Videotto LogoSign up

Privacy Policy

Effective Date: 19 October 2026

Introduction

At Videotto, we take your privacy seriously. Please read this Privacy Policy to learn how we treat your personal data. By using or accessing our Services in any manner, you acknowledge that you accept the practices and policies outlined below and consent to our collecting, using, and sharing your information as described here.

Remember that your use of Videotto's Services is at all times subject to our Terms of Services, which incorporates this Privacy Policy. Any terms used in this Policy without defining them have the definitions given to them in the Terms of Services.

As we continually work to improve our Services, we may need to change this Privacy Policy from time to time. Upon such changes, we will alert you by placing a notice on the Videotto website, by sending you an email, and/or by some other means. Please note that if you opt not to receive legal notice emails from us (or haven't provided us with your email address), those legal notices will still govern your use of the Services, and you are responsible for reading and understanding them. If you use the Services after any changes to the Privacy Policy have been posted, that means you agree to all the changes.

Where this Policy Applies

This Privacy Policy applies to every way you use Videotto: our website, our iPhone app, and third-party platforms such as ChatGPT apps or integrations. The same account, data and protections apply on each of them.

What this Privacy Policy Covers

This Privacy Policy covers how we treat personal data ("Personal Data") that we gather when you access or use our Services. "Personal Data" means any information that identifies or relates to a particular individual and also includes terms like "personally identifiable information" or "personal information" under applicable data privacy laws. This Privacy Policy does not cover the practices of companies we don't own or control or people we don't manage.

Personal Data

Categories of Personal Data We Collect

We collect and have collected over the past 12 months the following categories of Personal Data solely for the purposes described in this Privacy Policy:

  1. Account Data
    Your email address, the name you give us, and your password (stored only as a one-way hash). If you sign in with Google, we receive your name, email address, profile picture and a Google account identifier. If you sign in with Apple, we receive your email address (or Apple's private relay address), your name if you choose to share it, an Apple account identifier, and a token that lets us revoke the sign-in when you delete your account.
  2. Your Content
    The videos, photos, audio and files you upload, the links you add, the messages you send to Otto, the notes Otto keeps about your preferences, your brand kit, and the videos we make for you.
  3. Purchase Data
    If you buy in our iPhone app, Apple processes the payment. We receive the product you bought, transaction identifiers, purchase dates and renewal status, never your card details. Website purchases are processed by Stripe or Coda; we keep their customer, subscription and transaction identifiers. When you pay through Stripe, Stripe also gives us the billing name, phone number and address you entered at checkout. We do not store these; we use them only as described under "Advertising Measurement" below.
  4. Social Network Data (if you choose to link your social accounts)
    We store tokens to allow auto-posting or integration at your request. We delete these tokens immediately if you revoke or unlink your social network.
  5. Device and App Data
    Your IP address, from which an IP geolocation service estimates your country, region, city and postal code; your browser or app version, operating-system version and device model; in our iPhone app, whether you allowed tracking when the app asked; and, if you allow notifications in our app, a push token so we can tell you when a video is ready. We use this to run and secure the Services, prevent fraud, maintain your session, and for the purposes below.
  6. Usage Data
    Which features you use and when (for example signing up, sending a message to Otto, or exporting a video). On our website this includes clicks and page views, and for paying, trial and team accounts a recording of how you use the website's screens. Our app can send usage events and error reports tagged with the app and operating-system version. We use this to run, fix and improve the Services.

We do not store your phone number, mailing address or full payment details. Card payments on our website are processed by Stripe, Inc. ("Stripe") or Coda, and purchases in our iPhone app by Apple. For more information, please see their privacy policies.

Categories of Sources of Personal Data

  • You: When you provide information directly (e.g., creating an account, linking social media, contacting us).
  • Cookies and Similar Tools: When you use our website, we and our analytics and advertising partners set cookies, as described under "Cookies and Tracking Tools" below.
  • Public Records: We do not actively collect from public records.
  • Third Parties:
    • Payment Processors (Stripe, Coda, Apple): They process payment data and tell us what you bought; we do not store your card details.
    • Sign-in Providers (Apple, Google): If you sign in with Apple or Google, they send us the account details listed above.
    • Social Networks: If you link your social media accounts, we may receive tokens that allow you to post content on your social network directly from Videotto.

Our Commercial or Business Purposes for Collecting or Disclosing Personal Data

We use your Personal Data for the following business purposes:

  • Providing and Improving the Services: Creating and managing your account, editing and making your videos, processing transactions, offering support, and enhancing your experience through analytics.
  • Corresponding with You: Responding to your communications, sending necessary account and service information, and sending product news. You can stop product and marketing emails at any time with the unsubscribe link in each email or by contacting us.
  • Measuring Our Advertising: Telling our advertising partner when an account is created or a plan is bought, so we can measure our ads, as described under "Advertising Measurement" below.
  • Meeting Legal Requirements and Enforcing Legal Terms: Complying with laws, protecting our rights and the rights of others, detecting and preventing fraud or security issues, and resolving disputes.

We will not collect additional categories of Personal Data or use your Personal Data for materially different, unrelated, or incompatible purposes without providing notice.

AI Services That Process Your Content

To make your edits, Otto sends your content to AI and processing services that act on our behalf. In our iPhone app, we ask for your permission before the first time this happens. They receive your content only so they can provide the Services to you.

