Google's handling of data is described in the Google Privacy Policy. You can disconnect a channel at any time by deleting it from your dashboard, which removes its stored data from your workspace.

We use a single first-party session cookie to keep you logged in, plus a local preference for your light/dark theme. We do not set third-party advertising or cross-site tracking cookies.

Your account data and generated content are retained while your account is active. You can request deletion of your account and associated data at any time by emailing hello@videlixir.com; we will complete verified requests within 30 days, except where we must retain records to meet legal obligations.

Depending on where you live (including under GDPR and CCPA), you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. Contact us at hello@videlixir.com to exercise any of these rights.

VidElixir helps creators make content for children, but the service itself is for creators and is not directed to children under 13. We do not knowingly collect personal information from children under 13; if you believe a child has created an account, contact us and we will delete it.

Passwords are hashed with scrypt, sessions are signed and HTTP-only, connections are encrypted with TLS, and access to production systems is restricted. No system is perfectly secure — if we learn of a breach affecting your data, we will notify you as required by law.

If we make material changes, we will update the effective date above and, for significant changes, notify account holders by email. Questions? Write to hello@videlixir.com or see our Terms of Service.