Privacy Policy

Information we collect

• Account data — your email address and a securely hashed (bcrypt) password. We never store your password in plain text.
• Videos and derived content — the video files you upload and everything we generate from them: transcripts, chapter lists, titles, descriptions, tags, extracted clips, and caption files.
• Connected accounts — when you connect a YouTube channel, we store OAuth access and refresh tokens. These tokens are encrypted at rest and used only to publish on your behalf.
• Billing data — if you subscribe, our payment processor (Stripe) handles your card details. We never see or store full card numbers; we keep a customer identifier and your plan and usage counts.
• Operational data — basic logs needed to run the service and diagnose failures.

How we use your information

We use your information solely to provide and improve the service: transcribing your video, analyzing it, generating copy, extracting clips, publishing to platforms you connect, processing payments, and sending you account and transactional email. We do not sell your personal information, and we do not use your uploaded videos or transcripts to train our own models.

Service providers we share data with

To deliver the service we send the minimum necessary data to trusted processors, each under their own terms:

• AssemblyAI — speech-to-text transcription of your video's audio.
• Anthropic (Claude) — content analysis and copy generation from your transcript.
• Google / YouTube — publishing to your channel when you connect it (see below).
• Stripe — subscription billing and payment processing.
• Resend — delivery of verification, password-reset, and account email.
• Railway and object storage (S3-compatible) — application hosting and file storage.

YouTube API Services

RepurposeFlow uses YouTube API Services. By connecting your channel you agree to the YouTube Terms of Service. Our use of information received from YouTube APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google's handling of your data is described in the Google Privacy Policy. You can review and revoke RepurposeFlow's access to your Google account at any time at myaccount.google.com/permissions.

Data retention and deletion

We keep your videos, derived content, and connected-account tokens until you delete them or close your account. Deleting a job removes its files and data; disconnecting a channel removes its stored tokens. To delete your account and associated data entirely, email support@repurposeflow.io.

Security

Traffic is served over TLS, passwords are stored hashed with bcrypt, and third-party OAuth tokens are encrypted at rest. No method of transmission or storage is perfectly secure, but we take reasonable measures to protect your data.

Children

RepurposeFlow is not directed to children under 13 (or the minimum age in your jurisdiction), and we do not knowingly collect their data.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected by an updated date at the top of this page.