Privacy policy

Who runs the service

APIhub and the Vidoo app are run by Vibe Coding Ltd.

• Company number: 517319828
• Address: 61 Jabotinsky St., Petah Tikva, Israel

What we collect

• Account details: your email address, your name and your password. The password is stored only as a scrambled hash. If you sign in with Google in the app, we keep the account ID Google gives us, never your Google password.
• Country and time zone: when you sign up in the app, we read the country and time zone your phone reports to choose your market (prices and currency). We keep the market, not the country. A time zone you pick in Settings is saved to your account.
• What you give us to work on: the videos, photos, audio and voice recordings you upload, links you send, texts and instructions you write, and the videos, captions and titles we make for you.
• Social accounts you connect for publishing: the connection itself is held by our publishing provider, PostProxy. We keep which networks are connected and their status. We never see your social network passwords.
• Payments: what you bought, when, and for how much. On the website you pay through Sumit, in the app through Google Play. Your card number goes straight to them and never reaches us. We keep the payment provider's confirmation of each payment, which can include your name, email, phone and the last digits of the card.
• Credits: every charge and refund of credits on your account.
• Notifications: if you allow notifications in the app, we keep a push token from Firebase Cloud Messaging so we can tell you when a video is ready, and a record of the notifications we sent.
• App usage data: the app uses Google Firebase Analytics to count things like screens opened and videos sent. It sends a scrambled version of your account ID, never your name or email. Google may also use your phone's advertising ID. You can turn this off in the app: Settings, "Share anonymous usage data".
• Diagnostics: when something fails in the app, for example an upload, the app sends the error, the app version, the phone's system and its version, and the network type. Our server adds the country of the connection. We keep this with your account to fix problems.
• Support and feedback: the messages you send us from the app or the website, any screenshots you attach, and the videos you report.
• Sign-in logs: sign-in attempts with the IP address and browser, to stop fraud.
• Telegram: if you use our Telegram bot, your Telegram user ID.
• Cookies on the website: only what the site needs to work: your sign-in, your language and market, and, if you came from a partner's link, which partner. The website has no advertising or analytics trackers.

Why we use it

• To make the videos you ask for and publish what you approve.
• To charge credits, sell credit packages and keep accounting records.
• To keep your account safe and stop abuse.
• To answer your messages and fix problems.
• To send the emails the service needs: sign-in codes, receipts and changes to your account. An email with news or offers always has a link to stop them.
• We do not sell your personal information.

Who else handles it

We send information only to the services we need to do the work, and each one gets only what its task needs. Some of them work outside Israel.

Each name below links to that service's own privacy policy.

• Google Gemini and Veo: understanding your videos and texts, writing captions and edit plans, and making AI video clips.
• ElevenLabs: voice-overs, transcription, and cloning a voice from a recording you give with consent.
• HeyGen: translating videos, lip-sync and avatars.
• AssemblyAI: transcribing the speech in your videos.
• fal.ai: face swap, animating a character from your photo and tracking objects in a video, when you use those features.
• Firecrawl, the YouTube Data API and open media libraries (Pexels, Wikimedia Commons, Openverse, the Smithsonian and others): search words and links, when a feature looks something up on the web. No personal details are sent.
• Cloudflare R2: storing your uploads and finished videos.
• Hetzner and Amazon Web Services (Frankfurt): the servers that run APIhub and render your videos.
• PostProxy: publishing to the social accounts you connect.
• 2Chat: WhatsApp and SMS messages and phone numbers, when you use our messaging features.
• Sumit on the website and Google Play in the app: payments.
• Google Firebase: app notifications and app usage data.
• Resend: sending our emails.
• Trello and Google Gemini: our team's task board, and sorting the messages and reports you send us.
• Google Drive: an encrypted daily backup of our database.
• Telegram: if you use our bot.

Ads in the app

The app may offer short video ads from Google AdMob that you can choose to watch for free credits. Watching is up to you, and nothing in the app depends on it.

When you watch an ad, Google may use your phone's advertising ID and show ads based on it, under Google's own policies and the choices you make on its consent screen. We learn only that an ad was watched: Google confirms it to our server directly, and then we add the credits.

How long we keep it

• Uploaded files and finished videos: deleted automatically 24 hours after they are made. Download what you want to keep.
• Copies kept for scheduled posts: up to 60 days.
• Account details: while your account is open.
• Sign-in logs: 90 days.
• Payment and accounting records: 7 years, as Israeli tax law requires.
• Support messages and reports: kept so we can handle them. When an account is deleted, its name and email are removed from them.
• Backups: encrypted and kept up to 30 days, so deleted information can stay in a backup until that backup is replaced.

Deleting your account

You can delete your account at any time, and it is deleted at once: in the app (Settings, then Delete account) or on the website at apihub.tools/delete-account. That page lists what is deleted and what the law makes us keep.

In short: payment and accounting records stay for 7 years, and a one-way hash of your email stays so the sign-up gift is given only once.

Your choices

• See and change your details in Settings.
• Turn off app usage data in the app's Settings.
• Turn off notifications in your phone's settings.
• Ask us for a copy of your information, or to correct or delete it, using the contact details below.

Children

APIhub and Vidoo are not meant for children. You must be at least 16 to use them, or older if the law where you live requires it. If we learn that someone under 16 has an account, we delete it.

Security

Connections to the website and the app are encrypted (HTTPS). Passwords are stored only as hashes, and your key with our publishing provider is stored encrypted. No system is perfectly safe, so if you think someone used your account, tell us right away.

Changes to this policy

When we change this policy, the date at the top changes too. If a change is important, we will say so on the website or in the app.

Contact us

Questions about this page, a request about your information, or anything else:

• Our Telegram bot
• In the Vidoo app: Settings, then Contact support.
• On the website, when you are signed in: the Feedback button at the top of the page.