Privacy Policy

Last updated: July 21, 2026

1

Information We Collect

Account Information

  • Email address
  • Name
  • Password (encrypted)
  • Organization/workspace name

Usage Data

  • Videos created and topics selected
  • Feature usage patterns
  • Device and browser information
  • IP address and location (country level)

Payment Information

Payment processing is handled by Stripe. We do not store your full credit card information on our servers.

2

How We Use Your Information

  • To provide and improve the Service
  • To process payments and manage subscriptions
  • To send important account notifications
  • To respond to support requests
  • To prevent fraud and abuse
  • To comply with legal obligations
3

Data Storage and Security

  • Your data is stored on secure cloud infrastructure
  • We use encryption for data in transit and at rest
  • Generated videos are stored temporarily and can be deleted at any time
  • We implement industry-standard security measures
4

Third-Party Services

We use the following third-party services that may process your data:

SupabaseAuthentication and database
StripePayment processing
OpenAI / AnthropicAI script generation
ElevenLabsVoice synthesis

Each service has their own privacy policy governing data use.

5

AI Agent and MCP Connections

When you connect ChatGPT, Claude, OpenClaw, Hermes, Codex, or another compatible AI agent, GoFaceless uses OAuth or another explicitly authorized credential to link that host to one selected organization. You choose review-only, create/edit, or delivery access, and you can revoke the connection from GoFaceless Settings.

Information processed

To perform the action you request, we process the creative instructions and references you provide, the connected host and client identity, the selected organization, video session and operation identifiers, approval state, and limited usage and quality information. Tool responses contain only the fields needed to show video progress, review material, the next safe action, and recovery links.

How access is limited

GoFaceless validates the organization, permission profile, current video state, approval, entitlement, and credit rules for every connector action. Agent hosts do not receive provider credentials, GoFaceless access tokens, private system prompts, or internal debug traces. Creating a connection does not authorize social publishing; final video delivery requires separate permission and confirmation.

Third-party host data

The connected AI host may process or retain your conversation and attachment under its own privacy policy. Disconnecting a host stops future GoFaceless access but does not delete copies already retained by that host. Your durable GoFaceless video session remains available in the native product, subject to the retention rules below.

6

Google and YouTube User Data

When you choose to connect a Google account to publish to YouTube, GoFaceless uses YouTube API Services to upload videos you create to your own channel. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

What we access

With your explicit consent through Google's OAuth screen, we request the minimum scopes needed to publish on your behalf:

  • youtube.upload — to upload the videos you choose to publish to your channel.
  • youtube.readonly — to read your channel name and the status of an upload so we can show it back to you.

How we use it

We use Google and YouTube data solely to publish videos you explicitly choose to post and to display upload status. We do not sell it, use it for advertising, transfer it to third parties except as needed to provide the publishing feature, or use it to train AI/ML models. Human access to this data is limited to cases you request (support) or where required for security or law.

Storage and revoking access

Your Google authorization tokens are stored encrypted at rest and are used only to publish on your behalf. You can disconnect an account at any time inside GoFaceless, or revoke access directly from your Google Account permissions. Your use of YouTube features is also subject to the YouTube Terms of Service and the Google Privacy Policy.

7

Data Retention

  • Account data is retained while your account is active
  • Generated videos are retained for 30 days after creation
  • You may request deletion of your data at any time
  • Some data may be retained for legal compliance
8

Your Rights

You have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Delete your account and data
  • Export your data
  • Opt-out of marketing communications
9

Cookies

We use essential cookies for:

  • Authentication and session management
  • Security and fraud prevention
  • Remembering your preferences

We do not use third-party tracking cookies for advertising.

10

Children's Privacy

The Service is not intended for users under 18 years of age. We do not knowingly collect information from children.

11

International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers.

12

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through the Service.

13

Contact Us

For privacy-related questions or to exercise your rights, contact us at privacy@goagentic.com