Privacy Policy

Last Updated: November 26, 2025

At GetFeed, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, share, and protect your information when you use our AI-powered video repurposing platform.

This policy applies to all users of GetFeed, including visitors to our website, registered users, and members of organization workspaces.

By using GetFeed, you consent to the data practices described in this Privacy Policy. If you do not agree with these practices, please do not use our Service.

1. Information We Collect

We collect information to provide, improve, and personalize our Service. The data we collect falls into three categories:

1.1 Information You Provide Directly

Account Information:

• Full name
• Email address
• Password (encrypted and hashed)
• Profile picture (optional)
• Organization/workspace name
• Billing information (processed by Stripe; we store only the last 4 digits of credit cards)

Content You Upload:

• Video files (source URLs, uploaded files, or imported from platforms)
• Video metadata (titles, descriptions, tags)
• Generated clips, transcriptions, and edited content
• Project names and organizational data
• Captions, hashtags, and other text you create

Communications:

• Messages sent through our support channels (email, chat, feedback forms)
• Responses to surveys or promotional offers
• Feedback and feature requests submitted via GitHub Discussions

1.2 Information Collected Automatically

Usage Data:

• Pages viewed, features accessed, and time spent in the app
• Videos processed, clips generated, and exports downloaded
• Search queries and filter preferences
• Button clicks, navigation patterns, and interaction events

Technical Data:

• IP address and geographic location (country/city level)
• Browser type, version, and language settings
• Device type, operating system, and screen resolution
• Referral source (how you found GetFeed)
• Session duration and timestamps

Cookies and Tracking Technologies: We use cookies, local storage, and similar technologies to:

• Maintain your login session
• Remember your preferences and settings
• Analyze usage patterns and improve our Service
• Deliver personalized content and recommendations

For more information, see Section 12 (Cookies and Tracking).

1.3 Information from Third-Party Sources

OAuth Authentication: When you sign in using Google, GitHub, or other OAuth providers, we receive:

• Your name, email address, and profile picture
• Basic account information as permitted by the provider

Video Platform Integrations: When you import videos from YouTube or connect social media platforms (Instagram, TikTok, X/Twitter):

• Video URLs, titles, descriptions, and thumbnails
• Channel/account information and publish dates
• Public metadata (views, likes, engagement statistics)
• OAuth authentication tokens (stored securely; never shared)

Payment Processing: Stripe, our payment processor, provides us with:

• Payment confirmation and transaction IDs
• Subscription status and billing cycle information
• Refund or chargeback notifications

Third-Party Integrations: When you connect social media platforms like YouTube, Instagram, TikTok, or X (Twitter):

• Integration credentials (API keys, OAuth tokens)
• Data you choose to publish to these platforms
• Video metadata and performance metrics

2. How We Use Your Information

We use your data for the following purposes:

2.1 Service Provision

• Account Management: Create and manage your user account, authenticate logins, and maintain session security
• Video Processing: Transcribe, analyze, and generate clips from your uploaded videos using AI (Google Gemini 2.5 Flash)
• Storage and Delivery: Store your videos, clips, and thumbnails securely on AWS S3 and deliver them on demand
• Feature Delivery: Enable editing tools, reframing, captions, audio enhancements, and export functionality
• Collaboration: Support multi-tenant workspaces with role-based permissions for teams

2.2 AI and Content Analysis

• Transcription: Convert video audio to text using automated speech recognition
• Clip Suggestions: Analyze video content to identify viral-worthy moments with AI-generated scores, hashtags, and emotional analysis
• Performance Prediction: Estimate engagement potential based on content characteristics
• Quality Improvement: Train and refine our AI models (only using aggregated, anonymized data; never your raw content without consent)

2.3 Communication

• Transactional Emails: Send account confirmations, password resets, billing receipts, and service notifications
• Product Updates: Notify you of new features, improvements, and platform changes (you can opt out)
• Customer Support: Respond to inquiries, troubleshoot issues, and provide technical assistance
• Marketing: Send promotional offers, tips, and educational content (opt-in only; unsubscribe anytime)

