FACELESS.VIDEO PRIVACY POLICY
Last Updated: 08/17/2026
1. Introduction and Your Acceptance
This privacy policy explains what information Faceless.video ("we", "us", "our") collects, how we use it, who we share it with, how long we keep it, and what rights you have over it. Faceless.video is a SaaS content creation tool that uses artificial intelligence to generate and publish video content for faceless channels. This policy applies to all users of our application and website. By using our service, you consent to the collection, storage, use and disclosure of your personal information as described in this Privacy Policy.
2. Who We Are
Faceless.video is operated by Faceless.video LLC. For the purposes of the EU and UK General Data Protection Regulation, we are the data controller for the personal information described in this policy. You can reach us at any time at privacy@faceless.video.
3. Information We Collect
We collect the following categories of information:
3.1. Account information. Your email address, your password (stored only as a salted hash by our authentication provider, never in plain text), your timezone, and your email marketing preference. If you sign up with Google, we receive your email address and basic profile information from Google.
3.2. Content you provide. The stories, prompts, topics, series configuration, and any other material you enter in order to generate videos, together with the scripts, images, voiceovers and finished videos our service generates from that material.
3.3. Connected social account information. When you connect a YouTube, TikTok or Instagram account, we store the access and refresh tokens issued by that platform, your platform account identifier, and basic display information about the account such as its name and avatar. Tokens are held encrypted. Where you enable performance tracking, we also collect view and engagement statistics for videos we published on your behalf.
3.4. Billing information. Your subscription plan, billing interval, subscription status, credit balance, and the customer and subscription identifiers issued by our payment processor. We never receive or store your full card number, expiry date or security code — those are collected directly by Stripe.
3.5. Usage and device information. Through our product analytics provider we collect the pages and features you use, actions you take in the app, your browser and device type, and your IP address (from which an approximate location may be derived). Once you have an account, this activity is associated with your user identifier and email address.
3.6. Anti-abuse information. To prevent fraudulent signups and abuse of free credits, we use a bot-detection challenge at signup and an email verification service. These services process your IP address and email address.
3.7. Support correspondence. Messages, attachments and account details you send us through the contact form or by email.
You may choose not to provide some of this information, but doing so may prevent certain functions, features or resources from working.
4. How We Use Your Information
We use the information described above to:
4.1. Generate, render and deliver the video content you request, including sending your inputs to the AI providers described in section 5.
4.2. Publish content to the social accounts you have connected, at your direction.
4.3. Create and administer your account, process payments, and manage your credit balance and subscription.
4.4. Provide customer support and respond to your enquiries.
4.5. Detect, investigate and prevent fraud, abuse of free credits, and violations of our Terms of Service.
4.6. Understand how the product is used so we can improve and troubleshoot it.
4.7. Send you service messages, and — where you have opted in — product updates and marketing email. You can unsubscribe from marketing email at any time using the link in any such message.
4.8. Legal bases (EEA and UK users). We rely on performance of our contract with you for items 4.1 to 4.4; our legitimate interests in operating and securing a viable service for items 4.5 and 4.6; and your consent for marketing email under item 4.7. Where we rely on consent, you may withdraw it at any time.
5. Artificial Intelligence Processing
Our service is built on artificial intelligence, and generating your content requires sending the material you provide to third-party AI providers. We think you should know exactly where it goes. When you generate a video:
- OpenAI receives your story prompts, topics and series settings in order to write scripts, scene descriptions and post captions, and receives the resulting script text in order to synthesise the spoken voiceover audio.
- Perplexity receives your topic or subject matter in order to research current material for certain content types.
- Replicate receives the image descriptions generated from your input in order to produce the images used in your video.
Your generated script, images and audio are then assembled into the finished video by our rendering infrastructure, described in section 7.
