Privacy Policy

• Account Information: When you create an account, we collect your name, email address, username, and password.
• Profile Information: Optional profile details including profile picture, bio, and preferences.
• User Content: Videos you upload, create, or edit through our Services, including associated metadata, transcripts, captions, thumbnails, and AI-generated content.
• Payment Information: Billing details processed through third-party payment processors (we do not store full credit card numbers).
• Communications: Messages you send to our support team or through in-app features.

• Device Information: Device type, operating system, unique device identifiers, mobile network information.
• Usage Data: Features used, content accessed, time spent, interaction patterns, search queries.
• Log Data: IP address, browser type, pages visited, access times, referring URLs.
• Location Data: Approximate location derived from IP address (precise location only with permission).

• TikTok Integration: When you connect your TikTok account, we may access and collect data in accordance with TikTok's API terms, including your TikTok username, profile information, video content you authorize us to access, engagement metrics, and posting capabilities.
• Other Social Media: Similar data from other platforms you choose to integrate (Instagram, etc.).
• API Permissions: We only request the minimum permissions necessary to provide our Services.

• We do not request, collect, or intentionally process sensitive categories of personal data such as racial or ethnic origin, political opinions, religious beliefs, health information, biometric data, or data concerning sexual orientation or gender identity.
• Please do not upload or share such information when using our Services.
• We do not use your personal information to infer sensitive characteristics about you.

• Operate, maintain, and provide our AI clipping and content creation Services.
• Process and generate AI-powered clips, captions, transcripts, and other content features.
• Personalize your experience and provide content recommendations.
• Develop, test, and improve our AI models, algorithms, and features.
• Provide customer support and respond to your requests.
• Facilitate publishing to TikTok, YouTube, and other connected social media platforms.
• Detect, prevent, and address fraud, abuse, and security incidents.
• Comply with legal obligations and protect legal rights.

YouTube API Services: Data obtained via the YouTube API is used exclusively to display your channel analytics and to upload content you explicitly approve. This data is never used for advertising, sold to third parties, or used to train AI models without your explicit consent. Use is strictly limited to providing the features visible in the Zophous interface.

We do not sell your personal information to third parties. We may share information with:

• Cloud Hosting: AWS, Google Cloud, or similar providers for data storage and computing.
• Payment Processing: Stripe, PayPal, or other payment processors for billing.
• Analytics: Google Analytics, Mixpanel, or similar services for usage analysis.
• AI/ML Services: OpenAI, Anthropic, or other AI providers for content processing.
• Communication: Email service providers for transactional and marketing emails.
• Platform Integrations: When you authorize us to post content to TikTok or other platforms, we share the necessary content and metadata to fulfill that request.
• Business Transfers: In connection with any merger, acquisition, sale of assets, or bankruptcy, your information may be transferred to the acquiring entity.
• Legal Requirements: To comply with applicable laws, regulations, legal processes, or government requests, and to protect the rights, property, or safety of Zophous.ai, our users, or the public.

We retain your personal information for as long as necessary to provide our Services, comply with legal obligations, resolve disputes, and enforce our agreements:

• Account data is retained while your account is active and for a reasonable period afterward to allow reactivation; deleted within 90 days of an account deletion request, except where retention is required by law.
• Videos and generated content are retained while your account is active; deleted within 30 days of account deletion, except for aggregated, anonymized data.
• Usage data is typically retained for 12–24 months for security and improvement purposes; anonymized and aggregated data may be retained indefinitely.

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete information.
• Deletion: Request deletion of your personal information (subject to legal retention requirements).
• Portability: Request your data in a structured, commonly used format.
• Objection: Object to certain processing of your information.
• Restriction: Request restriction of processing under certain circumstances.
• Opt-out: Right to opt-out of the sale or sharing of personal information (we do not sell).
• Non-discrimination: Right to non-discrimination for exercising privacy rights.

To exercise any of these rights, contact us at dmac@zophous.ai. We will respond to verified requests within 30 days (or as required by applicable law) and may require verification of your identity before processing requests.

Appeals: If we deny your data rights request, you may appeal within a reasonable time by emailing dmac@zophous.ai with the subject line "[YOUR STATE] Privacy Appeal." If your appeal is denied, you may contact your state's Attorney General office.

We implement industry-standard security measures to protect your information:

• Encryption in transit (TLS 1.2+) and at rest (AES-256).
• Secure authentication with password hashing (bcrypt/Argon2).
• Multi-factor authentication options for account access.
• Regular security reviews and vulnerability assessments.
• Strict access controls limiting who can access personal data, and continuous monitoring.
• Incident response procedures and breach notification protocols.

However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security of your information.

Our Services are not intended for users under the age of 13. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at dmac@zophous.ai. We will delete such information from our systems within 30 days of verification.

Zophous.ai operates globally, and your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. For EEA, UK, and Swiss users, we use Standard Contractual Clauses (SCCs) approved by the European Commission and ensure adequate data protection measures are in place. Data transfers comply with applicable data protection laws including GDPR.

Our Services may contain links to third-party websites, applications, or services (including TikTok, Instagram, YouTube, etc.). This Privacy Policy does not apply to such third-party services. We encourage you to review the privacy policies of any third-party services you access through our platform. We are not responsible for the privacy practices of third parties.

You can control cookie preferences through your browser. Most browsers allow you to refuse or delete cookies, though disabling essential cookies may affect Service functionality. Opt-out tools include Google Analytics (tools.google.com/dlpage/gaoptout) and the Network Advertising Initiative (optout.networkadvertising.org).

Do Not Track: Some browsers support "Do Not Track" (DNT) signals. Currently, there is no industry standard for responding to DNT signals. We do not currently respond to DNT signals, but we will update this policy if standards are established.

• Material changes will be notified via email to your registered address.
• Notice will be posted on our website and app at least 30 days before changes take effect.
• Continued use of Services after changes constitutes acceptance of the updated policy.
• The "Last Updated" date at the top of this policy indicates the most recent revision.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at dmac@zophous.ai. For EEA/UK residents: you have the right to lodge a complaint with your local supervisory authority if you believe we have not complied with applicable data protection laws.