Privacy Policy

Last updated: November 1, 2026

1. Introduction

This Privacy Policy explains what information YourFacelessFactory ("we", "us") collects when you use our website and video-generation service (the "Service"), why we collect it, and what choices you have.

YourFacelessFactory is operated by Isak Söderström, a sole trader (enskild näringsidkare) approved for F-tax in Sweden, Näktergalsvägen 15C, Ekerö, Sweden, who is the "data controller" for the personal information described below. You can reach us at support@yourfacelessfactory.com.

2. Information We Collect

Account information. When you sign up, we collect your email address and a password, which is stored only as a salted hash (a scrambled, one-way version), never in plain text. To confirm the address we email you a one-time code and link; we store only scrambled copies of them, and delete them once your address is confirmed. Visitors who haven't signed up can try building templates: the first time they save something (a template or an upload), they get a temporary anonymous session. It becomes part of your account if you sign up. If you instead log in to an account you already have, in the same browser, the templates you built in the last 24 hours move into that account, as many as your plan allows. An anonymous session that is never claimed is deleted, with everything built in it, once it's at least 7 days old and its browser session has ended.

Signing in with Google. If you choose "Continue with Google", Google tells us your name, email address, profile picture and your Google account's ID, and that it has verified the email address. We never see your Google password or anything else in your Google account. We store a small copy of the picture on our server and show it on your account button, so it isn't loaded from Google each time.

Content you provide. YouTube links, typed video ideas and scripts you write yourself, thumbnail ideas, files you upload (main character, side character and thumbnail reference images, and background music you confirm you have the rights to), your characters (what you write in the character chat, and the pictures it draws or you upload), what you write in the thumbnail chat (and the pictures you add to it), the templates, schedules (their days, time and time zone) and settings you create, and the videos generated for you.

Payment information. Purchases and subscriptions are processed by Stripe. We receive your Stripe customer ID, what you bought, the amount, and whether the payment succeeded. We never see or store your card number, which goes directly to Stripe.

YouTube connection. If you connect a YouTube channel, we store the access grant Google gives us, plus the channel's ID and name, so the Service can upload videos to it. See section 5.

Instagram and TikTok connections. If you connect an Instagram (Business or Creator) or TikTok account, we store the access grant Instagram or TikTok gives us (encrypted), the account's ID, username, display name and a small copy of its profile picture, and - for each video posted there - the caption, the choices you made for it (on TikTok: who can see it, comments, Duet, Stitch and the commercial-content disclosure), when it was posted and its link. See section 5.

Comments on our own social accounts. When someone comments on YourFacelessFactory's own Instagram or YouTube posts with a word we asked for (for example "LINK"), we answer automatically - on Instagram with a private message and/or a reply, on YouTube with a reply - and keep their username and a short part of the comment for 30 days, so we never answer twice.

Your country. Our server looks up which country your IP address belongs to, on our own server, with DB-IP's free country database (IP geolocation by DB-IP, licensed under CC BY 4.0) - your address isn't sent anywhere for this. We keep only the two-letter code of the last country we saw on your account. We use it because our AI providers only serve certain countries: in other countries, making videos (scheduled ones too), the AI chats and buying tokens or plans are turned off.

Contact messages. If you use our Contact page or email us, we keep your email address and message so we can reply. Messages sent through the Contact page are also forwarded to our email inbox. An AI assistant may write the first answer to these messages (see section 4), and we keep each support conversation (your email address, your messages and the assistant's answer) so the person who takes over can see what was said. Contact-page messages and support conversations are deleted after 90 days.

Usage and log data. We keep a record of the videos you make (status, timing, settings used, cost), and standard server logs (IP address, browser type, pages requested) to operate and secure the Service. Each video's full making log, which includes your idea or script, is kept for 30 days. If you allow it in the cookie banner, Google Analytics also measures how you use the site (see section 4).

3. How We Use Your Information

• To provide the Service: generating videos from your source material, saving your templates and schedules, delivering finished videos, and posting them to your YouTube channel if you ask us to.
• To process payments and keep track of your token balance and plan.
• To keep the AI features to the countries our AI providers serve (your country, see section 2).
• To send you the emails the Service needs: the code to confirm your email address, one welcome email with your first steps, password links, security notices (for example when your password changes or Google sign-in is added to your account), and a message when one of your videos fails or couldn't be posted - you can switch those off in Account settings.
• To operate, maintain and improve the Service, including diagnosing problems.
• To answer messages sent through the Contact page or to our support address - first by an AI assistant, which hands anything it can't answer, and anything you ask to, to a person.
• To understand how the site is used and improve it (Google Analytics, only if you allow it).
• To enforce our Terms of Service and keep the Service secure. If an account breaks them, we can pause its posting to YouTube or suspend it; we keep its data while we look into it.

