1. Overview
AutoStitch (the “Service”, available at autostitch.app) turns videos you upload or link into short clips with captions, framing, and titles, and lets you download them or publish them to YouTube or TikTok accounts you connect. The Service is operated by Koko Jamgotchian, an individual based in California, United States (“we”, “us”, or “our”), who is responsible for the personal information described here.
This policy explains what information we collect, how we use and share it, how long we keep it, and how you can export it, delete it, or disconnect third-party accounts. It applies together with our Terms of Service and Cookie Policy.
2. Information we collect
Account and sign-in information
When you create an account we collect your email address. Accounts are managed by our authentication provider, Supabase; if you use a password, Supabase stores it in hashed form and we never see it. If you sign in with Google, we receive the basic profile information Google shares for sign-in: your name, email address, and profile picture.
Videos, links, and generated content
We collect the video files you upload and the links you submit. For a link, we store the URL and download the source video so we can process it, together with descriptive information about it such as its title, duration, and thumbnail. From your source videos we generate clips, thumbnail images, transcripts, captions, titles, and other processing outputs. We also store the settings and text you enter, such as captions and publishing details.
Face, person, and speaker analysis
To frame and edit clips, our processing detects faces and people in your video frames and analyzes the audio to estimate who is speaking and when. To keep following the same person across cuts within one video, it compares facial features detected in that video. This comparison data is computed and held only while that video is being analyzed; it is not stored, not compared across different videos or accounts, and not used to recognize or identify who anyone is. The resulting framing and speaker-timing decisions may be stored with your project.
Project and job information
We record information about each processing job, including its identifiers, status, settings, timestamps, credits used, and errors, so we can run the job, show your library, and support you.
Credits, billing, and payments
Payments are processed by Stripe on Stripe’s own checkout and billing pages. Stripe collects your payment details; we do not receive or store your card number. We store your credit balance, credit ledger entries, payment records (such as amount, currency, and status), subscription status, and your Stripe customer identifier.
Connected YouTube and TikTok accounts
If you connect a YouTube or TikTok account, we store the access and refresh tokens the platform issues, the permissions you granted, token expiry times, and connection status. Section 3 describes each integration in detail.
Technical and security information
When you use the Service, our servers receive technical information such as your IP address, browser request details, and timestamps. We use it to keep the Service secure, apply rate limits, prevent abuse, and diagnose errors. Our logs are designed to exclude passwords, tokens, cookies, and signed media links.
Cookies and browser storage
Your sign-in session is kept in your browser’s localStorage by our authentication provider. When you connect TikTok, we set a secure, HttpOnly cookie for up to 10 minutes to protect the connection from forgery. We use localStorage and sessionStorage for your preferences and in-progress state. We do not use advertising or third-party analytics cookies, and we do not allow third parties to serve advertisements in the Service. See our Cookie Policy for the full list.
Messages you send us
If you contact us or submit feedback, we keep your message and contact details so we can respond.
3. YouTube and TikTok integrations
Connecting an account is optional. The Service never publishes to a connected account unless you start that upload or post yourself. Tokens are stored encrypted (AES-256-GCM) on our servers, are used only by our backend, and are never sent to your browser. You manage both connections in Settings → Social Media Accounts → Connect Social Accounts.
TikTok (Login Kit and Content Posting API)
When you connect TikTok, we request only these permissions:
user.info.basic: your TikTok open ID (an identifier specific to our app) and your display name, so we can show which account is connected.video.publish: to post a video you select directly to your TikTok account (Direct Post), using the settings you choose.
What we store: your open ID, display name, encrypted access and refresh tokens, granted permissions, token expiry, connection time, and status. For each post you make, we store the AutoStitch clip it came from, the caption, the privacy level, comment, Duet, and Stitch settings, your commercial-content and AI-generated-content choices, the time you gave consent, and the identifiers and status TikTok returns.
Information we read at posting time: when you open the TikTok posting dialog, we request your current creator information from TikTok (nickname, username, the privacy levels available to you, whether comments, Duet, and Stitch are available, and your maximum video length). We use it to display your account and enforce TikTok’s limits. We do not store it.
Your consent to each post: you choose the caption and privacy level yourself, interaction settings start switched off, and the post is sent only after you confirm the required consents and select the post button.
