Legal
Privacy Policy
Introduction
Welcome to Video VAAS (videovaas.com). We are a subscription-based video-as-a-service platform, providing monthly video editing services. Your privacy is important to us. This Privacy Policy explains what personal information we collect, how we use it, and your rights in relation to it.
By using our services, you agree to the practices described in this policy.
Information We Collect
We may collect the following types of information:
Personal Identifiers: Name, email address, phone number, billing information, and company name.
Account Information: Login credentials, communication history, project data.
Payment Information: Processed securely through Stripe. We do not store payment card details.
Usage Data: Pages visited, time on site, browser type, and IP address, collected through cookies and tracking tools such as Google Analytics and Facebook Pixel.
Submitted Content: Any video, image, audio, or project assets uploaded to our platform.
Connected Channel Data: If you choose to connect your YouTube channel to the VAAS client portal, aggregate performance figures for your videos, described in section 7 below.
How We Use Your Information
We use your information to:
Deliver and manage your subscription service
Communicate updates, deadlines, and support
Prepare performance reporting and creative recommendations for your videos
Improve site performance and usability
Comply with legal and tax obligations
Analyze trends through analytics tools
Customize marketing and retargeting (based on cookies and pixels)
We use AI models from Anthropic to help draft summaries and recommendations from your project material. Your material is not used to train those models.
We do not sell your data.
Disclosure of Your Information
We do not share your personal data with third parties except:
Service Providers: Such as Stripe for payments, Vercel for hosting, Supabase for our database, Google and YouTube as the source of connected channel data, Anthropic for AI-assisted drafting, cloud storage, analytics tools, and communications platforms, strictly for the purposes of delivering our services.
Legal Compliance: If required to do so by law, court order, or to protect our legal rights.
Business Transfers: In the event of a merger, acquisition, or asset sale, your information may be transferred as part of that transaction.
All third parties are contractually obligated to keep your data secure and confidential.
Data Security
We employ industry-standard security measures including:
Encrypted data transfer (HTTPS)
Encryption at rest, using AES-256-GCM, for any third-party access credential you grant us
Secure storage and access protocols
Two-factor authentication for internal tools
Regular backups and access logs
While no system is 100% secure, we take reasonable precautions to protect your data. In the event of a data breach, we will notify affected users in compliance with applicable laws.
Data Retention
We retain your data as long as your account is active and for up to 12 months after termination to allow for reactivation and audit compliance. After that, all associated files and user data will be permanently deleted unless required for legal purposes. Data obtained through a connected YouTube channel follows the shorter retention rules in section 7.
You may request early deletion of your account and data at any time by emailing hi@videovaas.com.
Connected YouTube Channels
Some VAAS clients choose to connect their YouTube channel to the VAAS client portal, so that the monthly report we prepare for them can include how long people watched each video rather than only how many people started it. Connecting is optional, it is never part of signing up, and nothing about our service depends on it.
This section describes what happens if you connect.
What we ask for
When you connect, Google asks you to grant one permission: View YouTube Analytics reports for your YouTube content (https://www.googleapis.com/auth/yt-analytics.readonly). That is the only permission we request. It is read-only.
What we can see
For each video on the connected channel, we read six aggregate figures:
how many views it received
the estimated total minutes people spent watching it
the average length of a viewing session
the average share of the video a viewer watched
how many times its thumbnail was shown
what share of those showings were clicked
The last two come from YouTube's daily bulk reports, which run under this same permission. Those reports cover every video on the channel; we discard every row for a video we do not already track for you, before anything is saved.
For the occasional video whose view count is far out of line with the rest of the channel, we also read that one video's views broken down by where they came from, so we can tell whether it was shared from somewhere outside YouTube. That returns percentages, never anything about individual viewers.
What we cannot do
The permission you grant does not allow us to:
upload, edit, delete, retitle, unlist or otherwise change any video
post, edit or delete comments
change any setting, artwork, description or playlist on your channel
see your revenue or any earnings figure
see your subscriber list or any individual viewer's identity
see your private or unlisted videos
see anything in any other Google product, including Gmail, Drive and Google Ads
We could not do these things even if we wanted to. The permission does not carry them.
What we do with it
We use these figures for one purpose: to produce the performance reporting you engaged us for. The numbers fill the watch time and retention fields in your own report, and inform the recommendations we make to you about what to produce next.
We do not sell this data. We do not share it with advertisers. We do not use it to build a profile of you or of your viewers. We do not blend it into any product or dataset offered to anyone else, and we never show one client another client's figures.
AI processing
We use AI models to help draft the written summary in your monthly report. When we do, those models receive plain numbers and video titles only: a view count, a percentage watched, the title of a video. They never receive your access credentials, your channel identifier, your Google account details, or any information about individual viewers.
No Google user data obtained through this connection is used to develop, improve or train generalised AI or machine learning models.
How we protect the credential
Connecting gives us a long-lived credential from Google. We store it encrypted, using AES-256-GCM, in our database. The encryption is bound to your client record, so the stored value cannot be read in any other context. Nobody at VAAS can read the credential: there is no screen that shows it, no export that contains it, and no support tool that decrypts it. It is never sent to a browser, never written to a log, and never included in an error message.
How long we keep it
If you disconnect, we immediately cancel the scheduled report at Google, withdraw the credential, delete our encrypted copy, and delete every figure we derived from the connection: the watch time, retention, impression and click-through figures, and the breakdown of where each video's views came from. A written report we already sent you is kept, because it is your record of that month's work, but it is marked as standing on data that has changed.
If we go thirty days without successfully refreshing access, we treat the connection as ended: we stop using it and delete the figures derived from it, in line with the YouTube API Services Developer Policies.
Public figures such as views, likes and comments, which we collect through YouTube's public API and which never required your permission, are not covered by this and are retained as part of your ordinary project records.
How to disconnect
Two ways, and the second does not depend on us:
Press Disconnect on the YouTube card in your VAAS client portal.
Go to https://myaccount.google.com/permissions, find VAAS Studio OS, and remove access.
Either one ends our access. The second takes effect even if our systems are unavailable.
Limited Use
VAAS Studio OS's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.
Our use of YouTube API Services is also subject to the YouTube Terms of Service (https://www.youtube.com/t/terms) and the Google Privacy Policy (https://policies.google.com/privacy).
Who processes this data on our behalf
Google / YouTube, as the source of the data
Vercel, which hosts our application
Supabase, which hosts our database
Anthropic, whose model drafts the written summary in your report, and which receives numbers and video titles only
Questions, or reporting a problem
Write to hi@videovaas.com. We aim to respond within two business days.
Your Rights (CCPA & GDPR)
If you are located in the European Union or California, you may have the following rights:
Right to access your data
Right to correct inaccurate data
Right to delete your data
Right to object to data processing
Right to data portability
Right to withdraw consent at any time
To exercise these rights, contact us at hi@videovaas.com. We will respond within 30 days.
Cookies and Tracking
We use cookies and similar technologies for analytics, functionality, and advertising. By using our website, you consent to the use of cookies. You can control cookie settings through your browser or opt-out of targeted ads via optout.aboutads.info.
Children's Privacy
Video VAAS does not knowingly collect or solicit personal information from anyone under the age of 13. If you believe a child has provided us with personal data, please contact us immediately.
Changes to This Privacy Policy
We may update this Privacy Policy at any time. Changes will be posted on this page with a new effective date. If the changes materially affect your rights or how we use your data, we will notify you via email or a site notice.
Last updated: September 19th, 2026
Contact Information
For questions, concerns, or data requests, contact us at hi@videovaas.com.