Privacy Policy
Video-Publisher - Last updated: March 12, 2026
1. Introduction
NERON ("we", "our", or "us") operates Video-Publisher ("the Service"). This Privacy Policy explains how we collect, use, and protect your information when you use Video-Publisher.
2. Information We Collect
2.1 Account Information
- Authentication data: Email address and encrypted password used for your Video-Publisher account.
2.2 Platform Connection Data
When you connect social media accounts (TikTok, YouTube, Instagram), we store:
- OAuth tokens: Encrypted access and refresh tokens required to publish on your behalf. These are encrypted using AES-256-GCM before storage.
- Account identifiers: Platform username or display name for identification in the dashboard.
- Token expiry dates: To manage automatic token refresh.
We do not store your social media passwords. Authentication is handled entirely through each platform's official OAuth flow.
2.3 Content Data
- Pipeline settings: Topics, preferences, and configuration for video generation.
- Generated content: AI-generated scripts, voiceover audio, and assembled videos are stored temporarily during processing.
- Publishing history: Records of which videos were published to which platforms.
2.4 API Keys
If you provide third-party API keys (OpenAI, ElevenLabs, Pexels), these are stored in encrypted form and used only to process your video generation requests.
2.5 Data We Do NOT Collect
- We do not access your social media followers or messages
- We do not read your social media feed or interactions
- We do not sell any data to third parties
- We do not use advertising or tracking SDKs
3. How We Use Your Information
- Video generation: Processing your topics and settings through AI pipelines to create videos.
- Publishing: Using stored OAuth tokens to publish videos to your connected platforms.
- Token management: Automatically refreshing expired tokens to maintain platform connections.
- Analytics: Displaying video performance metrics from connected platforms in your dashboard.
4. Third-Party Services
Video-Publisher integrates with the following third-party services:
- TikTok: For video publishing via the Content Posting API. See TikTok Privacy Policy.
- YouTube (Google): For publishing YouTube Shorts. See Google Privacy Policy.
- Instagram (Meta): For publishing Instagram Reels. See Instagram Privacy Policy.
- OpenAI: For AI script generation (when using your API key). See OpenAI Privacy Policy.
- ElevenLabs: For AI voice synthesis (when using your API key). See ElevenLabs Privacy Policy.
5. Data Security
We protect your data through:
- Encryption at rest: OAuth tokens and API keys are encrypted using AES-256-GCM before database storage.
- Encrypted state parameters: OAuth flow state is signed with JWT to prevent CSRF attacks.
- PKCE: Platform OAuth flows use Proof Key for Code Exchange where supported.
- Secure transport: All API communication uses HTTPS/TLS.
6. Data Retention
- Account data: Retained while your account is active.
- Generated videos: Temporary files are deleted after publishing.
- OAuth tokens: Retained while platform connection is active. Deleted when you disconnect a platform.
- Publishing history: Retained for analytics purposes while your account is active.
7. Your Rights
You have the right to:
- Disconnect: Remove any platform connection at any time, which deletes stored tokens.
- Delete: Request deletion of your account and all associated data.
- Access: View all data associated with your account through the dashboard.
- Revoke: Revoke Video-Publisher's access from any connected platform's settings.
8. Children's Privacy
Video-Publisher is not intended for use by anyone under 18 years of age. We do not knowingly collect information from minors.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by updating the "Last updated" date.
10. Contact Us
If you have questions about this Privacy Policy, contact us at: [email protected]