How your video is delivered: when you post, TikTok retrieves the finished, full-quality MP4 of the clip you chose from a temporary, unguessable link on autostitch.app. The link expires within 65 minutes, and we remove it as soon as the post finishes, fails, or you disconnect. Exports with a promotional watermark cannot be posted to TikTok.
What we do not do: we do not read your TikTok videos, followers, messages, comments, or analytics. We do not post without your action, and we do not upload drafts to your TikTok inbox.
Disconnecting TikTok: select Disconnect next to TikTok in the Connect Social Accounts dialog. We revoke our access with TikTok, then delete your stored TikTok tokens and any pending delivery links. You can also remove AutoStitch in your TikTok app’s settings for authorized apps. Your record of past posts stays in your AutoStitch account until you delete your account. Videos already published remain on TikTok until you delete them there.
Some TikTok features may be limited to approved accounts while our integration completes TikTok’s review. TikTok handles your information under its own Terms of Service and Privacy Policy.
YouTube (YouTube API Services)
AutoStitch uses YouTube API Services. When you connect YouTube, we request only the https://www.googleapis.com/auth/youtube.upload permission, which lets us upload videos you choose to your channel with the title, description, tags, privacy setting, and schedule you set. We store your encrypted tokens, granted permissions, token expiry, connection status, and the video identifier YouTube returns for each upload. We do not read your existing videos, comments, subscribers, or channel analytics.
Disconnecting YouTube: select Disconnect next to YouTube in the Connect Social Accounts dialog. We revoke the token with Google and clear the stored tokens. You can also remove access at any time from your Google security settings; uploads then stop working. Videos already uploaded remain on YouTube until you delete them there.
By connecting YouTube, you agree to the YouTube Terms of Service. Google handles your information under the Google Privacy Policy.
Google user data: the information we receive from Google APIs is limited to your sign-in profile (name, email address, and profile picture) and, if you connect YouTube, your YouTube tokens and the results of uploads you request. We use it only to sign you in and to upload the videos you choose. We do not sell it, use it for advertising, or use it to determine creditworthiness; we do not transfer it to others except as needed to provide those features, for security, to comply with law, or as part of a merger or acquisition with your prior consent; and we do not allow people to read it except with your permission, for security, or to comply with law. AutoStitch’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
4. How we use information
- To create and secure your account and sign you in.
- To process your videos: download linked sources, transcribe speech, select moments, frame, caption, and render clips, and store the results in your library.
- To upload or post the clips you choose to the YouTube or TikTok account you connected.
- To charge, reserve, and return credits, and to process payments and refunds.
- To keep the Service secure, prevent abuse, enforce our Terms, and diagnose errors.
- To respond to you and send messages about your account and the Service.
- To meet legal obligations and respond to valid legal requests.
AI processing: transcription and video analysis run on processing computers we operate. To select clips and write titles and hooks, we send transcript text and related details, such as the source title, to Ollama’s hosted language-model service. We do not send it your account details, YouTube or TikTok tokens, or payment details.
Internal quality review: our internal tools for reviewing output quality include videos only from accounts we have specifically enrolled with the account holder’s agreement. Other customer accounts are not enrolled.
5. How we share information
We do not sell your personal information, and we do not share it for advertising.
We share information with service providers that run the Service on our behalf:
- Supabase: authentication, sign-in and account emails, and our database, including account, billing, job, and connected-account records.
- Stripe: payment processing, checkout, and refunds.
- Cloudflare R2: private storage for source videos, generated clips, thumbnails, and other files, served only through our authenticated service.
- Upstash Redis: our job queue and job records, including submitted links and job settings.
- Render: hosting for our backend API.
- Vercel: hosting for our website and web application.
- Ollama: hosted language-model processing of transcript text, as described in section 4.
- Resend: delivery of emails we send from our own systems.
When you choose to publish, we send your selected video and publishing details to Google (YouTube) or TikTok. Their own terms and privacy policies apply to that content.
We may also disclose information when required by law or valid legal process, or when necessary to protect the rights, safety, or security of our users, the public, or the Service.
