Privacy Policy

1. Introduction

Eranol ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our FFmpeg API service.

2. Information We Collect

2.1 Account Information

When you register using OAuth (Google or GitHub), we collect:

• Email address
• Name (if provided by OAuth provider)
• Profile picture (if provided by OAuth provider)
• OAuth provider user ID

2.2 Usage Information

We automatically collect information about your use of the Service:

• API requests and responses
• Usage statistics and metrics
• Credit balance and transaction history
• API keys (encrypted)
• IP addresses and access logs

2.3 Payment Information

Payment processing is handled by Stripe. We do not store your credit card information. We only store:

• Transaction IDs
• Purchase amounts and dates
• Credit balance

3. How We Use Your Information

We use the collected information to:

• Provide and maintain the Service
• Process your API requests
• Manage your account and credits
• Send transactional emails (welcome, receipts, notifications)
• Improve and optimize the Service
• Detect and prevent fraud or abuse
• Comply with legal obligations

4. Content Processing

When you use our API to process videos:

• We temporarily store uploaded files during processing
• Files are automatically deleted after processing completes
• We do not access, view, or analyze your content
• We do not use your content for any purpose other than providing the Service
• We do not share your content with third parties

5. YouTube and Google API Services

Eranol offers an optional feature that lets you connect your YouTube channel and publish videos you create on Eranol directly to that channel. This feature uses the YouTube Data API v3 through Google OAuth, and is only enabled if you explicitly choose to connect your account.

5.1 Scopes and Data We Access

When you connect your YouTube account, you grant Eranol the following permissions:

• Manage your YouTube videos (youtube.upload) — used solely to upload videos you create on Eranol to your own channel, with the title, description, tags, category, and privacy setting you choose at the time of upload.
• View your YouTube account (youtube.readonly) — used solely to read your channel name and thumbnail once after you connect, so we can confirm and display which channel is linked in your dashboard.

5.2 How We Use and Store This Data

• We store OAuth access and refresh tokens, your channel ID, channel name, and thumbnail URL so the connection persists and uploads can be performed at your request.
• Tokens are stored securely and transmitted only over encrypted (HTTPS/TLS) connections.
• We upload videos only when you explicitly initiate an upload. We never read your analytics, never edit or delete existing videos on your channel, and never access content belonging to other users.
• We do not sell this data, do not use it for advertising, and do not use it to train machine-learning or AI models.

5.3 Revoking Access

You can disconnect your YouTube account at any time from the Social Media section of your dashboard, which deletes the stored tokens. You may also revoke Eranol's access directly from your Google Account permissions page.

5.4 Limited Use Disclosure

Eranol's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

By using the YouTube feature, you also agree to the YouTube Terms of Service, and your data is handled by Google in accordance with the Google Privacy Policy.

6. Instagram and Meta API Services

Eranol offers an optional feature that lets you connect your Instagram professional (Business or Creator) account and publish content you create on Eranol directly to that account. This feature uses the Instagram API through Instagram Login, and is only enabled if you explicitly choose to connect your account.

6.1 Scopes and Data We Access

When you connect your Instagram account, you grant Eranol the following permissions:

• Basic profile access (instagram_basic) — used solely to read your Instagram user ID, username, display name, profile picture, and account type once after you connect, so we can confirm and display which account is linked in your dashboard.
• Content publishing (instagram_content_publish) — used solely to publish images and Reels you create on Eranol to your own Instagram account, with the caption you choose at the time of publishing.

6.2 How We Use and Store This Data

• We store your Instagram access token, Instagram user ID, username, display name, profile picture URL, account type, granted scopes, and token expiration so the connection persists and publishing can be performed at your request.
• Tokens are stored securely and transmitted only over encrypted (HTTPS/TLS) connections.
• We publish content only when you explicitly initiate a publish or a scheduled post you created fires. We never read your direct messages, never read or analyze content from other Instagram accounts, and never post on your behalf without your action.
• We do not sell this data, do not use it for advertising, and do not use it to train machine-learning or AI models.

6.3 Revoking Access and Data Deletion

You can disconnect your Instagram account at any time from the Social Media section of your dashboard, which immediately deletes the stored access token, Instagram user ID, username, profile picture, and related metadata from our database. You may also revoke Eranol's access directly from your Instagram or Facebook app permissions settings. See our Data Deletion Instructions page for full details on requesting deletion of your data.

6.4 Platform Policies

By using the Instagram feature, you also agree to the Instagram Terms of Use and the Meta Privacy Policy, and your data is handled by Meta accordingly.

7. Data Sharing and Disclosure

We do not sell your personal information. We may share information with:

7.1 Service Providers

• Postbase (authentication and database)
• Stripe (payment processing)
• AWS (infrastructure and email delivery)
• Google / YouTube (only when you use the optional YouTube publishing feature)
• Meta / Instagram (only when you use the optional Instagram publishing feature)

7.2 Legal Requirements

We may disclose information if required by law or to:

• Comply with legal processes
• Protect our rights and property
• Prevent fraud or abuse
• Protect user safety

8. Data Security

We implement appropriate security measures to protect your information:

• Encryption in transit (HTTPS/TLS)
• Encryption at rest for sensitive data
• API key encryption
• Regular security audits
• Access controls and authentication

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

9. Data Retention

We retain your information for as long as your account is active or as needed to provide the Service. Specifically:

• Account information: Until account deletion
• Usage logs: 90 days
• Transaction records: 7 years (for tax/legal compliance)
• Uploaded content: Deleted immediately after processing
• YouTube/Instagram connection data (tokens, account IDs, profile info): Deleted immediately when you disconnect the account

10. Your Rights

You have the right to:

• Access your personal information
• Correct inaccurate information
• Delete your account and associated data
• Export your data
• Opt-out of marketing communications (we don't send marketing emails)

To exercise these rights, visit our Support page or contact us directly. For instructions specific to deleting data connected via YouTube or Instagram, see our Data Deletion Instructions page.

11. Cookies and Tracking

We use essential cookies for:

• Authentication and session management
• Security and fraud prevention

We do not use tracking cookies or third-party analytics.

12. Children's Privacy

The Service is not intended for users under 18 years of age. We do not knowingly collect information from children. If you believe we have collected information from a child, please contact us immediately.

13. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through the Service. The "Last updated" date at the top indicates when the policy was last revised.

15. Contact Us

If you have questions about this Privacy Policy or our data practices, please visit our Support page to get in touch.