Nocturne

Privacy Policy

Last updated: June 21, 2026

1. What we collect

When you create an account we collect your email address and name. If you sign in with Google or connect a social platform (YouTube, Instagram), we receive and store an OAuth access token for that platform — nothing else from those accounts.

2. How we use it

Your email is used to identify your account and send transactional messages (password reset, billing receipts). OAuth tokens are used solely to upload or publish videos you generate to the connected platform on your behalf. We never read your followers, messages, or personal posts.

3. Data sharing

We do not sell, rent, or share your personal data with third parties. Generated videos and scripts are stored on our servers for your access. AI generation calls are sent to third-party providers (OpenAI, Pollinations, Kling, ElevenLabs) containing only the content prompts — no personal information.

4. Connected accounts

When you connect YouTube or Instagram, we store a long-lived OAuth token scoped only to content publishing. You can disconnect at any time from the Accounts step in the wizard, which deletes the stored token immediately. Revoking access from the platform side (Google/Meta account settings) also invalidates our token.

5. Data retention

Account data is retained as long as your account is active. Generated videos are stored until you delete them or close your account. OAuth tokens are deleted when you disconnect an account or close your account.

6. Security

Passwords are hashed with bcrypt. OAuth tokens are stored encrypted at rest in our database. We use HTTPS everywhere.

7. Your rights

You may request deletion of all your data at any time by emailing us. We will delete your account, stored videos, and all OAuth tokens within 7 days.

8. Contact

Questions? Email rishavrajpatna7@gmail.com.