1. Scope and controller
This policy applies to VodSpot websites, accounts, workspaces, hosted videos, client delivery pages, and related support communications. VodSpot controls account and business data. A workspace customer may separately control personal data contained in uploaded media or collected through its client links.
If a customer uses VodSpot to process personal data for its clients, that customer is responsible for providing any notices and obtaining any permissions required by law.
2. Information we collect
Account and workspace data includes names, email addresses, authentication and security settings, workspace roles, branding, custom-domain records, notification choices, and support messages.
Content data includes projects, client names supplied by users, uploaded video files, titles, descriptions, covers, posters, delivery settings, and the technical metadata needed to process and stream those files.
Billing data includes plan, billing interval, subscription and checkout identifiers, status, and transaction records received from Creem. VodSpot does not store full payment-card numbers.
Technical and activity data includes IP address, browser and device information, session activity, security logs, upload and processing events, link views, playback progress, watch time, and downloads. Viewer identifiers are minimized or pseudonymized where the product permits. Workspace analytics may show a viewer’s approximate country, device type (computer, phone, tablet or TV) and the website that shows an embedded player; the country comes from our network provider, and IP addresses are not stored with these analytics. When a workspace protects a delivery page with email access, we store the viewer’s email address, when it was confirmed and which videos on that page were watched or downloaded, on behalf of that workspace; this data is deleted with the delivery page.
Public marketing pages use Ahrefs Web Analytics for aggregate visit measurement. Ahrefs states that its standard tracker does not use cookies or persistent identifiers by default.
3. How and why we use data
We use data to create and secure accounts; store, process, stream, and deliver videos; operate workspaces and permissions; provide analytics requested by the customer; process subscriptions; send transactional notices; respond to support; prevent abuse; meet legal obligations; and improve reliability.
Depending on the context, the legal basis is performance of a contract, legitimate interests in operating and securing the service, compliance with law, or consent where consent is required.
4. Service providers and disclosure
We disclose only the data needed to providers that support hosting, object storage, video processing, content delivery, email, customer support, security, analytics, and observability. Ahrefs provides aggregate analytics for public marketing pages. Creem acts as merchant of record for payment and subscription processing, and Brevo may process transactional email.
Data may also be disclosed when required by law, to protect users or the service, in connection with a corporate transaction subject to appropriate safeguards, or at a customer’s direction. We do not sell personal data.
5. International transfers
Providers and users may be located in different countries. Where required, we rely on contractual safeguards, adequacy decisions, or another lawful transfer mechanism. A customer remains responsible for assessing transfers created by its own use of VodSpot.
6. Retention and deletion
Active workspace content is retained while needed to provide the service. When a free trial ends, the workspace becomes read-only and public links are disabled. If no paid plan is activated during the three-day grace period, trial projects, videos, and client deliveries are permanently deleted. The same applies three days after a paid subscription ends or its payment fails without renewal.
User-requested deletion removes eligible active data after safety checks. Limited billing, fraud-prevention, security, support, and legal records may be retained for the period required by law or legitimate operational needs. Residual copies may remain temporarily in protected backups until normal rotation.
7. Security
We use access controls, password hashing, optional two-factor authentication, session management, scoped storage access, and transport encryption. No service can guarantee absolute security. Report a suspected vulnerability promptly and do not access data that is not yours.
8. Your rights and choices
Depending on your location, you may request access, correction, deletion, restriction, portability, or objection, and may withdraw consent without affecting earlier processing. You may update account details, notification preferences, two-factor authentication, and sessions in Settings.
We may verify identity and authority before completing a request. If VodSpot processes data only for a workspace customer, we may direct the request to that customer. You may also complain to your local data-protection authority.
9. Children
VodSpot is a professional service and is not directed to children under 16. Do not create an account or upload a child’s personal data unless you have the legal authority and required consent to do so.
10. Changes and contact
We may update this policy to reflect product, provider, or legal changes. Material changes will be posted with a new effective date and, where appropriate, communicated to account holders.
Privacy questions and rights requests may be sent to [email protected].