Privacy Policy – VidNinjas

Effective Date: 20th Aug 2025

Last Updated: 30th Aug 2025

This Privacy Policy explains how VidNinjas (“we,” “us,” or “our”) collects, uses, discloses, and protects information when you use our website, AI-powered dashboard, and browser extension (collectively, the “Services”). It also describes your privacy rights and choices under applicable laws.

By using the Services, you agree to the practices described here. If you do not agree, please do not use the Services.

1) Who We Are & How To Contact Us

  • Controller: VFI Starter INC., 930 S 4th St Ste 209, Las Vegas, NV 89101, USA.
  • Contact (General & Privacy): support@vidninjas.com
  • 2) What We Collect

    A. Information You Provide

  • Account info (e.g., name, email) when you sign in or contact support.
  • Settings you choose in the dashboard (e.g., channels you add as competitors).
  • B. Information Accessed via Google OAuth (Read-Only)

    If you connect your YouTube channel, VidNinjas requests read-only access limited to:

  • Viewing monetary and non-monetary YouTube Analytics reports for your content;
  • Viewing your YouTube account;
  • Viewing YouTube Analytics reports for your content.
  • We do not edit, delete, or post content on your behalf. We request only the minimum scopes needed to provide features, consistent with Google’s API Services User Data Policy (Limited Use).

    C. Data From Your Use of the Services

  • Extension outputs from public YouTube pages you view: video metadata (title, description, tags), related videos surfaced by YouTube, thumbnail preview/download, and transcript (if available).
  • LLM features you invoke (optional): when you ask the model (e.g., OpenAI/ChatGPT, Google/Gemini, Anthropic/Claude) to analyze a transcript or generate a script, we securely transmit only the content necessary to fulfill your request to your selected provider.
  • Usage & device data (e.g., pages/screens viewed, feature interactions, approximate location from IP, browser type), for reliability, security, and product improvement.
  • We do not collect biometric identifiers, precise geolocation, or financial account numbers.

    3) How We Use Information (Purposes & Legal Bases)

    We use information to:

  • Provide core functionality (dashboard analytics, competitor comparisons, extension features, AI view-forecasting).
  • Operate, maintain, and improve the Services (including security, debugging, fraud prevention, and analytics).
  • Communicate with you (service messages, updates, changes to terms/policies, and—only with your permission—product announcements).
  • Comply with the law, enforce our agreements, and protect users.
  • We do not use your personal information to build advertising profiles or for cross-context behavioral advertising.

    4) Google & YouTube Disclosures (OAuth / API Requirements)

  • Limited Use. VidNinjas’ use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
  • YouTube API Services. We use YouTube API Services (including YouTube Data/Reporting APIs). Your use of YouTube is also governed by the YouTube API Services Terms of Service.
  • Revoking access. You can revoke VidNinjas’ access to your Google account at any time from your Google Account’s permissions settings. (Google provides this control.)
  • 5) Sharing & Disclosures

    We do not sell or share personal information for cross-context behavioral advertising (as “sell”/“share” are defined under the CCPA/CPRA).

    We disclose information only to:

  • Service providers / processors (e.g., hosting, analytics, customer support, LLM providers you select) under contracts that restrict use to our instructions.
  • Legal and safety (e.g., to comply with laws or valid legal process).
  • Business transfers (e.g., merger, acquisition), where the recipient assumes obligations consistent with this policy.
  • 6) Data Retention

    We keep personal information only as long as needed for the purposes above, then delete or de-identify it unless a longer retention is required by law or to establish, exercise, or defend legal claims. GDPR requires that we disclose the criteria used to set retention periods. We consider account status, contract needs, statutory limits, and system design.

    7) Security

    We use administrative, technical, and physical safeguards (e.g., access controls, encryption in transit and at rest where applicable, least-privilege access, monitoring). No method of transmission or storage is 100% secure.

    8) Your Privacy Rights

    A. EEA/UK (GDPR)

    You have the right to access, rectify, erase, restrict, object, and data portability; and the right not to be subject to decisions based solely on automated processing where legally applicable. You also have the right to withdraw consent at any time without affecting prior lawful processing, and to lodge a complaint with your supervisory authority.

    How to exercise: Email us at support@vidninjas.com. We will verify your identity and respond within the timelines required by GDPR using clear and plain language.

