Privacy Policy

1. Who We Are

VidPlate is a UK-based platform that helps creators, brands, agencies, and marketers create, manage, publish, analyse, and optimise multimedia content, advertising campaigns, rendering workflows, and creative workflows through the VidPlate platform and related services, including VidPlate Studio, VidPlate Studio Render, and AI-powered tools.

2. Information We Collect

• A. Information You Provide: full name, email address, and password when you register, business or brand information you optionally submit, content, assets, and metadata you upload to the platform, and feedback, support queries, and other correspondence.
• B. Information From Meta (Facebook and Instagram): when you connect your Meta accounts, and with your permission, we collect public profile and account or page ID, pages and Instagram Business accounts you manage, posts, videos, stories, and content engagement metrics, audience demographics and growth trends, and follower insights, post reach, reactions, and message volumes.
• C. Meta Ads Data: with your permission and integration of your ad account, we may collect ad campaign names, ad sets, creative assets, performance metrics such as CTR, CPC, impressions, conversions, and spend, targeting options, audiences, locations, and delivery results, and budget history, ad statuses, and ad account metadata. We use this data to allow you to view, analyze, and optimize ad performance in VidPlate.
• D. YouTube and Google Account Data: when you connect a YouTube channel, and with your permission, we may collect OAuth access and refresh tokens, granted scopes, channel ID, channel title, channel thumbnail, subscriber count, uploaded video IDs, video titles, descriptions, publish status, live links, comments, replies, and YouTube performance and analytics data such as views, engaged views, watch time, average view duration, average view percentage, likes, comments, shares, playlist saves, subscriber gains and losses, Shorts or video content type, thumbnail impressions, thumbnail click-through rates, estimated thumbnail clicks, and reporting job or report metadata made available through YouTube API Services.
• E. TikTok Account Data: when you connect TikTok, and with your permission, we may collect OAuth access and refresh tokens, granted scopes, TikTok open ID, username, display name, avatar URL, creator publishing settings, publish IDs, publish status, public post IDs or share URLs, video descriptions, cover images, duration, dimensions, view counts, like counts, comment counts, share counts, and other information made available through TikTok APIs for publishing, draft submission, status checks, and performance reporting.
• F. LinkedIn Account Data: when you connect LinkedIn, and with your permission, we may collect OAuth access and refresh tokens, profile or organisation identifiers, profile or organisation names, post URNs, published post IDs, post links, comments, replies, reactions, shares, impressions, clicks, video views, engagement metrics, and other information made available through LinkedIn APIs for publishing, comment management, and performance reporting.
• G. Automatically Collected Information: IP address, browser type, operating system, device information, actions performed on the platform such as clicks, page views, and time spent, authentication timestamps, session IDs, and cookies and usage tracking.
• H. Creative and Performance Data: we retain performance data associated with specific creatives, posts, videos, and ads to power the core features of VidPlate, including analytics dashboards, optimization tools, reporting, and historical comparison.
• I. Anonymized and Aggregated Data: we generate anonymized or aggregated datasets from usage patterns, ad performance, social performance, and creative trends. These do not contain personally identifiable information and are used solely to improve VidPlate functionality and user-facing features. Google API data, including YouTube API Services data, is not used to train or improve generalized AI or ML models.
• J. AI Processing Data: When you use AI-powered features, we may process prompts, instructions, text, images, videos, audio, metadata, generation settings, and other information submitted to AI services. This information may be transmitted to and processed by third-party AI providers, including OpenAI, Google AI services such as Gemini, Nano Banana, and Veo, ByteDance and BytePlus services including ModelArk, Seedream, and Seedance, Alibaba Cloud (Qwen), Runway, Stability AI, and other AI providers we make available, solely for the purpose of providing requested functionality and improving platform performance. Google API data, including YouTube API Services data, is not transferred to third-party AI or ML services for those providers to train their models.
• K. Connected Platform Data: When you connect third-party services, and with your permission, we may collect profile information, account identifiers, content, analytics, publishing data, audience metrics, advertising performance information, comments, replies, and other information made available through the permissions granted to VidPlate.
• L. VidPlate Studio and Studio Render Usage Data: When using VidPlate Studio, VidPlate Studio Pro, VidPlate Studio Render, or the Desktop Render App, we may collect diagnostic information, software version information, licensing information, authentication data, machine or workstation identifiers, render-machine approval status, device capability information, operating system and Adobe After Effects environment information, worker status, heartbeat timestamps, render queue and job metadata, render progress, render errors, output metadata, local configuration settings, usage metrics, error reports, logs, and workflow metadata necessary to operate, secure, troubleshoot, and improve the software and render services.
• M. Figma Import Data: When you choose to use the VidPlate Figma plugin and start an import, we receive the selected frame, group, component, or instance structure, including layer names, text content, dimensions, positions, styles, effects, visibility, and related design metadata; visible embedded raster images and vector artwork used by the selection; a reference preview; destination format, draft or component name, and category choices; and one-time import, upload, security, and diagnostic metadata. We do not receive your Figma password, font files, a reusable VidPlate login token, or content from outside the selection merely because the plugin is installed.
• N. VidPlate Recipes Data: VidPlate Recipes let you build reusable, multi-step content workflows. Some steps run entirely within VidPlate or your browser and involve no third-party AI provider; other steps call one or more of the AI providers described in paragraph J above. When a Recipe includes an AI step, the content and instructions passed into that step are processed by the relevant provider in the same way as described in paragraph J, solely to produce the requested output.

