This policy explains what data distrorig collects, how we use it, who processes it and the choices you have. distrorig is operated by Rivvs LLC, Albany, New York, USA. We do not sell your data, and we do not use it for advertising.
Last updated: October 16, 2026.
Who is responsible for your data
Rivvs LLC operates distrorig and is responsible for the personal data described here. Contact us at legal@distrorig.com.
What we collect
- Account information. Your name, email address and profile picture from Google, which you use to sign in.
- Your content. Projects, prompts, scripts and chat messages. Files you upload, such as photos, footage and audio. The recordings, stills, clips, voiceovers, music and videos made for you.
- Product access you give us. Your product's web address and, if you give them, login details for it. Login details are encrypted and used only by the AI agent to sign in while it records.
- What the AI agent sees. The agent records the screens of your product that it visits. Any data shown on those screens is in the recording.
- Connected social accounts. When you connect YouTube or TikTok, we keep the access tokens they issue (encrypted) and your channel or account name and ID. We also keep the videos we post for you and their public numbers (views, likes, comments, shares). For YouTube, with your permission, also YouTube Analytics for those videos (watch time, average view duration, subscribers gained, audience retention).
- Billing. Your plan and payment status. Stripe handles payments. We never see or store your full card number.
- Usage and technical data. What you generate and what it costs us, changes made in your workspace, and logs we need to run and secure the service.
How we use it
- To run distrorig for you: use your product to record it, make generated shots, voiceovers and captions, export videos, and post them when you ask.
- To show you how your posted videos perform.
- To bill you, apply plan allowances and storage limits, and keep the service secure.
- To answer you when you contact us.
- To meet legal duties.
We do not sell your data. We do not use your content, or your Google or YouTube data, for advertising.
Legal bases (for people in the EU, EEA and UK)
- Contract. Most processing is needed to provide the service you signed up for.
- Legitimate interests. Security, preventing abuse and improving the service.
- Consent. Connecting a social account and YouTube Analytics access. You can withdraw consent at any time by disconnecting.
- Legal obligation. For example, keeping invoices.
YouTube and Google data
distrorig uses YouTube API Services. By connecting a YouTube channel, you agree to be bound by the YouTube Terms of Service. Google's handling of your data is described in the Google Privacy Policy.
With your permission, we use YouTube data only to:
- upload the videos you choose to your channel, with the title, description and visibility you set;
- read your channel's name and the videos we posted, with their statistics and analytics, to show you how they perform;
- change the visibility of a video we posted, when you ask.
distrorig's use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.
- We do not use Google user data to train AI models.
- We do not use Google user data for advertising.
- We do not transfer it to others, except as needed to provide the features above or as the law requires.
- People at distrorig do not read it, except with your permission, for security, or as the law requires.
You can disconnect YouTube at any time in Settings > Connections. This deletes the tokens we hold. You can also remove distrorig's access on your Google account's third party connections page. Statistics we stored for videos we posted are deleted when you delete those posts or your account.
TikTok data
When you connect TikTok, we use its data only to post the videos you choose and to show their public numbers. You can disconnect TikTok at any time in Settings > Connections, which deletes the tokens we hold.
Who processes your data
We use service providers that process data for us, only as needed to run distrorig. They are Supabase (database, sign in and storage), Vercel (web hosting) and Stripe (payments). OpenRouter sends AI requests to model providers, and Anthropic runs the chat assistant. Google handles sign in and YouTube, and TikTok handles TikTok posting. Cloudflare provides a network tunnel, and Bitwarden keeps our own secrets.
The subprocessors page lists each one, what it does and what data it gets.
We may also share data if the law requires it, or to protect the rights and safety of our users or the public. If Rivvs LLC is part of a merger or sale, your data may move to the new owner under this policy.
Where your data is processed
We are based in the United States. Our service providers may process data in the United States and other countries. Where the law requires safeguards for these transfers, we rely on our providers' data processing terms.
How long we keep it
We keep your data while your account is active. Some data is removed on a schedule:
| Data | Kept for |
|---|---|
| Finished background jobs | 90 days |
| Their individual steps | 30 days |
| Timeline versions | A project's latest 50 versions are always kept. Older ones are deleted after 90 days. |
| Social account tokens | Until you disconnect the account |
| Invoices and payment records | As long as tax and accounting law requires |
Deleting a library item in the app deletes its files. Deleting a project deletes its exports' files.
To delete your account and everything in it, email legal@distrorig.com from the account's address. We finish deletion within 30 days, except for records the law requires us to keep, such as invoices.
Security
- Data travels over encrypted connections.
- Product logins and social account tokens are encrypted at rest with AES-256-GCM.
- Media is stored in a private bucket and served only to your workspace through signed links.
- Development and production run in separate environments.
- Only the people who run the service can access production systems.
No system is perfectly secure. If a breach affects your personal data, we tell you as the law requires.
Cookies
We use only the cookies needed to sign you in and to connect social accounts. We use no advertising or analytics cookies. The cookie policy lists them.
Your rights
You can ask to access, correct, export or delete your personal data, or object to how we use it. Email legal@distrorig.com. We answer within the time the law requires.
Depending on where you live, you may have more rights. For example, you may be able to complain to your data protection authority. California residents: we do not sell or share personal information for cross context behavioral advertising. We do not treat you differently for using your rights.
Children
distrorig is not for anyone under 16. We do not knowingly collect their data. If you think a child has given us data, email legal@distrorig.com and we will delete it.
Changes to this policy
If we change this policy, we update the date at the top. If the change is significant, we tell you in the app or by email.
Contact
Rivvs LLC, Albany, New York, USA. Email legal@distrorig.com with any question about this policy or your data.