Privacy Policy

Effective Date: April 9, 2026

This Privacy Policy describes how LoopCast ("we," "us," or "our") collects, uses, stores, and protects your personal information when you use our automated video generation and multi-platform posting service (the "Service"). We are committed to protecting your privacy and handling your data responsibly.

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

• Email address — used for authentication, account recovery, and service communications
• Account preferences — video generation settings, connected platforms, schedule configurations

1.2 OAuth Tokens and Connected Accounts

When you connect third-party platforms, we collect and store OAuth tokens for:

Platform	Data Collected	Purpose
YouTube (Google)	OAuth access & refresh tokens, channel info	Upload videos to your channel
TikTok	OAuth access token, account info	Post videos to your account
Instagram	OAuth access token, account info	Post content to your account
Facebook	OAuth access token, page info	Post videos to your pages

All OAuth tokens are encrypted at rest using AES-256-GCM encryption before being stored in our database.

1.3 Generated Content

We store data related to video generation, including:

• Topics and prompts you provide
• Generated scripts, voiceover audio, and assembled video files
• Generation metadata (duration, status, timestamps)

1.4 Usage Data

We automatically collect:

• Page views and feature usage patterns
• Browser type and device information
• IP address (for security and analytics)
• Referring URLs

2. How We Use Your Information

We use your information to:

• Provide the Service — generate videos, post to connected platforms, manage schedules
• Authenticate your identity — verify logins and protect your account
• Improve the Service — analyze usage patterns to enhance features and performance
• Communicate with you — send service updates, security alerts, and support responses
• Ensure security — detect and prevent fraud, abuse, and unauthorized access

3. Third-Party Services

LoopCast integrates with the following third-party services to provide core functionality:

• Google Cloud Text-to-Speech — generates voiceover audio from scripts
• OpenAI — assists with script generation and content optimization
• Pixabay & Pexels — sources royalty-free stock footage and images
• YouTube, TikTok, Instagram, Facebook APIs — posts content to your connected accounts
• Meta Pixel — tracks anonymized page views and conversion events for advertising analytics

Each third-party service has its own privacy policy. We encourage you to review them. We only share the minimum data necessary for each service to function.

4. Data Storage and Security

We take the security of your data seriously:

• Encryption — OAuth tokens are encrypted with AES-256-GCM before storage
• Secure transport — all data transmitted over HTTPS/TLS
• Database security — parameterized queries prevent SQL injection; database access is restricted
• JWT authentication — session tokens expire after 7 days
• Infrastructure — hosted on Render with SSL-encrypted PostgreSQL databases

5. Data Retention

We retain your data as follows:

• Account data — retained while your account is active, deleted within 30 days of account deletion
• Generated videos — retained for the duration of your account; you may delete individual videos at any time
• OAuth tokens — deleted immediately upon disconnecting a platform or deleting your account
• Usage logs — retained for up to 12 months for security and analytics purposes

6. Cookies and Tracking

LoopCast uses the following tracking technologies:

• localStorage — stores your authentication token and user preferences locally in your browser
• Meta Pixel — tracks anonymized page views and conversion events for advertising optimization
• Analytics — we may use analytics tools to understand usage patterns and improve the Service

We do not use third-party tracking cookies for advertising beyond Meta Pixel. You can opt out of Meta tracking via your Facebook Ad Preferences.

7. Your Rights

7.1 Access and Export

You may request a copy of your personal data at any time by contacting us at legal@loopcast.media. We will provide your data in a portable, machine-readable format within 30 days.

7.2 Deletion

You may request deletion of your account and all associated data by contacting us. Upon request, we will:

• Delete your account and personal information within 30 days
• Remove all generated content from our servers
• Revoke and delete all stored OAuth tokens

Note: Content already posted to third-party platforms (YouTube, TikTok, etc.) must be removed directly on those platforms.

7.3 Correction

You may update your email address and account preferences directly through the Service, or by contacting us.

7.4 Opt-Out

You may disconnect any connected platform at any time through your dashboard, which immediately revokes our access and deletes the stored OAuth tokens.

8. GDPR (European Users)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

• Legal basis — we process your data based on your consent (account creation) and legitimate interest (service improvement, security)
• Right to restrict processing — you may request we limit how we use your data
• Right to object — you may object to processing based on legitimate interest
• Right to data portability — you may request your data in a structured, machine-readable format
• Right to lodge a complaint — you may file a complaint with your local data protection authority

9. CCPA (California Users)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):

• Right to know — you may request details about the personal information we collect and how it is used
• Right to delete — you may request deletion of your personal information
• Right to opt-out — we do not sell personal information to third parties
• Non-discrimination — we will not discriminate against you for exercising your privacy rights

10. Children's Privacy

LoopCast is not intended for users under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will take steps to delete it promptly.

11. International Data Transfers

Your data may be processed and stored on servers located in the United States. By using the Service, you consent to the transfer of your data to the United States, where data protection laws may differ from those in your country of residence.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. The "Effective Date" at the top of this page indicates when the policy was last revised.

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, contact us at:

Email: legal@loopcast.media

Website: https://loopcast.media