2.4 Analytics and Improvement

• Usage Analytics: Analyze how users interact with GetFeed to identify popular features and pain points
• Performance Monitoring: Track system health, uptime, and error rates
• A/B Testing: Test new features and interface designs with user segments
• Research and Development: Develop new AI models, tools, and integrations

2.5 Legal and Security

• Fraud Prevention: Detect and prevent unauthorized access, payment fraud, and abuse
• Compliance: Meet legal obligations under LGPD, GDPR, CCPA, and other applicable laws
• Dispute Resolution: Investigate and resolve disputes, violations of our Terms of Use, or legal claims
• Rights Protection: Enforce our intellectual property rights and protect against liability

3. Legal Basis for Processing (LGPD and GDPR)

Under LGPD (Brazil) and GDPR (European Union), we process your personal data based on the following legal grounds:

3.1 Contractual Necessity

Processing is necessary to provide the Service as outlined in our Terms of Use:

• Account creation and authentication
• Video processing and AI analysis
• Storage and delivery of content
• Billing and subscription management

3.2 Consent

We obtain your explicit consent for:

• Marketing communications (newsletters, promotional emails)
• Optional analytics and tracking (beyond essential cookies)
• Sharing data with third-party integrations you enable
• Using your content for AI model training (opt-in only)

You may withdraw consent at any time without affecting the lawfulness of prior processing.

3.3 Legitimate Interests

We process data based on our legitimate business interests when:

• Improving our Service and developing new features
• Preventing fraud, security threats, and abuse
• Conducting analytics to understand user behavior
• Enforcing our Terms of Use and policies

We balance these interests against your rights and ensure processing does not override your fundamental freedoms.

3.4 Legal Obligations

We process data when required by law, such as:

• Responding to court orders, subpoenas, or regulatory requests
• Complying with tax and financial reporting requirements
• Meeting data breach notification obligations

4. How We Share Your Information

We do not sell your personal data to third parties. However, we may share your information in the following circumstances:

4.1 Service Providers

We share data with trusted third-party vendors who help us operate GetFeed:

Infrastructure and Hosting:

• AWS (Amazon Web Services): Cloud storage for videos, clips, and thumbnails (data stored in secure S3 buckets)
• Vercel/Railway: Application hosting and deployment

AI and Processing:

• Google Gemini (Google Cloud AI): Video transcription and clip suggestion generation (videos are processed via API; Google's data usage is governed by their terms)

Payment Processing:

• Stripe: Payment processing, subscription management, and billing (Stripe stores payment details securely; we do not access full credit card numbers)

Email Communications:

• Resend: Transactional and marketing email delivery

Analytics and Monitoring:

• Google Analytics: Usage tracking and website analytics (you can opt out)
• Sentry: Error monitoring and crash reporting (optional)

Customer Support:

• Crisp: Live chat support and customer messaging
• GitHub Discussions: Feedback and feature request management

All service providers are contractually obligated to protect your data and use it only for the purposes we specify. They comply with applicable data protection laws.

4.2 Third-Party Integrations

When you enable social media integrations (YouTube, Instagram, TikTok, X/Twitter), we share data as configured by you:

• Published video clips and metadata
• Post captions, hashtags, and descriptions
• OAuth authentication tokens for platform access
• Performance metrics retrieved from platforms

These integrations are governed by the respective third parties' privacy policies.

4.3 Organization Members

Within a workspace, authorized members can access:

• Organization-scoped videos, clips, and projects
• Shared analytics and performance data
• Member profiles and activity logs (as permitted by organization admins)

Organization owners and admins control access permissions.

4.4 Legal Requirements

We may disclose your information if required by law or in response to:

• Valid legal process (court orders, subpoenas, warrants)
• Regulatory investigations or audits
• National security or law enforcement requests
• Protection of our rights, property, or safety, or that of our users

We will notify you of such requests unless prohibited by law.

4.5 Business Transfers

If GetFeed is involved in a merger, acquisition, asset sale, or bankruptcy, your information may be transferred to the successor entity. We will notify you of such changes and any new privacy practices.

5. International Data Transfers

GetFeed is operated from Brazil, but we use global service providers (AWS, Google Cloud, Stripe). Your data may be transferred to, stored, and processed in countries outside Brazil, including the United States and European Union.

