Privacy Policy

Effective October 29, 2026

VidLasso ("we", "us") is operated by Navjyot Nishant, Minnesota, USA. This policy explains what data VidLasso collects, how we use it, and the choices you have. Questions: hello@vidlasso.com.

1. Data we collect

• Account data: your name, email address and password hash when you sign up.
• YouTube data (when you connect a channel with Google sign-in): channel ID and name, video titles, descriptions, tags and statistics, and YouTube Analytics reports such as views, watch time and subscribers.
• Instagram data (when you connect a Business or Creator account): account ID and username, your posts and reels, comments on your media, and direct messages sent to or from your account through VidLasso.
• Contact data from your audience: Instagram-scoped user IDs, usernames, message content, and any email address a person chooses to share in a conversation with your account.
• Payment data: if you connect Stripe, we receive payment events (amount, product, customer email, metadata from your VidLasso links). We never see or store card numbers.
• Usage data: log data such as IP address, browser type and pages visited, used for security and debugging.

2. How we use data

• To provide the features you turn on: keyword and SEO tools, comment-to-DM automation, contact lists, link tracking and revenue reports.
• To generate AI suggestions (titles, descriptions, DM copy) that you request.
• To secure the service, prevent abuse and fix problems.
• To contact you about your account.

We do not sell personal data. We do not use YouTube or Instagram data for advertising, and we do not use it to train AI models.

3. Google and YouTube data

VidLasso uses YouTube API Services. By connecting a YouTube channel you also agree to the YouTube Terms of Service, and Google's handling of your data is described in the Google Privacy Policy.

VidLasso's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can revoke VidLasso's access to your Google account at any time from your Google security settings. When access is revoked, we delete the YouTube data we stored for that channel within 30 days.

4. Instagram data

VidLasso uses the Instagram API provided by Meta. We access only the permissions you approve when you connect your account, and we send messages only within the limits Meta sets. You can disconnect VidLasso from your Instagram settings under Apps and Websites, or from your VidLasso account.

5. Service providers

We share data only with providers that help us run VidLasso, under contracts that limit their use of it:

• Oracle Cloud Infrastructure: application hosting and database.
• Cloudflare: DNS, network security and email routing.
• Anthropic (Claude API): generating the AI text you request. Only the content needed for that request is sent.
• Stripe: payments, when you connect it.
• Keyword data providers: receive search keywords only, never personal data.

We may disclose data if required by law.

6. Retention

We keep your data while your account is active. When you delete your account or disconnect a platform, we delete the related data within 30 days, except where the law requires us to keep it longer. Backups are overwritten within a further 30 days.

7. Data deletion

You can delete your data at any time:

1. In VidLasso, go to Settings, then Delete account. This removes your account and all connected YouTube, Instagram and contact data.
2. Or email hello@vidlasso.com with the subject "Data deletion request" from the email on your account. We confirm and complete deletion within 30 days.

If you removed VidLasso from your Instagram or Facebook settings, Meta notifies us and we delete the data tied to that account within 30 days.

If you messaged a creator who uses VidLasso and want your data removed, email us with your Instagram username and the creator's account name.

8. Security

Data is encrypted in transit (TLS) and access tokens are encrypted at rest. Access to production systems is limited to the operator.

9. Children

VidLasso is not intended for anyone under 13, and we do not knowingly collect their data.

10. Your rights

Depending on where you live, you may have the right to access, correct, export or delete your data. Email hello@vidlasso.com and we will respond within 30 days.

11. Changes

If we change this policy, we will update the date above and notify account holders of material changes by email.