Privacy Policy
Last updated: August 13, 2026
Information We Collect
Account Information
- Email address
- Name
- Password (encrypted)
- Organization/workspace name
Usage Data
- Videos created and topics selected
- Feature usage patterns
- Optional survey responses, including how you first heard about GoFaceless
- Device and browser information
- IP address and location (country level)
Payment Information
Payment processing is handled by Stripe. We do not store your full credit card information on our servers.
How We Use Your Information
- To provide and improve the Service
- To process payments and manage subscriptions
- To send important account notifications
- To respond to support requests
- To prevent fraud and abuse
- To comply with legal obligations
Data Storage and Security
- Your data is stored on secure cloud infrastructure
- We use encryption for data in transit and at rest
- Generated videos are stored temporarily and can be deleted at any time
- We implement industry-standard security measures
Third-Party Services
We use the following third-party services that may process your data:
Each service has their own privacy policy governing data use.
GoFaceless Chrome Extension
When you invoke the GoFaceless Chrome extension from its toolbar button or context menu, it handles only the title, domain, and HTTPS URL of the page or link you chose and, if you use the selection action, the text you selected. Under Chrome Web Store terminology, this can constitute website content and web browsing activity even though it is limited to the one source you explicitly chose.
How the extension uses source data
The extension shows the source in its user interface and uses it solely to open the source-backed GoFaceless video draft you requested. The information stays in the extension until you click the create action, then it is sent over HTTPS to GoFaceless as part of that draft. Once attached to a GoFaceless session, it follows the same security, retention, access, and deletion rules as your other creative instructions and references.
What the extension does not do
It does not inject scripts into pages, read page bodies, collect cookies or credentials, or monitor browsing in the background. We do not sell extension data or use it for advertising, profiling, creditworthiness, or any purpose unrelated to creating and supporting the requested video draft. Human access is prohibited except with your consent for support, when required for security or law, or after data has been aggregated and anonymized for internal operations.
GoFaceless's use of information received through the extension complies with the Chrome Web Store User Data Policy, including the Limited Use requirements.
AI Agent and MCP Connections
When you connect ChatGPT, Claude, OpenClaw, Hermes, Codex, or another compatible AI agent, GoFaceless uses OAuth or another explicitly authorized credential to link that host to one selected organization. You choose review-only, create/edit, or delivery access, and you can revoke the connection from GoFaceless Settings.
Information processed
To perform the action you request, we process the creative instructions and references you provide, the connected host and client identity, the selected organization, video session and operation identifiers, approval state, and limited usage and quality information. Tool responses contain only the fields needed to show video progress, review material, the next safe action, and recovery links.
How access is limited
GoFaceless validates the organization, permission profile, current video state, approval, entitlement, and credit rules for every connector action. Agent hosts do not receive provider credentials, GoFaceless access tokens, private system prompts, or internal debug traces. Creating a connection does not authorize social publishing; final video delivery requires separate permission and confirmation.
Third-party host data
The connected AI host may process or retain your conversation and attachment under its own privacy policy. Disconnecting a host stops future GoFaceless access but does not delete copies already retained by that host. Your durable GoFaceless video session remains available in the native product, subject to the retention rules below.
Google and YouTube User Data
When you choose to connect a Google account to publish to YouTube, GoFaceless uses YouTube API Services to upload videos you create to your own channel. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
What we access
With your explicit consent through Google's OAuth screen, we request the minimum scopes needed to publish on your behalf:
youtube.upload— to upload the videos you choose to publish to your channel.youtube.readonly— to read your channel name and the status of an upload so we can show it back to you.
How we use it
We use Google and YouTube data solely to publish videos you explicitly choose to post and to display upload status. We do not sell it, use it for advertising, transfer it to third parties except as needed to provide the publishing feature, or use it to train AI/ML models. Human access to this data is limited to cases you request (support) or where required for security or law.
Storage and revoking access
Your Google authorization tokens are stored encrypted at rest and are used only to publish on your behalf. You can disconnect an account at any time inside GoFaceless, or revoke access directly from your Google Account permissions. Your use of YouTube features is also subject to the YouTube Terms of Service and the Google Privacy Policy.
Data Retention
- Account data is retained while your account is active
- Generated videos are retained for 30 days after creation
- You may request deletion of your data at any time
- Some data may be retained for legal compliance
Your Rights
You have the right to:
- Access your personal data
- Correct inaccurate data
- Delete your account and data
- Export your data
- Opt-out of marketing communications
Cookies
We use essential cookies for:
- Authentication and session management
- Security and fraud prevention
- Remembering your preferences
We do not use third-party tracking cookies for advertising.
Children's Privacy
The Service is not intended for users under 18 years of age. We do not knowingly collect information from children.
International Data Transfers
Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through the Service.
Contact Us
For privacy-related questions or to exercise your rights, contact us at privacy@goagentic.com