vidmerce
ENFR
Join the waitlist

Privacy Policy

Vanillapha Inc. ("we", "us") runs Vidmerce. This policy explains what personal information we collect, why, who we share it with, how long we keep it and what choices you have. It is written for Canada's PIPEDA and Quebec's Law 25, and includes a notice for California residents under the CCPA as amended by the CPRA.

Last updated: October 7, 2026

1. Who is responsible

Vanillapha Inc., a federal corporation based in Ontario, Canada, is responsible for the personal information described here. This policy covers the Vidmerce iPhone app, vidmerce.app (including creator storefronts), the brand portal and the Vidmerce app for Shopify.

Our privacy officer (the person in charge of the protection of personal information under Quebec's Law 25) is Luke Liu, founder, reachable at lukeliu@vanillapha.com.

2. The short version

  • We collect what we need to make, post and track your videos, and little else. No ads, no advertising trackers, and we do not sell personal information.
  • We ask before the app sends anything to outside AI services, and you can turn them off at any time.
  • You approve every post. We only post to accounts you connect, and we store their access tokens encrypted.
  • Rendered videos are deleted from our storage 7 days after they are uploaded. The clips you pick from your library stay on your iPhone.
  • A brand sees your email address only if you agree, and you can stop sharing it at any time.
  • You can delete your account in the app at any time.

3. What we collect from creators

  • Account: the email address from Sign in with Apple (which may be an Apple private relay address), a stable Apple user identifier, your name if you choose to share it, and, when the app provides it, a Sign in with Apple token (stored encrypted) that we use only to end the link with your Apple ID when you delete your account. For each iPhone you are signed in on, we keep its model name and when it was last used, so you can see your signed-in devices and sign one out.
  • Profile: your handle, display name, bio, country, language, time zone, interests and settings (such as your daily post limit and end card choice). When you change your handle, your previous handle points to your new one for 30 days.
  • Affiliate IDs: the Amazon Associates tags and other program IDs (such as Impact or Awin) that you add, used to build your links.
  • Connected accounts: when you connect TikTok, TikTok Shop, Instagram, Facebook, Threads, YouTube, Pinterest, X or Bluesky, we receive an account identifier and name and access tokens. For Bluesky we keep a session created from your app password, never the password itself. Tokens are stored encrypted. For the posts we publish, we also read the platform’s counts of views, likes, comments and shares.
  • Product photos: photos of a product that you take or pick and upload.
  • Videos: the products you pick or paste; the scripts, hooks, captions and hashtags; the AI voice-over audio and AI-generated clips; the rendered video and its thumbnail; and your posting choices and schedule.
  • Activity: your product searches and saved lists, your sample and discount-code requests to brands (with any note you write), the email address you choose to share with a brand, and your reports that an AI video does not look like your product (with any comment you write).
  • Earnings: the dates, programs, orders, order values and commissions you enter or import (for example from an Amazon report).
  • Purchases and credits: the product, amount, status and transaction identifiers from Apple or Stripe, and your credit history. We never receive your full card number.
  • Referrals: your referral code, who referred you and the rewards granted.
  • Notifications: your iPhone’s push token (from Apple Push Notification service), its language and your notification settings.
  • App usage events: steps you take in the app, such as seeing the subscription screen, opening Studio, starting a free trial, whether a link you pasted was recognised, and whether a render or a post worked and how long a render took, with your iPhone model, iOS version and app version. Each event is a fixed name with short codes and numbers, never what you typed. They are linked to your account and used only to understand and improve Vidmerce, never for advertising.
  • AI services choice: whether you agreed to the use of outside AI services, and when (see “AI and automated decisions”).
  • Sign-up questions: when you confirmed in the app that you are 18 or older and, if you answer, where you heard about Vidmerce (for example TikTok, a friend or a creator’s referral code) with any note you add. A referral or partner code you redeem fills in this answer if you skipped it. We use the answer only to count how creators find Vidmerce.
  • Free-credit and trial-credit check: a temporary DeviceCheck token from your iPhone, used once and not stored, and the result of the check (see “On your iPhone”).
  • Messages: what you send us by email, such as support or privacy requests.

4. What we collect from brands

  • Applications: brand name, website, contact name and email, categories, markets, whether you use Shopify and your message, with a one-way hash of the IP address.
  • Brand portal users: name, email, a password hash (never the password itself) and sign-in times.
  • Products and media: product details, the files you upload or import, and the licence record for each file (who accepted it, when, a one-way hash of the IP address and the text accepted).
  • Shopify: your store’s domain, name, currency and settings, encrypted access tokens, the products you import, and the usage count of each creator discount code. We do not ask for access to orders or customers, and we store no information about your store’s buyers.
  • Samples and codes: your decisions on creator requests and the codes you issue.