5.1 Safeguards

When transferring data internationally, we ensure adequate protection through:

• Standard Contractual Clauses (SCCs): EU-approved data transfer agreements
• Data Processing Agreements (DPAs): Contracts with service providers requiring LGPD/GDPR compliance
• Encryption: Data encrypted in transit (TLS) and at rest (AES-256)

5.2 Your Rights

If you are located in the EU or Brazil, you have the right to object to international data transfers. Contact us at [email protected] to discuss alternatives.

6. Data Retention and Deletion

6.1 Retention Periods

We retain your data for as long as necessary to provide the Service and comply with legal obligations:

6.2 Deletion Process

When you delete content or close your account:

1. Files are marked for deletion and removed from active storage within 30 days
2. Backups may retain data for up to 90 days for disaster recovery
3. Aggregated, anonymized analytics data may be retained indefinitely
4. Billing records are retained as required by law

You can request immediate deletion by contacting [email protected].

7. Your Privacy Rights

Depending on your location, you have the following rights under LGPD (Brazil), GDPR (EU), and CCPA (California):

7.1 Access and Portability

• Right to Access: Request a copy of all personal data we hold about you
• Data Portability: Receive your data in a structured, machine-readable format (JSON or CSV)

7.2 Correction and Deletion

• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure ("Right to be Forgotten"): Delete your personal data (subject to legal retention requirements)

7.3 Restriction and Objection

• Right to Restrict Processing: Limit how we use your data while disputes are resolved
• Right to Object: Opt out of processing based on legitimate interests or direct marketing

7.4 Withdraw Consent

• Right to Withdraw Consent: Revoke consent for marketing, analytics, or data sharing at any time (does not affect prior processing)

7.5 Automated Decision-Making

• Right to Human Review: Contest decisions made solely by automated systems (e.g., AI-generated clip suggestions)
• GetFeed's AI provides recommendations, but you retain full control over content publication

7.6 Exercising Your Rights

To exercise these rights, contact us at:

• Email: [email protected]
• Subject Line: "Privacy Rights Request - [Your Request Type]"
• Include: Your account email, specific request details, and identity verification

We will respond within:

• LGPD: 15 days (Brazil)
• GDPR: 30 days (EU)
• CCPA: 45 days (California)

7.7 Right to Complain

If you believe we are not complying with data protection laws, you may file a complaint with:

• Brazil: ANPD (Autoridade Nacional de Proteção de Dados) - https://www.gov.br/anpd
• EU: Your local Data Protection Authority - https://edpb.europa.eu
• California: California Attorney General - https://oag.ca.gov

8. Security Measures

We implement robust security measures to protect your data from unauthorized access, alteration, disclosure, or destruction:

8.1 Technical Safeguards

• Encryption:
  • TLS 1.3 for data in transit
  • AES-256 encryption for data at rest
  • Encrypted database connections
• Authentication:
  • Bcrypt password hashing with salt
  • Multi-factor authentication (2FA) support
  • OAuth 2.0 for third-party logins
• Access Controls:
  • Role-based access control (RBAC) for multi-tenant isolation
  • Principle of least privilege for internal systems
  • API key authentication for integrations

8.2 Organizational Safeguards

• Employee Training: Regular security and privacy training for all team members
• Access Audits: Periodic reviews of who has access to personal data
• Vendor Assessments: Security evaluations of third-party service providers
• Incident Response Plan: Documented procedures for data breach detection, containment, and notification

8.3 Infrastructure Security

• Firewall Protection: Network-level firewalls and security groups
• DDoS Mitigation: Protection against distributed denial-of-service attacks
• Regular Updates: Timely patching of software vulnerabilities
• Monitoring: 24/7 automated monitoring for suspicious activity

8.4 Breach Notification

In the event of a data breach affecting your personal information, we will:

1. Notify affected users within 72 hours (LGPD/GDPR requirement)
2. Inform relevant data protection authorities
3. Provide details about the breach, data affected, and remediation steps
4. Offer assistance (e.g., credit monitoring) if financial data is compromised

No system is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. You are responsible for safeguarding your account credentials.

