Privacy Policy

Effective Date: February 20, 2026

This Privacy Policy (“Policy”) describes how Minyona LLC (“Company,” “we,” “us,” or “our”), operating the Vidyona platform at vidyona.com (“Service”), collects, uses, discloses, and protects your personal information. By accessing or using the Service, you agree to the terms of this Policy. If you do not agree, please do not use the Service.

1. Information We Collect

1.1 Information You Provide Directly

  • Account Information. When you create an account, we collect your name, email address, and password (stored in hashed form). We do not store plaintext passwords.
  • Billing Information. Payment processing is handled by Stripe, Inc. We do not directly collect or store credit card numbers, bank account details, or other financial instrument data. We receive and store your Stripe customer identifier, subscription identifier, and plan selection for account management purposes.
  • Video Content. When you upload video files, we store the raw video file and generate transcoded versions (HLS adaptive bitrate streams and thumbnail images) on Cloudflare R2 object storage.
  • Communications. If you contact us for support or provide feedback, we retain the content of those communications.

1.2 Information Collected Automatically

  • Usage Data. We collect information about how you interact with the Service, including pages viewed, features used, and actions taken within the dashboard.
  • Device and Browser Information. We may collect IP address, browser type, operating system, device identifiers, and referring URLs when you access the Service.
  • Cookies and Session Tokens. We use session cookies and JSON Web Tokens (JWTs) to authenticate your account and maintain your logged-in session. These are strictly functional and are not used for advertising or cross-site tracking.

1.3 Information Collected Through Embedded Players

When videos hosted on Vidyona are embedded on third-party websites using our script embed or iframe embed, we collect the following from viewers of those embedded videos:

  • Page Load Events. The URL of the page where the video is embedded and the time the page was loaded.
  • Playback Analytics. Play events, second-by-second watch data, total watch time, and video completion status. This data is associated with a randomly generated session identifier, not with any personally identifiable information.
  • Email Captures. If a video owner has configured an email gate interaction, and a viewer voluntarily submits their email address through that gate, we collect and store that email address in association with the video and the timestamp at which it was captured. This email may be transmitted to the video owner and, if configured, to a third-party webhook URL designated by the video owner.

2. How We Use Your Information

We use collected information for the following purposes:

  • Service Delivery. To create and manage your account, process video uploads, perform transcoding, deliver embedded video playback, and provide customer support.
  • Billing and Payments. To manage your subscription, enforce plan limits, and process payments through our payment processor (Stripe).
  • Analytics and Reporting. To provide video owners with engagement analytics, including play rates, watch percentages, completion rates, and engagement heatmaps derived from aggregated viewer playback data.
  • Email Capture Delivery. To store email addresses collected through email gate interactions and deliver them to video owners and their configured webhook endpoints.
  • Service Improvement. To analyze usage patterns, diagnose technical issues, and improve the performance and functionality of the Service.
  • Security. To detect and prevent fraud, abuse, and unauthorized access, including through IP-based rate limiting on public API endpoints.
  • Legal Compliance. To comply with applicable laws, regulations, legal processes, or enforceable governmental requests.

3. How We Share Your Information

We do not sell your personal information. We may share information in the following circumstances:

  • Service Providers. We use third-party service providers to operate the Service, including:
    • Stripe, Inc. — Payment processing and subscription management.
    • Supabase, Inc. — Database hosting (PostgreSQL).
    • Cloudflare, Inc. — Object storage (R2) for video files, thumbnails, and HLS segments.
    • Vercel, Inc. — Application hosting and content delivery.
    These providers process data on our behalf and are contractually obligated to protect your information.
  • Video Owners (Email Captures). If you submit your email address through an email gate on an embedded video, that email address and associated metadata (video title, timestamp, capture time) will be shared with the video owner who configured the gate, and may be transmitted to third-party services via webhook URLs configured by the video owner. We are not responsible for how video owners or their third-party integrations handle your email address after delivery.
  • Legal Requirements. We may disclose information if required to do so by law or in response to valid legal process, including subpoenas, court orders, or government requests.
  • Business Transfers. In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.

4. Data Retention

  • Account Data. We retain your account information for as long as your account is active. If you delete your account, we will delete your personal information within thirty (30) days, except as required by law or for legitimate business purposes (e.g., resolving disputes, enforcing agreements).
  • Video Content. Video files, transcoded outputs, and thumbnails are retained until deleted by the account holder or upon account termination. Upon deletion, files are permanently removed from object storage.
  • Analytics Data. Aggregated and anonymized playback analytics data (page loads, view sessions, watch data) may be retained indefinitely for reporting purposes. This data is not personally identifiable.
  • Email Captures. Email addresses collected through email gates are retained until the video owner deletes them or until account termination.

5. Data Security

We implement commercially reasonable technical and organizational measures to protect your information, including:

  • Passwords are hashed using bcrypt with a cost factor of 12 and are never stored in plaintext.
  • Authentication is managed through encrypted JSON Web Tokens (JWT).
  • All data in transit is encrypted via TLS/HTTPS.
  • Database access is restricted to authenticated server-side connections only.
  • Payment data is handled entirely by Stripe, which is PCI DSS Level 1 certified.
  • Public API endpoints are protected by IP-based rate limiting.

No method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

6. Your Rights and Choices

  • Access and Correction. You may access and update your account information through your dashboard settings at any time.
  • Account Deletion. You may request deletion of your account and associated data by contacting us at the email address below.
  • Email Capture Opt-Out. Submission of your email address through an email gate on an embedded video is entirely voluntary. You may choose not to provide your email and discontinue watching the gated portion of the video.
  • Cookies. Because we use only strictly functional session cookies for authentication (not for tracking or advertising), there is no cookie preference to configure. Disabling cookies in your browser may prevent you from logging in.

6.1 Rights for California Residents (CCPA)

If you are a California resident, you have the right to:

  • Request disclosure of the categories and specific pieces of personal information we have collected about you.
  • Request deletion of your personal information.
  • Opt out of the sale of personal information. We do not sell personal information.
  • Not be discriminated against for exercising your privacy rights.

6.2 Rights for EEA/UK Residents (GDPR)

If you are located in the European Economic Area or the United Kingdom, you have additional rights under the General Data Protection Regulation, including the right to access, rectification, erasure, data portability, restriction of processing, and objection to processing. Our lawful basis for processing personal data is: (a) performance of a contract (providing the Service), (b) legitimate interest (security, analytics), and (c) consent (email gate submissions). To exercise these rights, contact us at the email address below.

7. International Data Transfers

Your information may be transferred to and processed in the United States and other countries where our service providers operate. These countries may have data protection laws that differ from those in your jurisdiction. By using the Service, you consent to the transfer of your information to these countries. Where required, we rely on standard contractual clauses or other lawful transfer mechanisms.

8. Children’s Privacy

The Service is not directed to individuals under the age of sixteen (16). We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete that information promptly. If you believe a child has provided us with personal information, please contact us.

9. Third-Party Links and Webhooks

The Service may contain links to third-party websites or allow video owners to configure webhooks that transmit data to third-party services. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party service that receives your information.

10. Changes to This Policy

We may update this Policy from time to time. If we make material changes, we will notify you by posting the revised Policy on this page and updating the “Effective Date” above. Your continued use of the Service after any changes constitutes your acceptance of the revised Policy.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us at:

Minyona LLC
Email: support@vidyona.com