Privacy Policy
Last Updated: December 10, 2025
1. Introduction
Welcome to SpoolFlick ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application (the "Service").
By accessing or using SpoolFlick, you agree to the terms of this Privacy Policy. If you do not agree with the terms of this policy, please do not access the Service.
2. Information We Collect
We collect information that you provide directly to us, information generated automatically when you use the Service, and information from third-party sources.
A. Information You Provide
- Account Information: When you register, we collect your name, email address, and authentication credentials.
- Content Inputs: We collect the text scripts, voice selections, and avatar preferences you input for the purpose of generating video content.
- Payment Information: If you subscribe to a paid plan, our payment processor collects your financial information. We do not store full credit card numbers on our servers.
B. Information from Third-Party Integrations
To provide our core functionality—publishing content to social media—you may choose to connect your third-party accounts (Google, TikTok, Instagram/Facebook). When you do so, we collect:
- Authentication Tokens: Encrypted access tokens that allow us to interact with these platforms on your behalf.
- Profile Information: Your username, display name, and profile picture from connected platforms.
- Analytics Data: Public metrics for the content we publish on your behalf.
We do NOT collect:
- • Passwords for your social media accounts
- • Private direct messages
C. Automatically Collected Information
- Usage Data: Log files, device information, browser type, and IP address.
- Cookies: We use cookies to maintain your session state and preferences.
3. How We Use Your Information
We use the collected information for the following purposes:
Service Delivery
To generate AI videos via the HeyGen API and publish them to TikTok and Instagram
Authentication
To verify your identity and maintain your login session
Maintenance
To monitor usage, detect issues, and perform token refreshes
Communication
To send you updates regarding your video generation status
4. How We Share Your Information
We do not sell your personal data.
We share data only as necessary to perform the Service:
- AI Service Providers: Your text scripts and avatar configurations are sent to HeyGen (our AI video generation partner) to create your video files.
- Social Media Platforms: When you click "Publish," we transmit your video file, caption, and hashtags directly to the platforms you selected.
- Service Providers: We may employ third-party companies to facilitate our Service (e.g., cloud hosting, database management).
- Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities.
5. Data Retention and Deletion
General Retention
We retain your personal information only for as long as is necessary for the purposes set out in this Privacy Policy.
Video Content
Generated videos are stored to allow you to preview and publish them. You may delete videos from your library at any time.
Platform Data (TikTok/Meta)
If you disconnect a social media account, we immediately delete the access tokens associated with that account. Analytics data is cached for performance but refreshed regularly.
Requesting Deletion
You can request the deletion of your entire account and all associated data by contacting us at [email protected] or using the "Delete Account" function in your Settings page.
6. Security of Your Data
We use administrative, technical, and physical security measures to help protect your personal information.
Encryption
All social media access tokens are stored using industry-standard encryption (AES-256).
Transmission
Data transmitted between your browser and our servers is encrypted via SSL/TLS.
7. Third-Party API Policies
Our Service relies on API services provided by third parties. By using SpoolFlick, you acknowledge that you are also subject to the privacy policies of these providers:
8. Your Data Protection Rights (GDPR & CCPA)
Depending on your location, you may have the following rights:
The right to access
You have the right to request copies of your personal data.
The right to rectification
You have the right to request that we correct any information you believe is inaccurate.
The right to erasure
You have the right to request that we erase your personal data.
The right to restrict processing
You have the right to request that we restrict the processing of your personal data.
The right to data portability
You have the right to request that we transfer the data that we have collected to another organization, or directly to you.
9. Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.
10. Contact Us
If you have any questions about this Privacy Policy, please contact us: