Privacy Policy

1. Introduction

Vardora ("we", "our", or "us") operates vardora.io, an AI-powered creative workspace for content creators, agencies, and creative professionals. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform, including our integrations with third-party platforms such as TikTok and Instagram.

2. Information We Collect

We collect the following types of information:

• Account Information: Name, email address, and password when you register.
• Profile Information: Optional profile photo and display name.
• Content: Videos, images, scripts, and other creative assets you generate or upload.
• Social Connection Data: When you connect TikTok or Instagram, we store an encrypted access token to enable direct publishing on your behalf. We do not store your social media passwords.
• Usage Data: Pages visited, features used, and interaction logs for product improvement.
• Payment Data: Billing information is processed securely by our payment provider (Lemon Squeezy). We do not store raw card details.
• Analytics Data: Post performance metrics synced from connected TikTok and Instagram accounts (views, likes, comments, shares) to display in your Vardora dashboard.

3. How We Use Your Information

• To provide, operate, and improve the Vardora platform.
• To publish content to TikTok or Instagram on your behalf when you explicitly request it.
• To display your social media performance analytics inside your Vardora dashboard.
• To generate AI-powered content (captions, scripts, voiceovers) using your inputs.
• To send transactional emails (receipts, weekly insights, security alerts).
• To comply with legal obligations.

4. TikTok Integration

When you connect your TikTok account to Vardora via TikTok Login Kit and Content Posting API:

• We request permission to publish videos to your TikTok account on your behalf.
• We request permission to read basic profile information (username, display name).
• Your TikTok access token is encrypted with AES-256 and stored securely in our database.
• We never post to TikTok without your explicit action inside Vardora.
• You can revoke access at any time from Vardora Settings → Connections, or directly from TikTok's app permissions settings.
• We do not sell or share your TikTok data with third parties.

5. Instagram Integration

When you connect your Instagram account via Meta's Graph API:

• We request permission to publish Reels and content to your Instagram account.
• We request permission to read Instagram Insights (reach, impressions, engagement) for your analytics dashboard.
• Your Instagram access token is encrypted and stored securely.
• You can disconnect at any time from Vardora Settings → Connections.

6. Data Sharing

We do not sell your personal data. We may share data with:

• AI providers (Anthropic, OpenAI, ElevenLabs, Replicate) — to process your generation requests. Your prompts and content may be sent to these services.
• Storage providers (Cloudflare R2) — to store your generated media files.
• Payment processors (Lemon Squeezy) — for billing.
• Legal authorities — if required by law.

7. Data Retention

We retain your account data for as long as your account is active. Generated media files are retained for 30 days on the Free plan and permanently on paid plans. Social connection tokens are deleted immediately upon disconnection. You may request full account deletion by emailing privacy@vardora.io.

8. Security

We use industry-standard security measures including AES-256 encryption for OAuth tokens, bcrypt for passwords, HTTPS for all data in transit, and restricted database access. However, no system is 100% secure and we cannot guarantee absolute security.

9. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data.
• Object to or restrict certain processing.
• Data portability.

To exercise these rights, contact us at privacy@vardora.io.

10. Cookies

We use essential cookies for authentication and session management. We do not use tracking cookies for advertising purposes.

11. Children's Privacy

Vardora is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us immediately.

12. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via email or a prominent notice on our platform. Your continued use of Vardora after changes constitutes acceptance.

13. Contact Us

For privacy-related questions or requests: