Privacy Policy

Last Updated: March 19, 2026

                Your Privacy Matters: We are committed to protecting your privacy and being transparent about how we handle your data. ChopHub is a cloud-based service designed with privacy-first principles.
            

1. Information We Collect

We collect information necessary to provide our AI-powered video editing and multi-platform publishing service:

1.1 Account Information

AWS Cognito Account: Email, username, and encrypted password for secure authentication
OAuth Tokens: Authentication tokens for connected platforms (YouTube, Instagram, TikTok, Facebook, X/Twitter)
Platform User IDs: Identifiers from connected social media accounts
Profile Information: Display names and profile pictures from connected accounts

1.2 Content Data

Video Files: Videos you upload, stored on AWS S3 during processing
Processed Clips: Generated short-form videos retained for 30 days
Metadata: Titles, descriptions, captions, hashtags, and timestamps you create
Thumbnails: Generated or uploaded thumbnail images

1.3 Usage Data

Job History: Records of video processing jobs (timestamps, duration, status)
Publishing Records: Confirmation of successful posts to connected platforms
Account Settings: Your preferences and configuration choices
Analytics: Non-advertising analytics about feature usage and engagement

2. How We Use Your Information

We use your information exclusively to:

Provide AI-powered video editing and multi-platform publishing services
Authenticate you securely via AWS Cognito
Process videos using our AWS infrastructure (S3/EFS storage)
Publish content to your chosen platforms via their APIs
Generate AI-enhanced clips and suggestions via OpenAI
Provide technical support and troubleshoot issues
Improve and optimize the Service based on usage patterns

3. Data Storage and Cloud Infrastructure

3.1 AWS Cloud Storage

ChopHub is a cloud-based service hosted on Amazon Web Services (AWS). Your data is stored securely in AWS infrastructure:

AWS Cognito: Stores account credentials and authentication data
Amazon DynamoDB: Stores user metadata, settings, and job history
AWS S3: Stores video files during processing
AWS EFS: Stores temporary processed clips

3.2 Security Measures

Encryption at Rest: All data encrypted using AWS-managed keys (AES-256)
Encryption in Transit: TLS 1.2+ for all data transmission
AWS Cognito Authentication: Industry-standard multi-factor authentication support
AWS Secrets Manager: Secure storage of OAuth tokens and API credentials
VPC Isolation: Services isolated within private VPC with no public internet access for sensitive operations
IAM Policies: Least-privilege access controls for all internal systems

4. Third-Party Platforms and APIs

When you connect third-party platforms (YouTube, Instagram, TikTok, Facebook, X), you authorize us to:

Access your account on those platforms via OAuth
Publish content on your behalf
Retrieve basic profile information and analytics

Each platform's privacy policy applies to data shared with them:

YouTube Privacy Policy: https://policies.google.com/privacy
Instagram Privacy Policy: https://help.instagram.com/519522125107875
TikTok Privacy Policy: https://www.tiktok.com/legal/privacy-policy
Facebook Privacy Policy: https://www.facebook.com/privacy/policy
X Privacy Policy: https://twitter.com/privacy

5. Data Sharing and Third-Party Services

We share your data only as necessary to provide the Service:

Platform APIs: Publishing data shared with YouTube, Instagram, TikTok, Facebook, and X when you request publication
AWS Services: Data processed by AWS Cognito, S3, DynamoDB, and EFS for storage and compute
OpenAI: Video metadata and content descriptions sent to OpenAI API for AI features (see AI Processing section)
Legal Compliance: When required by law or government request

We do not:

Sell your data to advertisers or third parties
Use your videos to train our own AI models without consent
Share your personal data with unrelated third parties
Use advertising trackers on the platform

6. AI Features and OpenAI Integration

ChopHub uses OpenAI's APIs to provide AI-powered features:

Video analysis and smart clip generation
Caption and hashtag suggestions
Content optimization recommendations

When using these features, video metadata and descriptions are sent to OpenAI. Please review OpenAI's Privacy Policy for their data handling practices. OpenAI data is processed in accordance with their API Terms of Use.

7. Your Rights

You have the right to:

Access: Request a copy of all personal data we hold about you
Delete: Request deletion of your account and associated data
Export: Export your content and settings in a portable format
Disconnect: Revoke platform integrations at any time in your Account settings
Control: Manage which platforms and features you use

8. Data Retention

We retain your data only as long as necessary:

Original Video Files: Deleted immediately after processing (not retained)
Processed Clips: Retained for 30 days, then automatically deleted
OAuth Tokens: Until you disconnect the platform or delete your account
Job History: Retained indefinitely until you delete your account
Account Data: Until you request deletion

9. Cookies and Tracking

ChopHub uses only essential cookies required for authentication and security:

Session Cookies: Maintain your login session
Security Cookies: CSRF protection and security tokens

We do not use advertising tracking cookies or third-party analytics that profile your behavior.

10. Children's Privacy

ChopHub is not intended for users under 13 years of age. We do not knowingly collect information from children under 13. Compliance with COPPA regulations is built into our service. If you are a parent or guardian and believe we have collected information from a child under 13, please contact us immediately at hello@chophub.io.

11. International Users and GDPR

ChopHub is available globally. If you are in the EU, you have rights under the General Data Protection Regulation (GDPR):

Right to be informed about data processing
Right to access your personal data
Right to rectification of inaccurate data
Right to erasure ("right to be forgotten")
Right to restrict processing
Right to data portability
Right to object to processing
Right to file a complaint with your data protection authority

We have implemented Data Processing Addendum (DPA) terms for EU users. Contact us at hello@chophub.io for more information.

12. Google API Services

Important: ChopHub's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

This means data obtained through Google APIs (including YouTube) will be:

Used solely to provide and improve the ChopHub service
Not transferred to third parties except as necessary
Not used for advertising or profiling
Handled with appropriate security measures

13. Changes to Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email and in-app notification. The "Last Updated" date indicates when the policy was last revised. Continued use of the Service after changes constitutes your acceptance of the updated Privacy Policy.

14. Contact Us

For privacy-related questions, concerns, or to exercise your rights:

Email: hello@chophub.io
Website: https://chophub.io
In-app Support: Use the support feature in your ChopHub account