9. Children's Privacy

GetFeed is not intended for users under 18 years of age. We do not knowingly collect personal data from children.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at [email protected]. We will delete such information promptly.

10. Cookies and Tracking Technologies

10.1 What Are Cookies?

Cookies are small text files stored on your device by websites you visit. They enable websites to remember your preferences and improve your experience.

10.2 Types of Cookies We Use

Essential Cookies (Required):

• Session management (keep you logged in)
• Security (prevent CSRF attacks, detect fraud)
• Load balancing (distribute traffic efficiently)

Analytics Cookies (Optional):

• Usage tracking (pages viewed, features used)
• Performance monitoring (load times, errors)
• A/B testing (compare feature variations)

Marketing Cookies (Optional):

• Retargeting ads (show GetFeed ads on other sites)
• Campaign tracking (measure ad effectiveness)
• Social media integration (share buttons, login widgets)

10.3 Managing Cookies

You can control cookies through:

• Browser Settings: Most browsers allow you to block or delete cookies
• Cookie Consent Banner: Manage preferences via our in-app consent manager
• Opt-Out Tools:
  • Google Analytics: https://tools.google.com/dlpage/gaoptout
  • PostHog: https://posthog.com/docs/privacy

Note: Disabling essential cookies may impair Service functionality (e.g., you cannot stay logged in).

10.4 Do Not Track (DNT)

GetFeed respects browser DNT signals. When DNT is enabled, we disable optional analytics and marketing cookies.

11. Third-Party Links and Services

Our Service may contain links to third-party websites, integrations, or services (e.g., YouTube, Instagram, TikTok, X/Twitter, Google Analytics, Crisp). We are not responsible for the privacy practices of these external sites.

We encourage you to review the privacy policies of any third-party services you use:

• YouTube: https://policies.google.com/privacy
• Instagram: https://privacycenter.instagram.com/policy
• TikTok: https://www.tiktok.com/legal/privacy-policy
• X (Twitter): https://twitter.com/en/privacy
• Google Analytics: https://policies.google.com/privacy
• Crisp: https://crisp.chat/en/privacy/
• Stripe: https://stripe.com/privacy
• AWS: https://aws.amazon.com/privacy

12. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

12.1 Right to Know

Request disclosure of:

• Categories of personal information collected
• Sources of personal information
• Purposes for collecting or selling personal information
• Categories of third parties with whom we share data

12.2 Right to Delete

Request deletion of personal information we have collected (subject to exceptions).

12.3 Right to Opt-Out of Sale

We do not sell your personal information. We share data only as described in Section 4.

12.4 Right to Non-Discrimination

We will not discriminate against you for exercising your CCPA rights (e.g., deny Service, charge different prices).

12.5 Exercising CCPA Rights

Submit requests via email to [email protected] with the subject line "CCPA Request."

We will verify your identity before processing requests (may require account email confirmation).

Authorized Agents: You may designate an authorized agent to submit requests on your behalf. The agent must provide proof of authorization.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or Service features.

13.1 Notification of Changes

For material changes, we will notify you via:

• Email: To your registered address (at least 30 days in advance)
• In-App Notification: Prominent banner upon login
• Website Banner: Notice on getfeed.co

13.2 Review and Acceptance

We encourage you to review this Privacy Policy periodically. The "Last Updated" date at the top indicates the most recent revision.

Your continued use of GetFeed after changes take effect constitutes acceptance of the updated policy. If you do not agree, you must stop using the Service and may request account deletion.

14. Data Protection Officer (DPO)

For data protection inquiries or to exercise your privacy rights, contact our Data Protection Officer:

Felipe Barcelos
Data Protection Officer
Email: [email protected]
Website: getfeed.co

We are committed to resolving privacy concerns promptly and transparently.

15. Contact Us

If you have questions, concerns, or feedback about this Privacy Policy or our data practices, please contact us:

• General Inquiries: [email protected]
• Privacy Requests: [email protected]
• Support: Via in-app chat or GitHub Discussions

Mailing Address:
GetFeed
Attn: Privacy Team
[Physical Address - To Be Added]
Brazil

Thank you for trusting GetFeed with your data. We are committed to protecting your privacy and providing a transparent, secure experience.