Privacy Policy

What we collect

• Account details: your name, email address, password (stored only as a hash), optional two-step sign-in, and sign-in records (device and IP address) to keep your account secure.
• Your content: videos, audio, images and text you upload or create; transcripts, edits, projects, styles, thumbnails and exports made from them; links you import as references and the public videos downloaded for them; and voice recordings if you use the voice tools.
• Connected accounts: if you connect YouTube, Instagram or TikTok, the access tokens the platform gives us (encrypted at rest), the account’s id and name, and the data described below.
• Billing: your plan and subscription status. Card details are handled by Stripe and never reach our servers.
• Usage: records of the jobs you run, AI usage and costs, and an activity log for your studio.
• Waitlist: while sign-up is invite-only, if you request an invite we keep your email address, the name and channel you give us (both optional), the page you asked from and when. We use them only to invite you and to decide who to invite first, and we don’t send marketing to that address.

How we use connected accounts

• YouTube (YouTube API Services): we read your channel’s name, your videos and their metadata, and YouTube Analytics reports for your own videos, to learn your style and show what works. If you turn on posting, we upload the videos your studio approved, set their details, schedule, thumbnail and visibility, and change or remove those scheduled uploads when you ask.
• Instagram: we read your professional account’s username and media to learn your style, and publish the Reels your studio approved.
• TikTok: we read your profile and public videos, and post the videos your studio approved, either directly or to your TikTok inbox.

We use this data only to provide these features to you. We don’t sell it, use it for advertising, or use it to train AI models. Dollop’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google’s handling of your data is covered by the Google Privacy Policy.

Who processes data for us

We share data only with providers that run parts of the service for us, under their own security and privacy terms:

• Railway (hosting) and Cloudflare (network, and R2 storage for your media);
• Stripe (payments);
• Resend (email), which receives your email address and the emails we send you;
• AI providers — Anthropic, OpenAI, Google (Gemini), ElevenLabs, Deepgram and Replicate — which receive only the clips, audio, frames or text needed for the job you run;
• GIPHY or Tenor, which receive the search terms you type in the GIF search;
• Google, Meta and TikTok, for the accounts you connect.

We may also disclose data when the law requires it.

How long we keep it

Your uploads, projects and exports stay until you delete them. Previews, render caches and unfinished uploads are cleaned up automatically on your studio’s retention schedule. Tokens for a connected account are deleted as soon as you disconnect it. A waitlist entry stays until you ask us to remove it. When an account is deleted, we delete its content within 30 days, except records we must keep by law (such as invoices).

Your choices and deleting your data

• Delete projects, uploads, references and voices in the app at any time.
• Disconnect YouTube, Instagram or TikTok in Settings › Connections. This deletes the tokens we hold and, for Google and TikTok, revokes them. You can also remove Dollop’s access in your Google account, in Meta Business settings for Instagram, or in TikTok’s settings.
• To delete your account and everything in it, or to get a copy of your data, email [email protected] from the address on your account. We’ll confirm and complete the request within 30 days.
• To be taken off the waitlist, email [email protected] from the address you gave us, and we’ll delete your entry.

Security

Connections use HTTPS, platform tokens are encrypted at rest, and access to your studio is limited to its members. No system is perfectly secure; tell us at [email protected] if you find a problem.

Children

Dollop isn’t meant for children under 13 (or the minimum age in your country), and we don’t knowingly collect their data.

Changes and contact

We’ll post changes here and tell you about material ones in the app or by email. Questions or requests: [email protected].