6. How long we keep information
Generated files. Each project’s download period is set from your plan when the project is finished and does not change if you change plans later. We do not currently sell subscription plans, so most accounts receive the Free period; paid plans apply only where we have granted one. The current periods are:
| Plan when the project finished | Download period |
|---|---|
| Free: every account without a Starter, Creator, Pro, or Studio plan, including accounts that buy credit packs | 24 hours |
| Starter plan | 7 days |
| Creator plan | 7 days |
| Pro plan | 14 days |
| Studio plan | 30 days |
When the period ends, the files can no longer be downloaded and become eligible for deletion by our cleanup process, which runs separately and can take place some time after the period ends. Projects created before plan-based periods were introduced have no set download period; their files are kept until they are removed by cleanup, by you, or with your account.
- Source videos and intermediate files: kept on our processing systems and in private storage while needed to produce your projects, and removed by our cleanup processes or when you delete the project or your account.
- Project records: job and project details can remain after their files expire, until cleanup removes them or you delete the project or your account.
- Connected-account tokens: kept until you disconnect the account or delete your AutoStitch account. TikTok connection-security records expire after 10 minutes, and TikTok video-delivery links expire within 65 minutes.
- Publishing history: records of your YouTube uploads and TikTok posts are kept until you delete your account.
- Billing and security records: a minimal set is kept after account deletion where needed for accounting, tax, fraud prevention, security, and legal obligations.
- Backups: copies in our service providers’ backups are not deleted on request; they remain until those backups expire under the providers’ schedules.
7. Your choices: export, deletion, and disconnection
Export your data: open your Profile and choose Export account data under “Your account data” to download a copy of your account, credit, payment, job, and connected-account information. Media files remain available through their normal download controls during their download period. Exports never include passwords or tokens.
Delete individual projects: you can delete projects and their files from your library.
Delete your account: under “Your account data”, choose Delete account and files and type DELETE MY ACCOUNT to confirm. Deletion then:
- stops new and active work on your account;
- revokes our access to your connected YouTube and TikTok accounts and deletes the stored tokens;
- deletes your files from cloud storage and our processing systems, and deletes your account and job records;
- deletes your sign-in account. An internal account identifier is kept so the retained billing and security records remain consistent.
Cleanup runs in stages and can take time. You receive a deletion receipt listing each step and any retained-record exceptions, and you can check its status for 30 days. Deleting your account does not remove videos you already published to YouTube or TikTok; delete those on the platform.
Disconnect an account: see section 3 for YouTube and TikTok.
Requests by email: you can also send access, correction, deletion, or other privacy requests, questions, or complaints to kokojamgotchian007@gmail.com. We may need to verify that a request comes from the account holder. Depending on where you live, you may have additional rights under local law, and you can use this address to exercise them.
Browser storage: you can clear localStorage, sessionStorage, and cookies in your browser settings at any time; clearing them signs you out.
8. Security
We use encryption in transit, encrypt connected-account tokens at rest, keep media in private storage that is served only through our authenticated service, and check that each account can access only its own projects and files. No system is completely secure, and we cannot guarantee absolute security.
9. Children’s privacy
You must be at least 18 years old to use AutoStitch, and you confirm this when you sign in. We do not knowingly collect personal information from anyone younger. If you believe someone under 18 has given us personal information, contact us and we will delete it.
10. Where information is processed
We and our service providers process information in the countries where we and they operate, which may differ from the country where you live.
11. California privacy disclosures
- Categories and sources: the information we collect, where it comes from, why we use it, and whom we share it with are described in sections 2 through 5.
- No sale or sharing: we do not sell personal information and do not share it for cross-context behavioral advertising, and we do not disclose it to third parties for their own direct-marketing purposes.
- Tracking and Do Not Track: we do not track you across other websites over time, and we do not allow third parties to do so through the Service. Because we do not engage in that tracking, we treat all visitors the same whether or not their browser sends a Do Not Track or Global Privacy Control signal.
- Reviewing and changing your information: you can review your information by exporting it, and ask us to correct or delete it, as described in section 7.
- Policy changes: we tell you about changes as described in section 12, and the date at the top of this page shows when this policy took effect.
12. Changes to this policy
We may update this policy. We will post the updated version on this page and change the “Last updated” date, and we may also notify you of material changes through the Service or by email. If a change affects how we use information received from Google or TikTok, we will ask for your consent before using it in the new way.
13. Contact
- Operator: Koko Jamgotchian (individual), California, United States
- Email: kokojamgotchian007@gmail.com
- Mailing address: 433 Pioneer Drive, Glendale, CA
- Telephone: (818) 984-7599