1. Who we are
VidMyth operates vidmyth.com and is the controller of the personal data described here. For anything in this policy, including a data request, write to kmohitroy00@gmail.com.
2. What we collect
We collect three kinds of information, and no more than we need:
- Account data — your email address, display name and profile photo, taken from the sign-in method you choose. If you sign in with Google, we receive these from Google; we never see your Google password.
- Usage and content data — the projects, ideas, scripts, thumbnails, videos, metadata and pages you generate, the prompts and briefs you supply, your credit balance and your generation history. This is the product; it is stored so you can come back to it.
- Payment data — a record of what you bought, when, for how much, and the identifier PayPal gives the transaction. We never see or store your card number, bank details or PayPal password. Those go directly to PayPal.
- Support data — the contents of tickets and contact-form messages you send us.
3. Why we use it, and on what basis
- To provide the service you asked for — running generations, storing your work, keeping your balance correct. Basis: performance of our contract with you.
- To take payment and prevent payment fraud. Basis: performance of the contract, and our legitimate interest in not being defrauded.
- To email you about your account — a failed render, a receipt, a support reply. Basis: performance of the contract.
- To keep the service working and secure — diagnosing errors, monitoring provider health, rate-limiting abuse. Basis: our legitimate interest in a service that works.
- To meet legal and tax obligations. Basis: legal obligation.
- We do not sell your personal data, and we do not use it to train AI models.
4. Who we share it with
We use a small number of processors to run the platform. Each receives only what it needs to do its job:
- Google Firebase — authentication, database and file storage. This is where your account and your generated work live.
- Google (Gemini API) — text and image generation. Receives the prompts and briefs you submit.
- Anthropic (Claude API) — text generation, used as a fallback and for some analysis tools. Receives the prompts you submit.
- Revid.ai — video rendering. Receives the script, media settings and render options for a video job, and any voice recording or character reference photo you upload for it.
- ElevenLabs — speech synthesis. Receives the narration text and the voice you pick, both through Revid and directly when you preview a voice.
- Google (YouTube Data API) — public video and channel information. Receives the YouTube links you paste into the Diagnostic and research tools, never your account credentials.
- PayPal — payment processing. Receives your payment details directly; we receive only the transaction record.
- Resend — transactional email. Receives your email address and the message we are sending you.
- Vercel — application hosting. Every request to VidMyth passes through it.
- We may also share data where the law requires it, or with a buyer if the business is sold — in which case we will tell you first.
5. International transfers
The processors above operate outside your country, including in the United States. Where personal data leaves your region we rely on the transfer mechanisms those providers offer, such as the EU Standard Contractual Clauses. You can ask us which mechanism applies to a particular transfer.
6. How long we keep it
- Account data — for as long as your account is open, then deleted within 30 days of a deletion request.
- Generated content — until you delete it, or until your account is deleted. Deleting a project deletes everything in it.
- Payment records — retained for as long as tax and accounting law requires, typically seven years. These survive account deletion because we are obliged to keep them.
- Support tickets — up to 24 months after the ticket is closed.
- Email addresses collected through a landing page you published — held for you, deleted when you delete the page or your account. Anyone on that list can ask us to remove them directly.
- Newsletter subscribers — kept until you unsubscribe. An unsubscribed address is retained, not deleted, precisely so we do not email it again by mistake.
- Error and diagnostic logs — up to 90 days.
7. Your rights
Depending on where you live, you can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or send it to another provider. You can also withdraw consent where we relied on it.
Two of those you can do yourself, immediately, from your profile page: Export my data downloads everything we hold about you as a single file, and Delete my account erases it. Deletion is immediate and cannot be undone — it also destroys any landing pages you published and the email addresses they collected, so export first if you want them.
To stop marketing emails, use the unsubscribe link at the bottom of any message, or the Unsubscribe page linked in our footer. Receipts, render notifications and replies to your support tickets are not marketing and will keep arriving while your account is open.
To exercise any of these, email kmohitroy00@gmail.com. We will respond within 30 days. There is no charge unless a request is repetitive or excessive.
If you think we have handled your data badly, you can complain to your local data protection authority. We would rather you told us first so we can fix it.
9. Children
VidMyth is not intended for children under 13, and we do not knowingly collect their data. If you believe a child has given us personal data, tell us and we will delete it.
10. Changes to this policy
If we change how we use your data in a way that affects you, we will update the date at the top of this page and email you before the change takes effect.
Something here unclear, or think we have got it wrong? Tell us — we would rather fix it than defend it.