Privacy Policy

Personal Information

We collect information that you provide directly to us, including:

• Name and email address
• Account credentials
• Payment information (processed securely through third-party payment processors)
• Profile information and preferences

Content and Usage Data

When you use our Service, we collect:

• Videos, scripts, and other content you create
• Usage patterns and feature interactions
• Device information and IP addresses
• Browser type and operating system

Service Providers

We work with third-party service providers to help us operate our business, including:

• Cloud hosting providers
• Payment processors
• AI and machine learning service providers
• Analytics providers

Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities.

What We Access

• An OAuth access token and refresh token for your Google Account
• The YouTube video ID and URL returned to us after each upload you initiate

The youtube.upload scope is write-only. We cannot and do not read your existing videos, comments, subscribers, watch history, analytics, Gmail, Drive, or any other Google data. We do not create aggregated or anonymized data sets from Google user data.

How We Use It

Solely to upload the video you explicitly chose to publish, and to display its resulting link and status back to you in the app. We never use Google user data for advertising, profiling, credit or lending decisions, or any purpose unrelated to this feature.

How We Share It

We do not sell, rent, or transfer Google user data to any third party. Your tokens are transmitted only to Google's own APIs. They are never sent to our AI providers or to any data broker, advertiser, or analytics provider.

How We Protect It

OAuth tokens are encrypted at rest with AES-256-GCM using a key held only in our server environment, and are never exposed to your browser. All traffic is encrypted in transit with TLS. Row-level database security restricts every token to the account that created it.

Retention and Deletion

Tokens are retained only while your channel stays connected. Disconnecting the channel in your settings deletes them from our database immediately, and deleting your account removes them within 30 days. You may also revoke our access at any time at myaccount.google.com/permissions.

Limited Use

FinalTake's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is never used to develop, improve, or train generalized AI or machine learning models.

What a Connected Assistant Can Do

Once connected, the assistant can read and change your FinalTake projects, brands, products, presenters, voices and music choices, and upload images to your account. It can generate and render videos, which use your credits, only when you approve it. It can see only your own account's data.

What the Assistant's Provider Handles

What you type to the assistant, and what it receives back from FinalTake, is handled by that assistant's provider under their privacy policy. FinalTake does not receive your other conversations with the assistant.

Revoking Access and Token Lifetimes

You can disconnect any assistant at any time in the app under Settings, MCP, in the Connected tools list. Disconnecting deletes the grant, so the assistant can no longer use it or refresh it. Access tokens expire after 1 hour and refresh tokens after 30 days. Access also stops if your plan drops below Creator.

What We Record

For each connected assistant we store its name, when you connected it and when it was last used, which you can see in Settings. We keep server error logs when a tool call fails.