Privacy Policy

Information We Collect

We collect the following categories of information:

• Account information — your email address, and the name and profile image provided when you sign in with Google.
• Content you provide — the scripts and topics you submit.
• Generated content and usage data — the videos you generate, render settings, plan tier, and monthly usage counts.
• Payment information — processed by Stripe. We store your Stripe customer and subscription identifiers and your plan status; we do not store full card numbers.
• Connected accounts — when you connect a YouTube channel or an Instagram professional account, we store the access tokens needed to publish on your behalf and read statistics for the reels we posted, plus the account name and ID.
• Technical data — IP address, browser and device information, and cookies used to keep you signed in.

How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the service, including generating and publishing videos.
• Process payments and manage your subscription.
• Communicate with you about your account, including service and billing notices.
• Protect the service against fraud, abuse, and security threats, and enforce usage limits.
• Improve and develop our features.
• Comply with legal obligations.

Service Providers and Sub-processors

We share data with third-party providers only as needed to operate the service. These include:

• Google — authentication (Google sign-in) and publishing via the YouTube Data API.
• Meta — publishing Reels and reading their insights via the Instagram API.
• Stripe — payment processing and subscription management.
• Google (Gemini) and ElevenLabs — text-to-speech voice generation from your script.
• OpenRouter and the AI model providers it routes to — writing scripts from your topics.
• Supabase — database hosting.
• Cloudflare R2 — media and asset storage.

Google and YouTube Data

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We use YouTube channel authorization solely to upload videos you choose to publish and to retrieve public statistics for those videos. We do not use this access for advertising or sell it to third parties. You can disconnect a channel at any time from your account menu, or revoke our access from your Google Account security settings.

Instagram Data

When you connect Instagram, we request permission to read your basic profile, publish content, and read insights. We use it solely to post the reels you choose to publish and to show views, likes, and comments for those reels. We do not read your other posts, messages, or followers, use this access for advertising, or sell it to third parties.

You can disconnect an account at any time from your account menu, which deletes our stored access token, or remove Brainrot Factory under Apps and Websites in your Instagram settings.

Cookies

We use essential cookies to keep you signed in and to operate core features. We do not use cookies for third-party advertising.

Data Retention

We retain your account information for as long as your account is active. Generated videos are kept until you delete them from your library (archive a reel, then delete it from the Archived tab) or close your account. Deleting a reel here doesn't remove copies already posted to YouTube or Instagram. We may retain limited records where required for legal, tax, or security purposes, and residual copies may persist briefly in backups.

Your Rights

Depending on your location, you may have rights under laws such as the Singapore Personal Data Protection Act (PDPA) or the EU/UK GDPR, including the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your data.
• Request a copy of your data in a portable format.
• Withdraw consent or object to certain processing.

Data Security

We use industry-standard measures, including encryption in transit and access controls, to protect your data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

International Transfers

We and our service providers may process your data in countries other than your own. Where required, we take steps to ensure your data receives an adequate level of protection.

Children's Privacy

The service is only for people aged 18 or over (or the age of majority in your jurisdiction), and we do not knowingly collect personal data from anyone younger. If you believe a child has provided us data, please contact us and we will delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the date at the top of this page, and we will notify you of material changes where appropriate.

Contact Us

For privacy questions or requests, contact Eskay Tech Pte. Ltd. at support@brainrotfactory.co.