Privacy Policy

This policy explains what Hedwig UGC collects, why, and the choices you have.

What we collect

• Account details: your name, email address and password (stored only as a secure hash).
• Content: the video files you upload, notes you attach, and the finished videos produced for you.
• If you connect TikTok or Instagram: your public profile (username, display name, avatar), the list of your posts with their captions, links, thumbnails and view, like, comment and share counts, and the access token the platform issues to Hedwig.
• If you track an account by username instead of connecting it: that account's public profile and the public view, like, comment and share counts of its recent posts, collected through our data provider SideShift.
• If you are a creator and add payout details: the name on your bank account, the account type, routing number and account number, used only to pay you.
• Technical logs (request times, errors) needed to run and secure the service.

How we use it

To provide the editing service, show your videos and their performance to you, notify you by email about your videos, and let Hedwig admins manage the team. We do not sell your data, use it for advertising, or share it with third parties except the service providers listed below.

TikTok and Instagram data

Data from connected accounts is used only to display your own post statistics on your Stats page, visible to you and Hedwig admins. It is refreshed about once a day and when you press Refresh. Access tokens are encrypted at rest. Disconnecting an account on the Stats page immediately deletes its tokens and all synced posts and statistics. You can also revoke Hedwig's access from your TikTok or Instagram settings, and Hedwig deletes the data when the platform notifies us. Full steps are on the data deletion page.

Bank details

Bank details are used only to pay you for your videos under your creator agreement. The account number is encrypted at rest and shown in full only to Hedwig admins when sending a payment, through our bank (Mercury). You can change them in Settings at any time, and they are deleted with your account.

Service providers

We use Vercel (hosting and file storage), Neon (database), Resend (email) and SideShift (public post statistics for accounts tracked by username) and Mercury (our bank, for creator payments) to run the service. They process data on our behalf and only as needed to provide their service.

Retention and deletion

We keep your data while your account is active. You can delete videos from your home page and disconnect social accounts from the Stats page at any time. To delete your account and everything in it, email us and we will do so within 30 days.

Security

Files are private and served only through signed, expiring links. Passwords are hashed and social tokens encrypted. No system is perfectly secure, but we take reasonable measures to protect your data.

Changes

If we change this policy we will update the date above.

Contact

mr.chandran345@gmail.com