Privacy Policy

Effective November 4, 2026

VidLasso ("we", "us") is a personal, non-commercial project in private preview. Access is free and by invitation only. This policy explains what data VidLasso collects, how we use it, and the choices you have. Questions: [email protected].

VidLasso is in free private early access. Nothing is sold, and we collect no payment or card data.

1. Data we collect

• Account data: your name, email address and password hash when you sign up.
• YouTube data (when you connect a channel with Google sign-in): channel ID and name, video titles, descriptions, tags and statistics, and YouTube Analytics reports such as views, watch time and subscribers.
• Instagram data (when you connect a Business or Creator account): account ID and username, your posts and reels, comments on your media, and direct messages sent to or from your account through VidLasso.
• Contact data from your audience: Instagram-scoped user IDs, usernames, message content, and any email address a person chooses to share in a conversation with your account.
• Usage data: log data such as IP address, browser type and pages visited, used for security and debugging.

2. How we use data

• To provide the features you turn on: keyword and SEO tools, comment-to-DM automation, contact lists, link tracking and revenue reports.
• To generate AI suggestions (titles, descriptions, DM copy) that you request.
• To secure the service, prevent abuse and fix problems.
• To contact you about your account.

We do not sell personal data. We do not use YouTube or Instagram data for advertising, and we do not use it to train AI models.

3. Google and YouTube data

VidLasso uses YouTube API Services. By connecting a YouTube channel you also agree to the YouTube Terms of Service, and Google's handling of your data is described in the Google Privacy Policy.

VidLasso's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can revoke VidLasso's access to your Google account at any time from your Google security settings. When access is revoked, we delete the YouTube data we stored for that channel within 30 days.

4. Instagram data

VidLasso uses the Instagram API provided by Meta. We access only the permissions you approve when you connect your account, and we send messages only within the limits Meta sets. You can disconnect VidLasso from your Instagram settings under Apps and Websites, or from your VidLasso account.

5. Service providers

We share data only with providers that help us run VidLasso, under contracts that limit their use of it:

• Oracle Cloud Infrastructure: application hosting and database.
• Cloudflare: DNS, network security and email routing.
• Anthropic (Claude API): generating the AI text you request. Only the content needed for that request is sent.
• Keyword data providers: receive search keywords only, never personal data.

We may disclose data if required by law.

6. Retention

We keep your data while your account is active. When you delete your account or disconnect a platform, we delete the related data within 30 days, except where the law requires us to keep it longer. Backups are overwritten within a further 30 days.

7. Data deletion

You can delete your data at any time:

1. In VidLasso, go to Settings, then Delete account. This removes your account and all connected YouTube, Instagram and contact data.
2. Or email [email protected] with the subject "Data deletion request" from the email on your account. We confirm and complete deletion within 30 days.

If you removed VidLasso from your Instagram or Facebook settings, Meta notifies us and we delete the data tied to that account within 30 days.

If you messaged a creator who uses VidLasso and want your data removed, email us with your Instagram username and the creator's account name.

8. Security

Data is encrypted in transit (TLS) and access tokens are encrypted at rest. Access to production systems is limited to the operator.

9. Children

VidLasso is not intended for anyone under 13, and we do not knowingly collect their data.

10. Your rights

Depending on where you live, you may have the right to access, correct, export or delete your data. Email [email protected] and we will respond within 30 days.

11. AI assistants you connect (Claude and others)

You can connect VidLasso to an AI assistant such as Claude through the Model Context Protocol. You sign in with your VidLasso account, pick one workspace and approve the connection. Then:

• The assistant can call VidLasso tools for that workspace, within your role and the workspace's credits. The answers to those calls (for example your briefing, comments or analytics) go to the assistant and are handled under that assistant provider's own terms and privacy policy.
• We store the connection (assistant name, workspace, when it was created and last used) and a one-way hash of its access tokens. We do not store the tokens themselves and we never see your conversations with the assistant.
• An assistant can send a reply on YouTube or Instagram only after you confirm that exact reply, and it can never delete anything.
• You can disconnect any assistant at any time on your VidLasso Profile page; it stops working at once. Connections end by themselves after 30 days without use.

12. Changes

If we change this policy, we will update the date above and notify account holders of material changes by email.