5. Waitlist, partners and storefront visitors

  • Waitlist: your email address, country, language, where you came from or the referral code you used, and when and how you consented, with a one-way hash of the IP address.
  • Partner program: if you join, your name, email address, partner code and the payout details you give us so we can pay you (by PayPal or Wise).
  • Storefront visitors: when someone clicks a product on a creator’s storefront, we record the product, the video (if any), the market, the time and a hashed version of their IP address. We do not store the raw IP address of the click. The retailer or network the visitor goes to collects information under its own policy.

6. On your iPhone

Some work happens on your iPhone. For Quick videos, the script is written and voiced on the device (with Apple’s on-device models and system voices where available); we receive only the finished script, caption and video. The photos and clips you pick with “Use my own footage” are never uploaded: the app builds the video on your iPhone and uploads only the finished video and its thumbnail.

The app asks for access to your photo library (to pick photos or clips), your camera (to take product photos) and permission to save videos to Photos. You can change these in iOS Settings at any time.

Free credits are given once per device. After you sign up on an iPhone, the app gets a temporary token from Apple's DeviceCheck service, and our server uses it to ask Apple whether this iPhone has already received Vidmerce's free credits, and to mark that it has. Apple keeps that flag for us. The same check, with a second flag, gives the trial credits of a free trial once per iPhone: the app sends a DeviceCheck token with the purchase. The flags contain no name, email address or account details, and they stay after you delete the app or your account. Apple does not give us a permanent identifier for your iPhone. Where DeviceCheck is not available, we limit free credits per network per day instead (see “Technical data and cookies”), and give trial credits once per App Store subscription.

7. Technical data and cookies

Where we keep an IP address with a record (clicks, waitlist sign-ups, brand applications and licence acceptances), we keep only a one-way hash made with a secret key. To stop abuse we also count requests per IP address (rate limiting); these counters hold only a one-way hash of the address made with a secret key, never the address itself, and are deleted when their time window ends (at most one day). For each free-credit decision we record the outcome and, when we limit free credits per network, the network your IP address belongs to (for example the first three parts of an IPv4 address), never the full address. Our hosting and storage providers keep standard technical logs, which can include IP addresses, for security and troubleshooting.

vidmerce.app uses no advertising or analytics cookies and no cross-site tracking. The only cookies are strictly necessary ones: the brand portal sign-in, a short-lived security cookie while a brand connects a Shopify store, and short-lived on-screen messages. The app does not use Apple’s advertising identifier and does not track you across other companies’ apps or websites.

8. Why we use it

  • To provide the Service: create and secure your account, generate the scripts, voices and AI media you ask for, post what you approve, run your storefront, show your clicks and earnings, and connect you with the brands you choose.
  • To process purchases and credits, and to prevent abuse of free and referral credits (including the DeviceCheck check).
  • To suggest products: “Recommended for you” uses the interests you chose and the kinds of products you made videos about.
  • To send push notifications, which you can turn off in the app, and, only if you opted in, emails about our launch.
  • To keep the Service secure, fix problems, understand use in aggregate (for example which products creators search for) and meet our legal obligations.

We rely on your consent (for example to send your content to outside AI services, connect a social account, share your email with a brand or receive launch emails) or on what is necessary to provide the Service you asked for. You can withdraw your consent at any time, though some features will then stop working. Under Canada’s anti-spam law (CASL), we send marketing email only with your consent; every message identifies us and lets you unsubscribe.

9. AI and automated decisions

We use AI providers to draft scripts and captions and, when you ask, to make voices, scenes, presenters and one-click videos. We do not use your content to train AI models.

We ask first. Before your first video that uses one of these services (Standard, AI scenes, one-click or an AI presenter), the app lists what goes to which service: product details and the video’s language to Anthropic; your product photos and scene descriptions to fal.ai (and through it the model maker) and BytePlus; the script text to ElevenLabs and HeyGen. No such video can be made until you agree: we record when you agreed, and our servers refuse these videos without it. We also record which version of this explanation you agreed to. Quick videos without an AI presenter are made on your iPhone and do not use these services. You can withdraw your agreement at any time in Me › Settings › AI services; we then clear the record and stop making videos that use these services, and videos already made are not affected.

Some decisions are made automatically: our compliance check can block a script or caption that contains certain risky phrases (such as income or health claims), and our abuse checks decide whether an account or a device can receive free credits. If you disagree with an automated decision, write to our privacy officer: a person will review it and tell you what information it was based on and the main reasons for it.

10. Who we share it with

We use service providers to run Vidmerce. They may use your information only to provide their service to us.