    International transfers (EEA/UK/Swiss):

  • If we transfer your personal data to the U.S. or other third countries, we rely on one or more of: the EU-U.S. Data Privacy Framework (if/when our entity is certified), the UK Extension and Swiss-U.S. DPF, or Standard Contractual Clauses (SCCs) with supplementary measures as needed. We monitor legal developments concerning the DPF and will adjust transfer mechanisms if required.
  • B. California (CCPA/CPRA)

    California residents have the right to know/access, delete, correct, opt-out of sale/share, limit use/disclosure of sensitive personal information, and non-discrimination for exercising rights. You may use an authorized agent, and we will implement verification procedures. If we operate exclusively online with a direct consumer relationship, we may provide an email address to receive requests; otherwise, we provide two or more request methods (e.g., web form and toll-free number). We also honor browser-based Global Privacy Control signals where applicable.

    Our current posture: We do not sell or share personal information and do not use or disclose sensitive personal information for purposes beyond those allowed by the CPRA without your direction. If this changes, we will provide the required “Do Not Sell or Share” and “Limit the Use of My Sensitive Personal Information” links and notices at collection.

    C. CalOPPA (California Online Privacy Protection Act)

    We conspicuously post this policy, include its effective date, describe the categories of personal information we collect and the categories of third parties with whom we share it, and explain how users may review and request changes to their information. We also disclose how we respond to Do Not Track (DNT) signals: At this time, we do not respond to browser DNT signals. (CalOPPA requires disclosure, not adherence.)

    D. Canada (PIPEDA)

    We follow PIPEDA’s 10 Fair Information Principles (accountability; identifying purposes; consent; limiting collection; limiting use, disclosure, and retention; accuracy; safeguards; openness; individual access; challenging compliance). You may request access/corrections and challenge our compliance via support@vidninjas.com.

    9) Your Choices & Controls

  • OAuth Permissions: You can disconnect VidNinjas from your Google account at any time in your Google Account permissions.
  • LLM Providers: You choose if/when to send a transcript to a model provider; you can disable AI features at any time.
  • Marketing: Where required, we will seek your consent; you can opt out via any marketing email we send.
  • 10) Cookies & Similar Technologies

    We use strictly necessary and functional technologies to run the Services; we may use analytics to understand product performance (without building marketing profiles). Where required by law, we will provide a consent banner and granular controls.

    11) Third-Party Processors (Examples)

  • Cloud infrastructure, observability, analytics.
  • AI model providers (only when you invoke AI features).
  • All are bound by contracts that limit their use of the data to our instructions.

    12) How To Exercise Your Rights

  • Email: support@vidninjas.com
  • Web form: https://www.vidninjas.com/
  • If you are an online-only business with a direct relationship, an email channel may suffice; otherwise, California requires two or more methods. We will confirm receipt and respond within legally required timelines.

    13) International Transfers (More Detail)

    When transferring personal data internationally, we use an appropriate legal mechanism (e.g., DPF, SCCs) and implement supplementary measures as needed. We disclose (on request) the relevant safeguards and how to obtain a copy.

    14) Changes To This Policy

    We may update this policy. Material changes will be communicated (e.g., in-product notice or email) before they take effect, with the “Effective Date” updated accordingly.

    15) Appeals & Complaints

  • EEA/UK/Swiss: You can lodge a complaint with your local data protection authority.
  • Canada: You may challenge our compliance under PIPEDA’s “Challenging Compliance” principle via support@vidninjas.com, and/or with the Office of the Privacy Commissioner of Canada.
  • California: You may contact the California Privacy Protection Agency or the California Attorney General for CCPA matters.
  • 16) Additional Notices

  • We do not engage in automated decision-making that produces legal or similarly significant effects without human input; if that changes, we will provide GDPR-required information and safeguards.
  • If we ever begin selling/sharing personal information or using sensitive personal information for additional purposes, we will update our notices at collection and provide required opt-outs (including “Do Not Sell or Share” and “Limit the Use of My Sensitive Personal Information”).
  • CalOPPA Do-Not-Track Disclosure (Required Statement)

    Some browsers include a “Do Not Track” (DNT) feature. We currently do not respond to DNT signals. Operators are required to disclose their response; the statute does not mandate honoring DNT.

    17) Contact

    VidNinjas Privacy Team

    VFI Starter INC.

    930 S 4th St Ste 209, Las Vegas, NV 89101, USA

    support@vidninjas.com