5.1. Training. We do not authorise any AI provider to use your content to train their models. As at the date of this policy: OpenAI does not train on data submitted through its API; Perplexity operates a zero-retention policy for its completions API and contractually undertakes not to use customer content to train or fine-tune generative models; and Replicate deletes API prediction inputs, outputs and logs approximately one hour after the prediction completes. We cannot control a provider changing its own terms, and we encourage you to review their policies.
5.2. Human review. AI providers may retain your input for a limited period for abuse monitoring in accordance with their own policies. We do not send your content to any AI provider for any purpose other than fulfilling the generation you requested.
5.3. Your responsibility. Because your inputs leave our systems and reach these providers, please do not enter sensitive personal information, confidential material, or personal information about other people into the content fields.
6. Cookies, Analytics and Tracking Technologies
We use cookies and similar technologies to keep you signed in, to secure the service, and to understand how the product is used. Specifically:
- Essential cookies set by our authentication provider hold your session so you stay logged in. The service will not work without these.
- Analytics cookies and identifiers set by PostHog, our product analytics provider, record the pages and features you use and associate that activity with your account. PostHog processes this data on servers in the United States.
- Security tokens set by Cloudflare Turnstile distinguish genuine users from automated signups.
We do not use third-party advertising or retargeting pixels on the application. You can accept or decline non-essential cookies by modifying your browser settings, though declining them may cause parts of the service not to function as intended.
7. Third Parties We Share Information With
We do not sell or rent your personal information, and we do not share it with third parties for their own marketing purposes. We do share it with the service providers below, each of which is contractually bound to use it only to provide services to us:
- Supabase — database, authentication and file storage for your account, content and generated media.
- Vercel — application hosting and delivery.
- Stripe — payment processing, subscription billing and card data handling.
- OpenAI, Perplexity and Replicate — AI generation, as described in section 5.
- RunPod — serverless compute infrastructure on which our rendering pipeline runs, receiving your generated script, images and audio in order to assemble the finished video.
- PostHog — product analytics.
- Cloudflare — bot protection at signup.
- Bunny.net — content delivery network used to serve your generated videos and images.
- Google (YouTube Data API, Google Sheets) — publishing to and managing your YouTube channel, and internal operational records.
- TikTok, TikAPI and RapidAPI — publishing to TikTok and retrieving post performance statistics.
- Meta (Instagram Graph API) — publishing to Instagram and retrieving post performance statistics.
- Sendy, EmailOctopus and SendGrid — transactional and marketing email delivery.
- Tolt — referral and affiliate attribution, where you arrive through an affiliate link.
- Bubble — our legacy platform, which continues to hold account records for users who registered before our migration.
We also use Pexels and Soundstripe to source stock footage and music. These receive search terms derived from your content but no account or identifying information.
We may additionally disclose your information where we are required to do so by law, to enforce our Terms of Service, to protect our rights or the safety of others, or in connection with a merger, acquisition or sale of assets, in which case we will notify you before your information becomes subject to a different privacy policy.
7.1. YouTube API Services
Faceless.video uses YouTube API Services to enable you to upload and manage video content on YouTube. When you use these features, your use of YouTube is also subject to the Google Privacy Policy. We encourage you to review Google's privacy practices to understand how your information is handled when using YouTube features through our service.
8. International Transfers
We are based in the United States and the providers listed in section 7 process data in the United States and other countries. If you are located in the European Economic Area, the United Kingdom or Switzerland, your personal information will be transferred outside your home jurisdiction. Where such transfers occur we rely on the European Commission Standard Contractual Clauses, or an equivalent approved safeguard, in our agreements with those providers.
9. Data Retention
9.1. We retain your account information, content and generated media for as long as your account remains open, because the service exists to keep that content available to you.
9.2. When you delete your account, we delete your profile, your series and videos, your generated media files from our storage, and your connected social account records including the stored access tokens. This happens at the time you request it, not on a delayed schedule. Deleting your account does not by itself withdraw the permission you granted at the social platform; to do that, revoke our access using the platform's own settings as described in section 11.5.
9.3. Some records survive account deletion where we are legally required to keep them or where they serve a continuing purpose. Specifically: billing and tax records held by our payment processor are retained for the period required by law; historical product analytics events are retained by our analytics provider, and you may ask us to delete these by contacting us; and your email address remains suppressed on our mailing lists so that we do not contact you again.
9.4. Videos you have already published to YouTube, TikTok or Instagram remain on those platforms after deletion. We cannot remove them for you — you will need to delete them using the platform directly.
10. Data Protection and Security
We take the security of your personal information seriously. Access tokens for your connected social accounts are stored encrypted rather than in plain text, passwords are stored only as salted hashes, database access is restricted by row-level security policies so that users can only reach their own records, and all traffic to our service is encrypted in transit. However, no method of transmission or electronic storage is completely secure; while we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.
10.1. Breach notification. If we become aware of a security breach affecting your personal information, we will notify you and any applicable regulator without undue delay and in any event within the timeframes required by applicable law.
11. Your Rights
11.1. You may access and update your personal information at any time by logging into your account.
11.2. You may delete your account by visiting our contact page and selecting "delete my account", which erases the information described in section 9.2.
11.3. Depending on where you live, you may also have the right to request a copy of your personal information in a portable format, to have inaccurate information corrected, to object to or request restriction of certain processing, and to withdraw consent you have previously given. To exercise any of these rights, contact us at privacy@faceless.video. We will respond within the time limits set by applicable law and will not discriminate against you for making a request.
11.4. If you are in the EEA or the UK and you believe we have handled your personal information improperly, you have the right to lodge a complaint with your local data protection supervisory authority.
11.5. Revoking YouTube API Access
If you have connected your YouTube account to Faceless.video, you can revoke our access to your YouTube data at any time through the Google security settings page at https://security.google.com/settings/. Revoking access will prevent Faceless.video from uploading or managing content on your YouTube channel, but will not delete your Faceless.video account. You can also delete any data we have stored by deleting your Faceless.video account as described above.
To manage or revoke third-party app access to your Google/YouTube account:
1. Visit https://security.google.com/settings/
2. Navigate to "Third-party apps with account access"
3. Find "Faceless.video" in the list
4. Click "Remove Access" to revoke permissions
12. California Privacy Rights
12.1. If you are a California resident, the California Consumer Privacy Act as amended by the California Privacy Rights Act gives you specific rights. In the preceding twelve months we have collected the following categories of personal information: identifiers (email address, account identifiers, IP address); commercial information (subscription and transaction records); internet or network activity (product usage and device information); geolocation data (approximate location derived from IP address); and your own user content. The sources, purposes and recipients of each are described in sections 3, 4 and 7.
12.2. We do not sell your personal information, and we do not share it for cross-context behavioural advertising. We have not done so in the preceding twelve months, and we do not sell or share the personal information of minors under 16.
12.3. You have the right to know what personal information we have collected, to request its deletion, to request correction of inaccurate information, and to be free from discrimination for exercising these rights. Submit a request at privacy@faceless.video. You may use an authorised agent to make a request on your behalf.
13. Children's Privacy
Faceless.video is a paid service intended for adults. You must be at least 18 years old to create an account or use the service, and the service is not directed to children. We do not knowingly collect personal information from anyone under 18. If we become aware that someone under 18 has created an account or provided us with personal information, we will close the account and delete that information. If you believe a minor has provided us with personal information, please contact us at privacy@faceless.video and we will act promptly.
14. Changes to the Privacy Policy
We reserve the right to modify this Privacy Policy at any time. Any changes will be posted on this page with an updated "Last Updated" date, and where the changes are material we will notify account holders by email. Your continued use of Faceless.video after changes to the Privacy Policy signifies your consent to those changes.
15. Contact Us
If you have inquiries or complaints regarding our Privacy Policy, please contact us at privacy@faceless.video
By using our services, you confirm that you have read and accepted this Privacy Policy. If you do not agree to this policy, please refrain from using our services.