  • Railway: hosts our servers and database.
  • Cloudflare: stores and delivers uploaded and rendered media (Cloudflare R2). Rendered videos, thumbnails and brand media are served from long, random web addresses, and anyone who has the exact address can open the file. Your product photos are private: we only hand out links to them that expire after a few hours, to you in the app and to the AI provider making your video.
  • Anthropic: writes hooks, scripts and captions from the product details you choose. We do not send it your name, email address or account details.
  • ElevenLabs: turns script text into the premium voice.
  • fal.ai: makes AI scenes and one-click videos from a text prompt and product images, which can include your own product photos when you choose them. fal.ai passes each request to the maker of the model used: Google (Veo), Kuaishou (Kling) or Alibaba (Wan).
  • BytePlus, a ByteDance company: runs the Seedance model for one-click videos, from a text prompt and product images, which can include your own product photos.
  • HeyGen: makes AI presenter clips from script text. No photos are sent to it.
  • Apple: Sign in with Apple, App Store purchases and subscription notifications, push notifications (Apple Push Notification service, APNs: your push token and the text of each notification) and DeviceCheck.
  • Stripe: processes website payments and receives your email address for the receipt.
  • Shopify: for brands that connect a store.

Platforms you connect receive the video, caption and link you approved, and handle them under their own privacy policies:

  • TikTok: the video goes to your TikTok inbox as a draft. If you connect TikTok Shop, we use your authorization to search its affiliate products for you.
  • Meta: Instagram, Facebook and Threads.
  • Google: YouTube (through YouTube API Services; see “YouTube and Google”).
  • Pinterest: video pins on the board you choose.
  • X: posts marked as a paid partnership.
  • Bluesky: posts made with the session from your app password.
  • Snap Inc.: Snapchat receives a video only when you hand it over yourself, through Snap’s Creative Kit in the app.

The upload helpers (Amazon Influencer, Walmart Creator, LTK and ShopMy) receive a video only when you upload it yourself.

Affiliate programs and product sources, such as Amazon, Impact, Awin, Best Buy, Walmart and TikTok Shop, send us product information. We do not send them your personal information. Your affiliate tag or ID is part of the links people click, and those companies collect information about the click under their own policies.

We do not sell your personal information and do not share it for cross-context behavioural advertising. We may disclose information if the law requires it, to protect people or our rights, or as part of a sale or reorganisation of our business (in which case this policy continues to apply).

11. What brands and creators see

If you post videos about a brand partner’s products or send it a request, that brand can see your handle, your display name, how many videos you posted and storefront clicks you got for its products, the sample and code requests you send it, and the codes issued to you.

It sees your email address only if you agree to share it, for a sample or a code request. You can withdraw that consent at any time in the app, and the brand stops seeing the address right away. Messages the brand has already exchanged with you remain under its control and its own privacy policy.

Discount codes that are created automatically in a brand’s Shopify store are based on your handle (for example MIACHEN15). The store sees the code, not your other details.

Your storefront is public: it shows the display name, handle and bio you chose, the products you approved videos for or added to it, and your video thumbnails.

12. Transfers outside Canada

Vanillapha is in Canada, but most of our providers process data in the United States, BytePlus processes Seedance requests in Southeast Asia, the model makers that fal.ai works with (Google, Kuaishou and Alibaba) may process AI scene and one-click requests in other countries, and Cloudflare stores and delivers media through a global network. Your information may therefore be stored and processed outside Canada and outside Quebec, where courts and authorities may be able to access it under local law. Before we communicate personal information outside Quebec, we assess the privacy risks as Law 25 requires, and we rely on contracts that require our providers to protect it.

13. How long we keep it

  • Rendered videos, thumbnails and AI voice-over files: deleted from our storage 7 days (videos and thumbnails) or 2 days (voice-overs) after they are made, whether or not they were posted, and right away if you delete your account. A video that still has a post scheduled is kept until that post goes out, then deleted within 7 days. Videos you posted stay on the platforms until you remove them there.
  • AI-generated clips: stored by the provider that made them (fal.ai, BytePlus or HeyGen) under its own retention rules; we keep only the link.
  • Product photos: until you delete them or your account.
  • Connection tokens: until you disconnect the account or delete your Vidmerce account; we then wipe them at once.
  • Account and profile: while your account is open.
  • Waitlist: 24 months after you last signed up, or sooner if you unsubscribe or ask us to remove you.
  • Product searches: 90 days. Free-credit decision records: 90 days. Rate-limit counters: until their time window ends (at most one day).
  • App usage events: 13 months. Signed-in device records: 30 days after you sign out on that device or the sign-in expires.
  • Brand records: until the brand asks us to close its account. A brand application we decline is deleted 12 months after our decision. A licence record is kept even after its file is removed, as proof of the licence. Shopify store data is deleted when Shopify sends us its deletion request, 48 hours after the app is uninstalled.
  • Purchase and credit records: kept after account deletion, for at least as long as tax and accounting laws require (in Canada, generally six years after the tax year they relate to).