We don't use your information for advertising, and we don't send marketing emails.

4. How We Share Your Information

We don't sell your personal information. We share it only with the service providers that make YourFacelessFactory work, each acting on our behalf:

• Stripe processes purchases and subscriptions. See Stripe's own privacy policy for how it handles payment data.
• Supabase stores finished videos and their files so you can download them later.
• Anthropic, Google (Gemini) and ElevenLabs power the video generation (script writing, images and voiceover). The content of your request (the source video's transcript, your typed idea or your own script, your thumbnail idea, and any reference images you uploaded) is sent to them to make your video. The character chat works the same way: your messages are sent to Anthropic, which answers and decides what to draw, and the character's description (with its current picture, when it changes one) is sent to Google (Gemini), which draws it. Editing a scene of a finished video sends that scene's picture, the pictures it was drawn with and the change you typed to Google (Gemini), which draws the new picture; with the scene editor's chat, your messages, the video's script and the scene's picture are first sent to Anthropic, which answers and decides what to change. The thumbnail chat works the same way: your messages, the thumbnail's settings and the thumbnail on show are sent to Anthropic, which answers and decides what to draw or change; what it decided - with the chosen character's picture, the thumbnail being changed and any pictures you added - is sent to Google (Gemini), which draws it and reads a new thumbnail's words back.
• Anthropic also drafts the first answer to messages sent to our support address or through the Contact page: the text of your message is sent to it to write the reply. Every such answer says it was written by an AI and lets you ask for a person instead.
• Anthropic also checks the words you write for a video - its idea, your own script and your thumbnail idea - before the video starts, to stop clearly abusive requests (such as sexual content involving minors, threats against a real person or instructions for serious harm). Dark topics like true crime, horror and war history are fine. With that text it receives a scrambled code for your account, never your name or email address, so a report about misuse can be traced to one account. A video stopped this way isn't charged.
• Railway hosts the website and the servers that generate your videos, in the EU (Amsterdam).
• Google (Workspace) hosts our email, including the messages you send through the Contact page or to our support address.
• Google (YouTube) receives your finished videos, with their title and description, only if you connect a channel and post to it.
• Meta (Instagram) and TikTok receive a finished video, with its caption, only if you connect an account there and post to it, by hand or with Auto-post. Instagram downloads the video from a one-time link on our own site.
• Google (Analytics) measures how the site is used, but only if you allow it in the cookie banner. It receives the pages you visit (without anything after a "?"), the page you came from, and your browser, device type and approximate location. We don't send your name, email address or account ID, and we don't use it for advertising. See our Cookie Policy.
• Google (YouTube) also plays the example videos on our home page, but only if you allow it in the cookie banner. Your browser then loads them straight from YouTube, which receives your IP address and browser information and may set cookies. See our Cookie Policy.

Otherwise, simply browsing the site doesn't send anything to other companies unless you allow Google Analytics or the YouTube videos: its fonts, scripts and images are all served from our own server.

We may also disclose information if the law requires it, or to protect the rights, property or safety of YourFacelessFactory, our users or others.

Some of these providers process data outside the country you live in, including outside the European Economic Area. Where that happens, we rely on the safeguards they provide (such as Standard Contractual Clauses) to protect your information.

5. YouTube, Instagram, TikTok and Google Data

Posting to YouTube uses the YouTube API Services. When you connect a channel, Google asks for your permission. We use the access you grant only to upload the videos you schedule or choose to post, with their title and description, to check the status of videos we uploaded, and to show which channel is connected. We don't use it to read or change anything else on your channel. Google's handling of your data is covered by the Google Privacy Policy.

Our use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements: we use it only to provide the features described here, never sell it, never use it for advertising, and never use it to train AI models.

Our home page also uses the YouTube API Services to show public information about its example videos: their titles and view counts, and their channels' names and subscriber counts. Our server fetches this from YouTube itself, and no information about you is sent to YouTube for it.

"Continue with Google" asks Google only for your basic profile (name, email address and picture). We use it to sign you in and to show your name and picture on your account. It gives us no access to your YouTube channel, Gmail, Drive or anything else. You can remove our access at any time from your Google account's third-party access settings. Deleting your account deletes the name, picture and Google account ID we stored.

Disconnecting a channel on the Auto-post page, or deleting your account, deletes the access grant we stored and asks Google to revoke it. You can also revoke our access at any time from your Google account's third-party access settings.