3. How We Use Your Information

• Deliver and operate VidPlate and its features.
• Connect and manage Meta, YouTube, TikTok, LinkedIn, and other authorised platform accounts, content, publishing, comments, and advertising data.
• Power analytics and performance reports.
• Provide scheduling, publishing, and optimization tools.
• Respond to user support and feedback.
• Improve and develop our product using anonymized data.
• Provide AI-powered content generation, analysis, processing, and optimisation features.
• Build and run VidPlate Recipes - reusable, multi-step content workflows that may combine AI and non-AI processing steps.
• Provide VidPlate Studio, VidPlate Studio Render, Desktop Render App, rendering, automation, and licensing functionality.
• Authorise, stage, convert, de-duplicate, optimise, troubleshoot, and secure Figma imports and create the requested editable VidPlate draft, component, or organisation asset.
• Authenticate users and enforce subscription, credit, and licensing requirements.
• Monitor platform security, prevent fraud, abuse, misuse, and unauthorised access.
• Improve AI systems, automation workflows, software performance, and user experience using anonymised and aggregated data.
• Comply with our legal obligations.

4. Connected Platform API Data Use

VidPlate uses authorised third-party APIs, including the Meta Graph API and Marketing API, YouTube API Services, TikTok APIs, and LinkedIn APIs, to collect and display social content, advertising data, publishing status, comments, replies, and performance analytics. We only use this data to enable your use of the platform, provide requested publishing and analytics functionality, secure the platform, and improve VidPlate functionality. We do not sell this data or repurpose it beyond the functionality described in this Privacy Policy.

VidPlate's use and transfer of information received from Google APIs, including YouTube API Services, will adhere to the Google API Services User Data Policy, including the Limited Use requirements. You can review Google's policy at https://developers.google.com/terms/api-services-user-data-policy.

Use of YouTube features is also subject to the YouTube Terms of Service at https://www.youtube.com/t/terms and the Google Privacy Policy at https://policies.google.com/privacy. You can view or revoke VidPlate's access to your Google or YouTube account through Google account permissions at https://myaccount.google.com/permissions.

4A. AI Services

Certain platform features rely on third-party artificial intelligence providers, including OpenAI, Google AI services such as Gemini, Nano Banana, and Veo, ByteDance and BytePlus services including ModelArk, Seedream, and Seedance, Alibaba Cloud (Qwen), Runway, Stability AI, and other AI providers we make available.

