Privacy Policy
Last updated: September 23, 2026
ClipFlow ("we", "us", "our") provides a multi-platform video publishing service that lets you distribute your videos to YouTube, TikTok, Facebook and Instagram. This Privacy Policy explains what information we collect, how we use it, and the choices you have.
1. Information we collect
1.1 Account information
When you create an account, we collect your name, email address and a password (stored in hashed form).
1.2 Connected platform data
When you connect a social media account, we receive an authorization token from that platform's OAuth flow. Specifically:
- TikTok: we receive your Open ID, display name, avatar and OAuth tokens (access token and refresh token) through TikTok's official API, using the
user.info.basic,video.uploadandvideo.publishscopes. - YouTube: we receive your channel identifier and OAuth tokens through Google's API, using the
https://www.googleapis.com/auth/youtubescope (see section 4). - Facebook & Instagram: we receive your page identifier and OAuth tokens through Meta's API.
1.3 Content you upload
We temporarily store the video files you submit so they can be transferred to your selected platforms. Videos are removed from our servers shortly after publishing completes.
2. How we use your information
- To publish videos to your connected accounts on your behalf, at your request.
- To generate titles and hashtags using automated content analysis.
- To provide and improve the ClipFlow service, and to respond to support requests.
- To keep your account secure and prevent abuse or fraud.
We do not post content without your explicit action, and we never sell your personal data.
3. TikTok API data handling
When you connect your TikTok account, ClipFlow accesses your TikTok profile information and publishes videos to your TikTok account through TikTok's official Content Posting API. The authorization tokens we receive are used solely to perform these actions on your behalf and are stored securely. We do not share your TikTok data or tokens with any third party.
You may revoke ClipFlow's access to your TikTok account at any time from TikTok's "Security and permissions" settings. Revoking access will stop all future publishing to that account.
4. Google and YouTube API Services
ClipFlow's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
When you connect your YouTube account, ClipFlow requests the https://www.googleapis.com/auth/youtube scope. This scope is used only to upload videos to your own channel, set the video title, description and tags you provide, and assign the video to one of your existing playlists. ClipFlow does not read, download, modify or delete any content you have not explicitly submitted for publishing, and does not access your subscribers, comments, private messages or analytics for any purpose other than displaying your own channel statistics back to you.
Data received from Google APIs is used solely to provide the publishing functionality you request. Specifically, ClipFlow will not:
- use Google user data for advertising, retargeting or marketing purposes;
- sell, license, rent or transfer Google user data to any third party;
- use Google user data to train machine learning or AI models;
- allow humans to read your data, except where necessary for security, debugging with your consent, or where required by law.
Your Google OAuth access and refresh tokens are stored in an encrypted local credential store accessible only to your own ClipFlow instance. Tokens are never transmitted to any party other than Google's authorization and API endpoints.
Revoking access: you may revoke ClipFlow's access to your Google account at any time by visiting your Google Account permissions page and removing ClipFlow. You may also disconnect the account from within ClipFlow, which deletes the stored tokens immediately. Google's own handling of your information is governed by the Google Privacy Policy. ClipFlow's use of YouTube API Services is additionally subject to the YouTube API Services Terms of Service and the YouTube API Services Developer Policies.
5. Data sharing and third parties
We share data only with the platform you explicitly connect (e.g., TikTok, Google, Meta) to fulfill the publishing you request, and with trusted infrastructure providers (hosting, storage) that are contractually bound to keep your data confidential. We do not sell, rent or trade your personal information.
6. Data retention
We retain your account information as long as your account is active. Uploaded video files are deleted within 24 hours of a completed or failed publishing attempt. OAuth tokens are stored until you disconnect the platform or delete your account. Upon your request, stored tokens and any associated identifiers are permanently deleted within 30 days.
7. Data security
We use industry-standard measures including encryption in transit (TLS), encryption at rest, and access controls to protect your information. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
8. Your rights
Depending on your location, you may have the right to access, correct, export or delete your personal data, and to object to or restrict certain processing. To exercise these rights, contact us at privacy@clipflow.app.
9. Children's privacy
ClipFlow is not directed to children under 13 (or the applicable minimum age in your jurisdiction), and we do not knowingly collect personal information from children.
10. Changes to this policy
We may update this Privacy Policy from time to time. We will post the revised policy on this page and update the "Last updated" date.
11. Contact
If you have questions about this Privacy Policy, contact us at privacy@clipflow.app.