When you delete your account, we immediately: remove your email address, name, handle, bio, interests and any note about where you heard about Vidmerce from your account record; delete your social connections and their tokens, affiliate IDs, saved lists, push tokens, notification history and settings, product photos, rendered videos, thumbnails and voice-overs (including the files), earnings entries and storefront click records; cancel your scheduled posts and open sample requests; clear any email address you shared with brands and stop showing your storefront and your details to them; and remove the link between your past searches and you. We also ask Apple to end Sign in with Apple for Vidmerce (when we hold the token), ask TikTok, YouTube, X and Bluesky to revoke Vidmerce’s access, and cancel a subscription bought on our website.

We keep the purchase and credit records described above; a one-way hash of your Apple user identifier, so the same Apple ID cannot receive free credits twice; the DeviceCheck flag that Apple stores; and a few records no longer linked to your name, email address or handle, only to an internal account number: the text of your videos (scripts and captions) with their posting history, the discount-code requests you sent to brands, and free-credit decisions.

14. Security

We protect information with encryption in transit (HTTPS), encryption of social and store access tokens and Sign in with Apple tokens, one-way hashes for IP addresses and for the Apple identifiers of deleted accounts, salted password hashes for brand users, short-lived signed links for uploads and for your product photos, and access controls. No system is perfectly secure. If a security incident creates a real risk of significant harm (in Quebec, a risk of serious injury), we will notify you and the privacy authorities as the law requires, and we keep a record of incidents.

15. Your rights and choices

You can ask to access the personal information we hold about you, to correct it, to delete it and to withdraw your consent. Where Quebec law applies, you can also ask to receive it in a structured, commonly used technological format, and ask how an automated decision about you was made.

In the app you can delete your account (Me, then Delete account), disconnect any social account, change your notification settings, turn outside AI services off (Me › Settings › AI services) and stop sharing your email address with a brand. Disconnecting deletes the tokens we hold and, for TikTok, YouTube, X and Bluesky, also asks the platform to revoke Vidmerce’s access. For Instagram, Facebook, Threads and Pinterest, also remove Vidmerce in that platform’s settings. For Bluesky, you can also delete the app password you created.

For anything else, write to our privacy officer at lukeliu@vanillapha.com. We may ask you to confirm your identity, for example from the email address on your account. We will reply within 30 days and will not charge you for a reasonable request.

If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada or, in Quebec, to the Commission d'accès à l'information.

16. YouTube and Google

Vidmerce uses YouTube API Services. When you connect YouTube, Google's Privacy Policy (https://policies.google.com/privacy) applies to how Google handles your information, and you agree to the YouTube Terms of Service (https://www.youtube.com/t/terms). We use YouTube data only to upload the videos you approve and to read their view, like and comment counts.

You can revoke Vidmerce’s access to your Google account at any time at https://security.google.com/settings/security/permissions. When you disconnect YouTube in the app or delete your account, we delete the tokens we hold and ask Google to revoke our access.

17. Notice for California residents

Under the California Consumer Privacy Act as amended by the CPRA (CCPA), here is a summary of what this policy describes:

  • Categories collected: identifiers (such as email address, Apple identifier, handle, hashed IP addresses and push tokens); commercial information (purchases, credits and earnings you enter); internet or other electronic activity (searches, storefront clicks and use of the app); audio and visual information (product photos, videos and AI voices); and inferences limited to product suggestions based on your interests and videos.
  • Sources: you, your device, the platforms and stores you connect, and storefront visitors.
  • Purposes and recipients: the business purposes and service providers described above. We use sensitive personal information (such as brand portal sign-in details) only to provide the Service, as the law allows.
  • We do not sell personal information or share it for cross-context behavioural advertising, and we have done neither in the last 12 months. We do not knowingly sell or share the personal information of anyone under 16.
  • Retention: as described in “How long we keep it”.

You have the right to know and access, delete and correct your personal information, and not to be treated differently for using these rights. You or an authorized agent can make a request at lukeliu@vanillapha.com; we will verify it as described above. Residents of other U.S. states with similar laws can make the same requests the same way.

18. Children

Vidmerce is for adults aged 18 and over and is not directed to children. The app asks you to confirm that you are 18 or older, and our servers refuse videos and purchases until you do. We do not knowingly collect personal information from anyone under 18, and never from children under 13. If we learn that a minor has an account, we will close it and delete their information. Storefronts are public web pages; for any visitor we record only the click information described above.

19. Changes to this policy

We may update this policy. If a change is material we will tell you in the app or by email before it takes effect, and we will ask for your consent again where the law requires it.

20. Contact

Privacy questions and requests: Luke Liu, privacy officer, lukeliu@vanillapha.com. Vanillapha Inc., Ontario, Canada.