When you use AI-powered functionality, prompts, instructions, uploaded content, generated content requests, and related metadata may be processed by these providers to deliver the requested services.

VidPlate Recipes - reusable, multi-step content workflows you can build in the Recipe Builder - may combine AI steps that call these providers with non-AI steps that run entirely within VidPlate or your browser. Only the steps you actually run, and only the content relevant to those specific steps, are sent to a provider.

We do not use Google API data, including YouTube API Services data, to train generalized AI or ML models, and we do not transfer Google API data to third-party AI or ML services for those providers to train their models.

The use of raw or derived user data received from Google APIs, including YouTube API Services, adheres to the Google API Services User Data Policy, including the Limited Use requirements.

4B. Figma Plugin and Design Imports

The VidPlate Figma plugin runs within Figma and sends data to VidPlate only when an authorised user starts an import. The plugin uses a short-lived, single-use code to associate the import with the selected VidPlate account; it does not require or retain the user's VidPlate password.

Embedded image files may be uploaded directly to private AWS storage using short-lived, size-restricted upload authorisation. Temporary staged files are deleted after a completed or cancelled import or after the import session expires. Files incorporated into a completed import may be retained as private account assets and as part of the resulting draft or component in accordance with the account's instructions and this policy.

Figma is a separate third-party service. Your use of Figma and its handling of design files and plugin activity are governed by Figma's own terms and privacy information. VidPlate processes only the import data described here to provide, secure, support, and improve the requested VidPlate functionality.

5. Legal Bases for Processing

• Consent: when you link Meta, YouTube, TikTok, LinkedIn, advertising, analytics, or other connected platform accounts.
• Contractual necessity: to deliver VidPlate functionality.
• Legitimate interest: to improve services and prevent abuse, with safeguards.
• Legal obligation: where required for legal compliance.

6. Data Retention

• Personal, creative, and performance data is retained only as long as needed for service provision and legal compliance.
• Creative, post, video, comment, audience, ad performance, render job, render machine, diagnostic, and workflow data is retained to power analytics, creative optimization, rendering, support, troubleshooting, and historical reporting features.
• Temporary Figma import staging files are retained only for the short period needed to complete or recover the import and are removed after completion, cancellation, or session expiry. Successfully imported drafts, components, previews, and organisation assets are retained with the relevant VidPlate account until deleted or otherwise handled under the account and legal retention rules described in this policy.
• You may request deletion or disconnection of your Meta, YouTube, TikTok, LinkedIn, or other connected platform data at any time.

6A. Data Deletion

You may request deletion of your account and personal data by using the in-app account deletion tools where available or by contacting [email protected].

Certain information may be retained where required for legal, accounting, fraud prevention, security, contractual, or regulatory purposes.

Anonymised or aggregated information may be retained indefinitely where it can no longer identify an individual.

7. Cookies and Consent Management

• Authenticate users and maintain sessions.
• Measure platform usage and traffic.
• Provide user experience improvements.
• Upon first visit, users are presented with a cookie consent banner in accordance with UK Privacy and Electronic Communications Regulations. You can withdraw consent or adjust settings anytime via your browser or in-app preferences.
• We may use essential, analytics, performance, security, and functionality cookies to operate and improve the Platform.

8. Children’s Privacy

VidPlate is not intended for children under the age of 13, or the minimum legal age in your jurisdiction. We do not knowingly collect personal data from children. If we learn that a user is under this age, we will delete their data immediately.

9. Automated Decision-Making & Profiling

• Recommend content formats or posting times.
• Identify top-performing creatives.
• Suggest ad improvements or A/B test setups.
• Improve VidPlate algorithms and systems.
• These automated systems are not used to make decisions with legal or similarly significant effects and are subject to human oversight.
• Recommendations and insights generated through AI-powered systems are intended to assist users and should not be relied upon as professional, financial, legal, advertising, or business advice.

