Legal
Privacy Policy
This policy explains what information VideoDuck processes, why we process it, and the choices available to you.
Last updated: September 16, 2026
1. Scope and controller
This Privacy Policy applies to the VideoDuck website, applications, APIs, and related services. The operator of VideoDuck is responsible for personal information processed to provide the service. Paddle acts as Merchant of Record and separately processes checkout and payment information under its own privacy policy.
2. Information we collect
- Account information: email address, authentication identifiers, account role, and security settings.
- User content: uploaded or imported videos, titles, transcripts, frames, chapters, embeddings, search queries, chat prompts, and generated responses.
- Usage information: plan usage, processing jobs, API activity, feature interactions, timestamps, error information, and approximate technical request data.
- Payment information: subscription status, Paddle customer and subscription identifiers, selected plan, renewal date, and billing status. Complete payment-card details are collected and stored by Paddle, not VideoDuck.
- Support communications: messages and information you provide when requesting help or reporting a problem.
3. How we use information
- provide uploads, transcription, indexing, search, chat, playback, and account features;
- authenticate users, enforce plan limits, process subscriptions, and prevent abuse;
- operate, monitor, debug, secure, and improve the service;
- respond to support requests and service communications;
- comply with legal obligations and enforce our agreements; and
- protect users, VideoDuck, and the public from fraud, security threats, and prohibited activity.
4. Legal bases
Where data-protection law requires a legal basis, we process information as necessary to perform our contract with you, for our legitimate interests in operating and securing the service, to comply with legal obligations, and with consent where consent is required. You may withdraw consent without affecting processing already performed.
5. Service providers and disclosures
We use service providers for authentication, hosting, object storage, database services, video processing, transcription, embeddings, language models, vector search, usage metering, customer support, and payments. They may process information only to provide their contracted services and subject to appropriate obligations.
We may disclose information when required by law, to protect rights and safety, in connection with a merger or acquisition, or at your direction. We do not sell personal information or user videos.
6. AI processing
Video content, transcript excerpts, search queries, and prompts may be sent to configured AI providers to perform transcription, embedding, summarization, chaptering, visual analysis, and chat. The exact provider may depend on service configuration or a provider you configure. Do not submit content that you are not permitted to process through these services.
7. Retention and deletion
We retain account information while your account is active and as necessary for legal, security, billing, and dispute-resolution purposes. User content is retained to provide the service until you delete it or close your account, subject to backup cycles and legal holds. Billing records may be retained for the periods required by tax and accounting law.
8. Security
We use access controls, encryption in transit, tenant-scoped authorization, signed storage access, and operational safeguards designed to protect information. No system is completely secure. You are responsible for protecting your password, session, API keys, and devices.
9. International processing
Our providers may process information in countries other than your own. Where required, we use contractual and organizational safeguards intended to protect information transferred internationally.
10. Your rights
Depending on your location, you may have rights to access, correct, export, delete, restrict, or object to processing of your personal information, and to lodge a complaint with a data-protection authority. We may need to verify your identity before fulfilling a request.
11. Children
VideoDuck is not directed to children under 13, or the higher minimum age required in their jurisdiction. We do not knowingly collect personal information from children who cannot lawfully consent to use the service.
12. Changes and contact
We may update this policy as the service or legal requirements change. We will post the revised policy here and update the effective date.
For privacy questions or rights requests, contact support@videoduck.cc.