Privacy Policy
Last updated September 7, 2026
FleetClip · Last updated September 7, 2026
This Privacy Policy explains what information FleetClip (“the Service”, “we”) collects, how we use it, and your choices. By connecting an account or using the Service you agree to this policy.
1. Who we are
The Service is operated by FleetClip. Contact: support@fleetclip.com.
2. Information we collect
- TikTok account data. When you connect a TikTok account via TikTok’s OAuth (Login Kit), we receive and store, encrypted, an access token and refresh token, plus basic profile info (open ID, display name, avatar) via the
user.info.basicscope. We request thevideo.publishscope solely to post videos you have approved. - Instagram / Facebook account data. When you connect an Instagram Business/Creator account via Facebook Login, we receive and store, encrypted, a long-lived access token and the linked Instagram Business account ID and handle, obtained with the
instagram_basic,instagram_content_publish,pages_show_listandbusiness_managementpermissions — used solely to publish content you have approved. - YouTube / Google account data. When you connect a YouTube channel via Google OAuth, we receive and store, encrypted, an access token and a refresh token obtained with the
youtube.uploadandyoutube.readonlyscopes, together with the identifier of the channel uploads are made to.youtube.uploadis used solely to upload videos you have approved;youtube.readonlyis used only to identify your channel and show the status of those uploads in your dashboard. - Content you process. The footage you upload, the clips we generate from it, the transcripts and captions produced from its audio, and the metadata used for posting. Footage arrives only by upload — the Service no longer discovers or downloads videos from public platforms on your behalf.
- Operator account. The login credentials for your FleetClip operator account.
3. How we use it
- To operate the pipeline (discover, clip, review) and to publish the specific clips you approve to your connected account(s).
- To show you the status of your account connection and posts.
We do not sell your data or use it for advertising. We only share data with third parties to the extent required to provide the Service (for example, sending an approved video to the TikTok Content Posting API, the Instagram Graph API, or the YouTube Data API).
4. Platform data (TikTok, Instagram/Meta & YouTube/Google)
Our access to and use of TikTok data complies with the TikTok Developer Terms and Community Guidelines. Our access to and use of Instagram/Facebook data complies with the Meta Platform Terms and Developer Policies. On every platform we request only the permissions needed to publish on your behalf and never post without your explicit per-item approval. We do not use platform data to train models or for any purpose other than operating the Service for you.
YouTube. The Service uses YouTube API Services. By connecting a YouTube channel you also agree to the YouTube Terms of Service; Google’s Privacy Policy describes how Google handles your data. You can revoke the Service’s access to your Google account at any time from your Google account permissions page.
Limited Use. FleetClip’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We do not transfer or use Google user data to serve advertisements, and we do not use it to develop, improve, or train generalised AI or machine-learning models. No human reads your Google user data except with your explicit consent, for security purposes such as investigating abuse, to comply with applicable law, or where the data has been aggregated and anonymised.
5. Where your content goes
Making a clip means sending parts of your footage to other companies. These are every processor involved, what each receives, and why:
- Google (Gemini API) — receives your uploaded video and transcript text, to find the moments worth clipping and describe them. Google’s Files API holds an upload for up to 48 hours before it expires.
- OpenAI — receives transcript text, to write captions and titles. Text only; no video is sent.
- Post for Me — receives the finished clip and the credentials for the account it goes to, to publish the clips you approve to TikTok, Instagram and YouTube on your behalf.
- Cloudflare (R2) — stores your footage and finished clips, in the EU. Nothing is public: every read is through a short-lived signed link.
- Stripe — receives your billing details, to take payment. We never see or store your card number.
- Resend — receives your email address and the contents of our emails to you, to deliver them.
- Hetzner — provides the servers the Service runs on, so everything passes through them while it is being processed.
Transcription is the exception. Your audio is transcribed by software running on our own servers and is not sent to a speech-recognition service.
Google and OpenAI analyse your content in order to provide the Service to you. Neither is permitted to train on it: we send it through their API tiers, whose terms exclude training on submitted data. We do not sell your data and we do not use it for advertising.
Some of these companies are outside the EU. Where that is so, the transfer relies on the European Commission’s adequacy decisions or on Standard Contractual Clauses in our agreement with them.
6. Storage & security
OAuth tokens are encrypted at rest and only decrypted in memory when posting. They are never written to logs.
7. Retention & your choices
- Disconnect anytime. Disconnecting an account (Accounts → Disconnect) immediately and permanently deletes that account’s stored tokens and credentials. This applies equally to TikTok, Instagram and YouTube.
- Revoke at the platform. You can also revoke our access directly: Google account permissions for YouTube, Facebook Settings → Business Integrations for Instagram, or TikTok Settings → Security & permissions → Manage app permissions.
- Deletion. See our Data Deletion instructions — disconnect in-app to remove a token immediately, or email support@fleetclip.com for full deletion.
- How long we keep your media. Your uploaded footage and the clips made from it are kept until you delete them or ask us to. We do not currently expire them on a schedule, so if you want something gone, tell us and it goes. Uploads sent to Google for analysis expire on their side within 48 hours.
- Your account. Deleting your account deletes the footage, clips and connected-account credentials beneath it. Records we must keep for accounting or to defend a legal claim — invoices, for example — are kept for as long as the law requires.
8. Your rights
If you are in the UK or the EEA, the GDPR gives you the right to ask us for a copy of your personal data, to correct it, to have it deleted, to restrict or object to how we use it, and to receive it in a portable form. You can exercise any of them by emailing support@fleetclip.com; we will answer within one month.
Our legal bases are: performance of our contract with you for everything needed to run the Service and publish what you approve; legitimate interests for keeping the Service secure and investigating abuse; and legal obligation for records we are required to retain. Where we rely on consent we ask for it plainly and you can withdraw it at any time.
You also have the right to complain to a data protection authority. In Latvia that is the Data State Inspectorate.
9. Changes
We may update this policy; material changes will be reflected by the “Last updated” date above.
Questions? support@fleetclip.com