Instagram. Posting to Instagram uses Meta's Instagram API. When you connect an account, Instagram asks for your permission to let us read your account's basic profile and publish content to it. We use it only to post the videos you choose or schedule, as Reels with their caption, to check that they were posted, and to show which account is connected - nothing else on your account is read or changed. Meta's handling of your data is covered by the Instagram Privacy Policy. You can remove our access at any time in Instagram (Settings > Website permissions > Apps and websites); Instagram then tells us, and we delete what we stored about that account. You can also ask for that data to be deleted through Meta, which sends us a deletion request - see our data deletion page.

TikTok. Posting to TikTok uses TikTok's Content Posting API. When you connect an account, TikTok asks for your permission to read your basic profile and post videos for you. Before each video is posted, TikTok's own posting screen on our site shows the account it goes to and asks you to choose who can see it, whether others can comment, Duet or Stitch, and whether it promotes a brand - nothing is sent before you press the button under TikTok's Music Usage Confirmation. TikTok's handling of your data is covered by the TikTok Privacy Policy.

Disconnecting an Instagram or TikTok account on the Auto-post page, or deleting your account, deletes the access grant and the account details we stored (TikTok is also asked to revoke our access). Videos already posted stay on Instagram or TikTok - you can delete them there. We never sell this information, use it for advertising or use it to train AI models.

6. How Long We Keep It

We keep your account, templates, schedules, saved characters, video history and finished videos for as long as your account exists. A character you start in the character chat but never save is deleted after 7 days. For a character drawn from its description, or your own uploaded picture, we also draw one plain version of it - the same head and build, without clothing or props - that the other people in your videos are built on; it's kept with your account and deleted with it. So that a finished video's scenes can be edited, its scene pictures and the pictures they were drawn with are kept for 30 days after it's made, then deleted (the video itself stays). A thumbnail made in the thumbnail chat - its pictures, its chat and the pictures you added to it - is kept until 30 days after its last change, then deleted. A picture you use for one of your videos ("Use for this video") is copied to that video's own files and kept with them. You can delete a single video from its page: its files, its title and the idea or script it was made from are deleted, and only a short record of it (when it was made and what it cost) stays, for billing and our usage limits. You can permanently delete your account at any time from Account settings. This deletes your templates, characters (with their chat and pictures), uploaded reference images, thumbnails, videos and their files, schedules, connected YouTube channels and Instagram and TikTok accounts, video history and the contact messages you sent while logged in. Purchase records (purchases, plan changes, monthly token grants, refunds and payment disputes) are kept after deletion because accounting law requires it. If we ever had to suspend an account, a short record of that decision (when, why and who decided) is kept to protect the Service. Messages sent through the Contact page while logged out aren't linked to an account - ask us and we'll delete them sooner. Contact-page messages and support email conversations are deleted after 90 days, and each video's making log after 30 days. Server logs are kept only for a limited time, and Google Analytics data is deleted after at most 14 months.

7. Data Security

Passwords are stored as salted hashes (scrambled, one-way versions), not plain text, and payment card details never touch our servers because Stripe handles them directly. No way of sending or storing data is completely secure, though, so we can't guarantee absolute security.

8. Your Rights and Choices

Depending on where you live, you may have the right to access, correct, export or delete your personal information, or to object to how we process it. In Account settings you can download a copy of your data ("Download my data" - one file with your account, templates, characters, schedules, thumbnails and videos, and links to download your finished videos) and delete your account and its data; single videos can be deleted from their own pages. For anything else, email support@yourfacelessfactory.com or use the Contact page.

If you're in the European Economic Area or the UK, the GDPR gives you the rights to access, rectify, erase, restrict or object to our processing of your personal data, and to data portability. Our legal bases are: performing our contract with you (running the Service you signed up for); our legitimate interest in operating and securing the Service; our legal obligations (for example keeping accounting records); and your consent where we ask for it (for example connecting YouTube, Instagram or TikTok, playing the YouTube videos on the home page, or Google Analytics). If you believe we haven't handled your data properly, you can complain to your local data protection authority. In Sweden this is Integritetsskyddsmyndigheten (IMY).

If you're a California resident, the CCPA gives you similar rights to know what personal information we collect, to have it deleted, and not to be discriminated against for using those rights. We don't sell personal information.

9. Children's Privacy

You must be at least 18 years old to create an account (confirmed at signup), and we don't knowingly collect personal information from anyone younger.

10. Cookies

We use a few essential cookies - to keep you signed in, and to keep signing in and connecting YouTube secure - plus a few settings stored only in your browser. Google Analytics' and YouTube's cookies are set only if you allow them. See our Cookie Policy for details.

11. Changes to This Policy

We may update this Privacy Policy from time to time and will change the "Last updated" date above when we do. For significant changes, we'll give notice on the site.

12. Contact Us

Questions about this policy or your data? Email support@yourfacelessfactory.com or use our Contact page.