This Privacy Policy explains how WideLens (“WideLens,” “we,” “us”) collects, uses, and shares information when you use our mobile application and website (the “Service”). By using the Service, you agree to the practices described here.
1. Information We Collect
We collect the following categories of information:
- Account information: email address, display name, password (hashed), and your chosen subscription tier.
- User Content: filmed clips, voiceovers, AI-generated scripts, captions, edits, watermarks, and published-post metadata.
- Connected-platform data: when you authorize a publishing connection (Instagram, Facebook, TikTok, YouTube), we store the OAuth tokens and basic account metadata returned by that platform. We do not store your platform passwords.
- YouTube: WideLens uses YouTube API Services. We request a single scope,
youtube.upload, which lets WideLens upload a video you approve to your channel. That scope is write-only: WideLens cannot read your videos, comments, subscriber counts, or watch history. The only YouTube API data we receive and store is what the upload itself returns — the ID of the video we just uploaded for you, and the name and ID of the channel it went to (we show you the channel name so you can confirm we are publishing to the right account). We store no YouTube statistics of any kind. By connecting YouTube you agree to the YouTube Terms of Service. Google’s use of your information is described in the Google Privacy Policy.
How to revoke access. You can revoke WideLens’s access at any time from your Google account’s connections page (also reachable through your Google security settings), or from Settings → Connections inside the WideLens app.
How to delete the data we stored. Open the WideLens app, go to Settings → Connections, and tap Disconnect on YouTube. WideLens immediately tells Google to revoke the authorization and deletes our stored copy of your YouTube tokens, channel name, channel ID, and uploaded-video IDs. You can also delete everything by tapping Settings → Delete account, or by emailing privacy@widelens.app. Deletion happens within 7 days. If you instead revoke access through Google, we delete the data we obtained under that authorization within 30 days of the revocation.
Deleting data here does not change anything on YouTube. Removing the data WideLens stored does not, in any way, affect data stored by YouTube. To delete a video or other data on YouTube, use the YouTube app or website, or another authorized client that supports deleting it. - Billing information: our payment processor collects and stores your payment details directly; we receive only a customer identifier, the subscription tier, status, and renewal date.
- Usage data: device type, OS version, app version, analytics events, and crash reports. While you are signed in these are linked to your account and email address, not anonymous — see Cookies and Device Storage below.
- Push tokens: if you grant notification permission, we store a push notification token for your device so we can send you in-app notifications.
2. How We Use Your Information
- To provide and improve the Service.
- To process payments and manage your subscription.
- To generate AI-assisted content (scripts, voiceovers, captions) using your inputs as prompts.
- To publish your content to platforms you authorize.
- To send you transactional emails (account, billing, security) and optional product updates.
- To monitor for abuse, fraud, and policy violations.
- To comply with legal obligations.
3. Third-Party Services We Share Data With
We share information with third-party service providers that help us deliver the Service, including providers of cloud infrastructure and database hosting, payment processing, background job orchestration, AI script and voice generation, speech-to-text transcription, video filter and music libraries, email delivery, and analytics. These providers process data only on our behalf and under contractual obligations to keep it secure.
When you authorize publishing to a connected social platform, your video and caption content is sent to that platform — currently Instagram, Facebook, TikTok, and YouTube. Each platform has its own privacy policy governing how it handles your content there.
4. Cookies and Device Storage
WideLens stores, accesses and collects information on your device, and allows the third parties named below to do the same, using cookies and similar technologies such as browser local storage and session storage.
- PostHog (product analytics). On widelens.app, PostHog sets a cookie and writes to your browser’s local storage and session storage to recognise a returning browser, count page views, and record which marketing link brought you here. PostHog acts as our processor. We have disabled automatic capture of your clicks and typing.
- Advertising pixels (Meta and TikTok). WideLens can run advertising pixels from Meta and from TikTok on widelens.app. When one is switched on it sets its own cookie on your browser — Meta’s is
_fbp— and reports your page views to that company so we can measure our advertising. These are third parties storing and reading information on your device. Checked in a browser on September 2, 2026: the Meta pixel is switched on and the TikTok pixel is not. - Signing in to widelens.app. When you sign in to your account area on the website, we set a first-party session cookie on your browser so you stay signed in. This one is required — blocking it means you cannot sign in on the website.
- Campaign attribution. We save the
utm_*parameters from the link you arrived on, and any affiliate referral code, into your browser’s local storage, so we can tell which campaign or partner a signup came from. We also store a flag in local storage remembering that you dismissed the banner at the top of the page. - The WideLens mobile app. The app stores your signed-in session on your device so you do not have to sign in every time you open it. Signing out removes that session from your device. The app also stores a small flag recording that you have seen the welcome video, which is not removed when you sign out; uninstalling the app or clearing its storage in your device settings removes it. PostHog, our product analytics processor, also stores an identifier on your device from inside the app. This is not anonymous: while you are signed in we send PostHog your account ID and the email address on your account, so what we see there is tied to you rather than to an unnamed device.
You can clear or block cookies and site data in your browser’s settings, and reset or limit ad tracking in your device settings. Blocking analytics and advertising storage does not stop you browsing this site or using the app. Blocking cookies on widelens.app does stop you signing in to the account area here, because the sign-in cookie above is how your session is carried.
We do not use cookies or device storage to serve advertising inside the WideLens app, and we do not allow third parties to serve advertisements in the app.
5. Data Retention
We retain your account and User Content for as long as your account is active. After you cancel or delete your account, we retain your data for 30 days to support reactivation, then delete or anonymize it. Some data (billing records, security logs) may be retained longer where required by law.
YouTube API Services data is an exception and is deleted sooner. Data we obtained through YouTube API Services is deleted within 7 days of you disconnecting YouTube in the app, deleting your account, or sending us a deletion request. Separately, we delete the channel name, channel ID and uploaded-video IDs once they are 30 days old, whether or not you are still connected. Publishing again re-reads your channel name and ID from YouTube and restarts their 30 days; an uploaded-video ID keeps its own 30 days from the day it was published. Your access token is different: we keep it while your connection is active, and if it stops working we delete the token and everything we derived from it.
6. Your Rights
Subject to your jurisdiction, you may have the right to access, correct, port, or delete your personal data, and to object to certain processing. To exercise these rights, email privacy@widelens.app. We respond within 30 days.
California residents: you have rights under the CCPA/CPRA, including the right to know, delete, correct, and opt out of the sale or sharing of personal information. We do not sell personal information.
EU/UK residents: under GDPR/UK GDPR, we process your data on the legal bases of contract performance (account, billing), legitimate interest (security, anti-fraud), and consent (marketing emails, push notifications).
7. Security
We use industry-standard safeguards including HTTPS for transport, encryption at rest in our managed database, row-level security policies on every customer-data table, and per-customer signed URLs for media downloads. No system is perfectly secure; we will notify affected users without undue delay if a breach occurs.
8. Children
WideLens is not directed at children under 13 (or 16 in some jurisdictions). We do not knowingly collect personal data from children. If you believe a child has provided us with information, email privacy@widelens.app and we will delete it.
9. International Transfers
Our infrastructure is hosted in the United States. By using the Service from outside the US, you consent to the transfer of your information to the US, where data-protection laws may differ from those in your country.
10. Changes to This Policy
We may update this Privacy Policy as our practices evolve. Material changes will be announced via email and in-app notice at least 14 days in advance.
11. Contact
Privacy questions: privacy@widelens.app.