Privacy Policy

Topic to Video (“we,” “us,” or “our”) provides an AI-assisted video production platform at topictovideo.com. This Privacy Policy explains what information we collect, how we use it, and your rights with respect to it. Questions or requests may be directed to help@m.topictovideo.com.

1. Information We Collect

Information you provide directly

• Account information — name, email address, and authentication credentials managed by Clerk.
• Project inputs — topics, script revisions, approval decisions, and chat messages you submit during the production pipeline.
• Uploaded files — character reference images, custom music tracks, and other assets you upload to your studio.
• Channel settings — your channel name, description, target audience, voice preferences, visual style, and related configuration.
• YouTube connection — when you connect a YouTube channel, we receive and store OAuth credentials that allow us to upload videos on your behalf (see YouTube API Services section below).
• Support communications — emails or messages you send to help@m.topictovideo.com.

Information from third parties

• Authentication data from Clerk — session tokens, user identifiers, and login metadata.
• Billing data from Stripe — subscription status, plan tier, payment method type (not full card numbers), and transaction history.
• YouTube channel data from Google — channel ID, upload playlist ID, playlist IDs and titles available for publishing destinations, and processing status of uploaded videos, received when you connect your YouTube account.

Automatically collected technical data

• IP addresses, browser user agent, and request timestamps for security and reliability purposes.
• Pipeline execution logs and step outputs stored to support your production workflow and enable retries.

2. How We Use Your Information

• Account access — to authenticate you and maintain your session.
• Billing — to manage your subscription, process payments through Stripe, and enforce plan quotas.
• Pipeline execution — to run the AI-assisted video production workflow, including generating scripts, audio, images, captions, and thumbnails.
• Asset storage and delivery — to store your project files and make rendered assets available for preview, download, and export.
• YouTube publishing — to upload your completed videos, set thumbnails and captions, and add uploads to your playlists when you authorize and confirm publishing.
• Support — to respond to inquiries and resolve technical issues.
• Fraud and abuse prevention — to detect unusual activity and protect the integrity of the platform.
• Security and reliability — to monitor, diagnose, and improve platform stability.

3. YouTube API Services

Topic to Video uses YouTube API Services to publish videos on your behalf. By connecting your YouTube account, you authorize us to perform the following operations using your credentials:

• Upload longform videos and companion shorts to your channel.
• Set custom thumbnails on uploaded videos.
• Upload SRT caption files to uploaded videos.
• Add uploaded videos to playlists you have configured in your channel settings.
• Read your channel’s upload playlist, selectable playlist IDs and titles, and recent video processing status to support scheduling decisions, playlist selection, and successful upload verification.

Storage of YouTube credentials: OAuth access and refresh tokens are encrypted at rest using AES-256-GCM with a per-record initialization vector. Tokens are decrypted only at the time of an upload operation and are never logged or exposed in plaintext.

Revocation: You can disconnect your YouTube account at any time from the Publishing section of your Settings page. This deletes your stored tokens from our database immediately and, on a best-effort basis, revokes the token at Google.

Deletion of stored YouTube credentials:The “Delete all stored YouTube credentials” control in Settings deletes your stored credentials and disconnects your YouTube account, identical in effect to using the Disconnect control above. Data deletion requests sent to help@m.topictovideo.com are processed within 7 days.

External revocation detection:We periodically verify that stored tokens remain valid. If a token is found to be revoked or unrefreshable (for example, because you revoked access through Google’s security settings), we delete it from our database within 30 days of detection.

Topic to Video’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data, use it for advertising, or use it to train generalized AI models. YouTube is a trademark of Google LLC.

Your use of YouTube API Services through Topic to Video is also governed by the Google Privacy Policy. You can review and revoke Topic to Video’s access to your Google account at any time through the Google security permissions page.

4. Third-Party Service Providers

We share data with the following third-party services to operate the platform. Each provider processes data only as necessary to deliver their service:

• Clerk — authentication, session management, and user identity.
• Stripe — payment processing and subscription management.
• Google / YouTube — video publishing via the YouTube Data API v3.
• OpenAI and OpenRouter — AI text generation for scripts, titles, and descriptions.
• Anthropic and OpenRouter — AI text generation for research and qualitative review steps.
• ElevenLabs — text-to-speech narration synthesis.
• Cloudflare R2 — object storage for rendered assets and uploaded files.
• Neon — PostgreSQL database hosting for account, project, and subscription data.
• Upstash / Redis — job queue, session caching, and pipeline state management.
• Vercel — Next.js hosting for the web application.
• Railway — hosting for the BullMQ pipeline worker.

5. Data Retention

Project files (rendered videos, audio, images, and composition sources) are retained according to your plan tier:

• Free and Launch plans — approximately 7 days after production completes.
• Growth plan — approximately 14 days.
• Scale and Agency plans — approximately 30 days.

After the retention window, project files and associated storage assets are permanently deleted. A history record (no files) may be retained longer. Billing and account records are kept as long as required by applicable law or financial compliance obligations.

YouTube OAuth tokens are deleted within 7 days of an in-app disconnect or written deletion request, and within 30 days of detecting external revocation.

Upon full account deletion (triggered when your Clerk account is removed), all project data, YouTube credentials, and channel settings are deleted.

6. Security

We apply reasonable administrative and technical safeguards including:

• All application routes require authentication via Clerk-issued session tokens.
• YouTube OAuth tokens are encrypted at rest using AES-256-GCM.
• Rate limiting is applied to API endpoints to prevent abuse.
• Rendered assets and uploaded files are stored with private access controls and served through time-limited signed URLs.
• Database rows containing user data are protected by row-level security policies scoped to the authenticated user.

7. Cookies and Browser Storage

We use authentication and session cookies set by Clerk to maintain your signed-in state. We also use browser sessionStorage for limited in-session UI state. We do not use advertising cookies, tracking pixels, or third-party analytics cookies.

8. Children’s Privacy

Topic to Video is not directed at children under 13. We do not knowingly collect personal information from anyone under 13. If you believe we have inadvertently collected information from a minor, please contact us at help@m.topictovideo.com.

9. Your Rights and Choices

There is currently no general self-serve account or project deletion flow. You may use the Publishing section of Settings to disconnect or delete stored YouTube credentials at any time. For all other data requests — including access, correction, or deletion of account data — please contact us at help@m.topictovideo.com and we will respond promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the “Last updated” date at the top of this page. If we materially change how we access, use, store, share, or transfer Google user data, we will provide notice in the app or by email before the change takes effect where required by applicable policy or law. Continued use of the platform after changes are posted constitutes acceptance of the updated policy.

11. Contact

For privacy questions or requests, contact us at help@m.topictovideo.com.