Privacy Policy

Last updated: July 16, 2026. This policy describes how Vidli (Rruga Ali Kelmendi, Prishtinë 10000, Kosovo) ("Vidli," "we," "us," or "our") collects, uses, stores, and shares information when you use our AI video and image studio, Ads Manager competitor analysis, and related account features.

Information we collect

Account information. When you register or sign in, we collect information such as your email address, name, profile details, password (stored in hashed form), optional profile image, account status, and last login time. If you use Google or Apple sign-in, we receive identity information from those providers according to your provider settings.

Studio content. We store the projects, folders, chat messages, prompts, scripts, generation settings, uploaded files, and generated images or videos you create in Vidli. This includes metadata needed to run features such as image generation, video generation, long-form video workflows, B-roll enhancement, caption export, clip merging, smart clipping, avatars or actors, and voice-related settings.

Ads Manager data. If you use competitor analysis, we process the Meta Ads Library URLs, company or page identifiers, folder names, and related analysis inputs you submit, along with generated reports and job status metadata.

Billing and usage. We maintain credit balances, plan information, generation and analysis usage records, Stripe customer references, transaction metadata, and optional auto-recharge settings linked to your account.

Technical data. We collect operational logs, error reports, request metadata, and security-related events needed to operate, secure, and troubleshoot the service.

How we collect information

We collect information directly from you, such as when you register, sign in, or submit prompts and uploads; automatically through your use of the service, such as cookies, logs, and request metadata; and from third parties you choose to connect, such as Google, Apple, and Stripe, according to the permissions you grant them.

How we use information

We use collected information to authenticate you, provide studio and Ads Manager features, process generations and media workflows, manage credits and billing, deliver transactional emails such as welcome messages, magic-link sign-in, password reset, and competitor-analysis notifications, prevent abuse, maintain security, improve reliability, and comply with legal obligations.

Authentication and cookies

Vidli uses a backend-for-frontend authentication flow. After you sign in, the web app stores a secure authentication cookie named vidli_auth (or the name configured for your deployment). This cookie is httpOnly, uses SameSite=Lax, is sent only over HTTPS in production, and is set with a default lifetime of 30 days so you remain signed in across browser sessions.

The cookie value corresponds to a Laravel Sanctum API token issued by our backend. Backend tokens are also configured with a default 30-day lifetime. If authentication fails or your session is revoked, the cookie is cleared and you are signed out.

Supported sign-in methods include email and password, Google OAuth, Apple Sign In, and email magic links when enabled. Password reset links and magic-link challenges are time-limited for security.

Browser storage on your device

Vidli also stores some non-sensitive interface preferences locally in your browser using localStorage, such as theme selection, folder asset grid size, and in-progress B-roll workflow drafts. This data stays on your device and is not used for authentication.

Analytics and advertising

Vidli does not currently use third-party analytics or advertising cookies, pixels, or trackers. If we adopt such tools in the future, we will update this section and the effective date above.

AI processing and service providers

To deliver generations and media processing, prompts, uploaded media, transcripts, and related settings may be sent to third-party AI and infrastructure providers configured for Vidli, including providers such as Google Cloud / Gemini and Veo, OpenAI, Kling, Seedance, and our internal media-processing services used for tasks like captions, merging, silencing, and competitor ad analysis.

We share only the information reasonably necessary to perform the feature you request or to operate the platform. Provider availability, models, and routing may change over time.

Storage, hosting, and caching

Account, project, billing, and operational metadata are stored in PostgreSQL. Generated and uploaded media files are stored in object storage compatible with AWS S3. Short-lived API response caching may use Redis in production.

Vidli is operated using cloud infrastructure and hosting providers. Data may be processed in regions where those providers operate.

Payments

Payments and billing are handled through Stripe. We store billing-related identifiers and transaction metadata needed to manage plans, credits, and account billing. Stripe processes payment details according to its own privacy policy. Vidli does not store full payment card numbers on our application servers.

Information sharing and disclosure

We share personal information only with: service providers who process it on our behalf to operate Vidli, such as our authentication, payment, hosting, storage, email delivery, and AI or media-processing providers described above; authorities or other third parties when required by law, legal process, or to protect the rights, safety, or property of Vidli, our users, or others; and a successor entity in connection with a merger, acquisition, or sale of assets. We do not sell personal information.

International data transfers

Vidli is based in Kosovo and Vidli is available to users worldwide. Because our service providers operate infrastructure in multiple regions, your information may be stored or processed in countries other than your own, including outside Kosovo. Where required by applicable law, we take steps intended to ensure such transfers are subject to appropriate safeguards.

Project sharing

You may enable share links for individual projects. When sharing is enabled, anyone with the link and valid share token may be able to view shared project content, including selected messages and assets depending on your share settings. Share links may optionally expire. You are responsible for who you share links with and for disabling sharing when it is no longer needed.

Retention

We retain information for as long as needed to provide the service, maintain your account, enforce our terms, resolve disputes, meet legal obligations, and protect security. Retention periods vary by data type, including project content, billing records, authentication tokens, share settings, and operational logs. When you delete your account, we delete or anonymize personal information within a reasonable period, except where retention is required for legal, security, tax, or dispute-resolution purposes.

Account and data deletion

You may request deletion of your account and associated personal information by contacting support. For privacy requests, contact us through the support options available in the Vidli product. We will delete or anonymize your data as described in the Retention section above.

Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, or export personal information, or to object to or restrict certain processing. You may stop using Vidli at any time. For privacy requests, contact us through the support options available in the Vidli product. Some requests may be limited by legal, security, or operational requirements.

Security

We use reasonable technical and organizational measures to protect account data and project content, including secure authentication cookies, access controls, and protected storage for media assets. No online service is perfectly secure, and you are responsible for safeguarding your login credentials and devices.

Children

Vidli is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, please contact us so we can take appropriate action.

Marketing communications

We may send you service-related messages, such as account, billing, and security notifications, that are necessary to operate the service. Where we send marketing communications, you may opt out at any time using the unsubscribe link in the message or by contacting us. You cannot opt out of essential transactional or security-related messages.

Changes

We may update this policy from time to time. If we make material changes, we will update the effective date above and may provide additional notice through the product or other appropriate channels.

Please also review our Terms of Service.