10. Sharing of Data

• We do not sell your personal data, and we do not sell or transfer Google API data, including YouTube API Services data, to advertisers, data brokers, or other third parties for advertising, profiling, or unrelated purposes.
• We may share your data with:
• • Meta Platforms, Inc.
• • Google and YouTube API Services
• • TikTok
• • LinkedIn
• • OpenAI
• • Google AI services
• • ByteDance and BytePlus services, including ModelArk, Seedream, and Seedance
• • Alibaba Cloud (Qwen)
• • Runway
• • Stability AI
• • AWS
• • MongoDB
• • Stripe
• • Adobe (where applicable)
• • Other authorised service providers and subprocessors required to operate the Platform.
• All service providers are subject to contractual, confidentiality, security, or legal obligations appropriate to their role.

10A. Connected Third-Party Accounts

Where you choose to connect third-party accounts, including Meta, Instagram, Facebook, YouTube, TikTok, LinkedIn, or advertising platforms, you authorise VidPlate to access and process information made available through the permissions granted by you.

Depending on the account and permissions you grant, VidPlate may publish content, submit drafts, retrieve publishing status, read performance analytics, import reporting data, read comments and replies, and post replies on your behalf where you request or use those features.

Where you connect an advertising account (for example, Meta Ads Manager), VidPlate may retrieve campaign, budget, spend, and billing-related figures made available through that account's API for the sole purpose of displaying reporting and performance information within the Platform. These figures are used for informational display only; VidPlate does not use this data to manage, authorise, or control your advertising budget or payment method, and does not monitor your spend on your behalf. See our Terms of Use for further detail on advertising responsibility.

Access tokens, refresh tokens, and similar connection credentials are used only to maintain authorised account connections and provide the connected features you request. We protect these credentials using access controls, secure storage practices, and encryption where applicable.

For YouTube and Google account connections, you can also view or revoke VidPlate's access at any time through Google account permissions at https://myaccount.google.com/permissions.

You may revoke access at any time through the relevant third-party platform or your VidPlate account settings where available. Disconnecting a platform removes stored connection credentials where supported, but previously imported analytics, post history, or records may remain where needed for service history, legal compliance, security, or legitimate business purposes unless deletion is requested and no retention exception applies.

11. Data Security

• HTTPS encryption.
• Multi-factor authentication, where available.
• Audit logging and monitoring.
• Access controls based on business need.
• Data encryption at rest.
• Secure storage and processing through approved cloud providers.
• Monitoring and incident response protocols.
• While no system is completely secure, we are committed to protecting your information.

12. Data Breach Notification

In the event of a data breach affecting your personal data, we will notify affected users and report the incident to the Information Commissioner’s Office where required, without undue delay.

13. International Transfers

• Your data may be transferred to and processed in countries outside the UK.
• Where this occurs, we use legally approved mechanisms such as the UK Addendum to the EU Standard Contractual Clauses and other equivalent safeguards.

14. Your Rights (UK GDPR)

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request erasure of your data, including the right to be forgotten.
• Restrict or object to certain processing.
• Receive your data in portable format.
• Withdraw consent at any time where applicable.
• To exercise any of your rights, contact [email protected].
• You have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your personal data has been processed unlawfully.

15. Contact Us

If you have questions about this policy or your data rights, contact VidPlate Ltd, International House, 14 King Street, Leeds, LS1 2HL. Email: [email protected]. ICO Registration Number: ZB904402. Data Protection Officer: Thomas Howson.

16. Changes to This Policy

We may update this policy periodically. If changes are significant, we will notify you via email or in-app notice. Continued use of VidPlate after such updates constitutes your acceptance.

17. Use of User Content for Marketing (With Consent)

From time to time, we may wish to showcase user success stories, creative examples, or platform results in our marketing materials such as case studies, website features, promotional campaigns, or social media posts.

We will only use your content, including your brand name, assets, or performance data, for marketing purposes with your explicit prior consent. This request will be made clearly and separately from this Privacy Policy.

You are never under any obligation to grant such permission, and declining will not affect your use of the VidPlate platform in any way.