  • Microsoft (Azure OpenAI Service): reads your requests, the transcript and still frames from your video, and plans and makes your edit.
  • Anthropic (Claude), directly and through Amazon Web Services (Amazon Bedrock): does the same when you use SuperOtto.
  • Google (Gemini): watches and listens to your footage and drafts to find the moments worth keeping, names your chats, helps with captions and translation, can make the edit itself, and can create images, music or short video shots for your edit.
  • AssemblyAI and ElevenLabs: turn the speech in your video into text for captions. ElevenLabs can also create voiceovers, sound effects and music from text Otto writes.
  • E2B: runs the private, per-account workspace in which Otto edits your files.
  • Search and stock services (Pexels, Brave Search, Freesound, Epidemic Sound, Soundstripe and Storyblocks): receive only short search words, never your videos.

These providers may process data outside Singapore, including in the United States.

How We Disclose Your Personal Data

We disclose your Personal Data to the following categories of service providers and other parties:

  1. Service Providers
    • Hosting (AWS): We host our platform, store your account data and content, and render your videos on Amazon Web Services located in Singapore.
    • AI and Processing Providers: listed under "AI Services That Process Your Content" above.
    • Payment Processors (Stripe, Coda, Apple): Stripe and Coda process website payments, and Apple processes purchases in our iPhone app, on our behalf.
    • Apple and Google: Sign in with Apple, Sign in with Google, and push notifications in our iPhone app.
    • Email (SendGrid): account emails and product news.
    • Product Analytics (PostHog): usage events and website session recordings tied to your account, used only by us.
    • Customer Support (Intercom): your name, email address and the messages you send when you chat with our support team.
    • IP Geolocation: your IP address, so we can estimate your location.
  2. Advertising Partners
    • Meta Platforms: as described under "Advertising Measurement" below.
  3. Parties You Authorize or Authenticate
    • Social Media: If you connect a social media account for auto-posting, we share necessary token/authentication data with that network until you revoke access.
  4. Legal Obligations: We may share Personal Data when required by law or to protect our rights and the rights of others (e.g., in response to legal process).
  5. Business Transfers: If Videotto undergoes a merger, acquisition, or other transaction in which a third party assumes control of our business, we may transfer your Personal Data to that entity. We will make reasonable efforts to notify you before your information becomes subject to a new privacy policy or practices.
  6. Data That Is Not Personal Data: We may create aggregated or anonymized data from your Personal Data, which cannot identify you, and share it for lawful business purposes.

Cookies and Tracking Tools

Cookies on Our Website

We use essential cookies to let you log in and keep your session. Disabling cookies in your browser may make certain features or services unavailable (e.g., staying logged in). Our website also loads PostHog for product analytics, and Google Tag Manager with the Meta Pixel for advertising measurement; these set their own cookies.

Advertising Measurement

When you create an account, start a trial, buy or renew a plan, and, on our website, when you reach our plans or start checkout, we share the following with Meta Platforms so we can measure our ads: your email address, name, account identifier, approximate location and, for Stripe purchases, the billing phone number and address you entered (all hashed before they are sent); your IP address; your browser or device details; and Meta's own cookie identifiers, if your browser has them.

In our iPhone app we share your sign-up and purchase events with Meta only after you allow tracking when the app asks. If you do not allow it, we do not share them, including later purchases you make on our website. If you allow tracking after signing up, we share your sign-up then. You can change your choice at any time in your iPhone's Settings › Privacy & Security › Tracking.

Do Not Track: Our Services do not respond to Do Not Track signals.

Data Security

We seek to protect your Personal Data from unauthorized access, use, or disclosure, using appropriate physical, technical, organizational, and administrative security measures, relying on AWS's security protocols and encryption. You should also protect your account by using strong passwords and logging out after your session. While we work to protect your data, no method of transmission over the internet or storage is entirely secure.

Data Retention

We retain Personal Data as long as necessary to provide our Services or as needed for our business or legal obligations. Specifically:

  • Account Data: Retained as long as you have an active account. You can delete your account at any time: on our website from the Settings page, and in our iPhone app from You › Account › Delete account. A website subscription is cancelled immediately and your account is locked, then held for 30 days so you can change your mind. After that window every video, clip, project and upload is permanently erased from our active systems, and if you signed in with Apple we revoke that sign-in with Apple. We keep only what we are required or entitled to: invoices and payment records for tax and accounting, and a record that the deletion happened (your user ID and a one-way hash of your email).
  • App Store Subscriptions: A subscription you bought in our iPhone app is billed by Apple, and deleting your Videotto account does not cancel it. Cancel it in your iPhone's Settings › your name › Subscriptions.
  • Email & Social Tokens: Retained only to provide the features you request; deleted when you revoke or delete your account.
  • IP/Device Data: Retained as needed for security, fraud prevention, and analytics, then removed or anonymized.

We may retain data longer if required by applicable law, or for legitimate business interests such as dispute resolution or auditing. Data may also be stored in an aggregated or anonymized format.

Withdrawing Your Consent

You can withdraw your consent to our use of your Personal Data at any time: turn off tracking for our iPhone app in your iPhone's Settings › Privacy & Security › Tracking, stop product and marketing emails with the unsubscribe link in each email or by asking us, or delete your account as described above. You can also contact us at yaoming@videotto.com. Withdrawing consent does not affect processing that happened before, and some Services cannot work without the processing described in this Policy.

Personal Data of Children

We do not knowingly collect Personal Data from children under 16 years of age. If we learn that Personal Data from a child under 16 has been collected, we will delete it as quickly as possible. If you believe a child under 16 may have provided Personal Data, please contact yaoming@videotto.com.

California Resident Rights

If you are a California resident, you have certain rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA):

  • Access: You may request information about our collection and use of your Personal Data over the past 12 months.
  • Data Deletion: You may request that we delete Personal Data collected about you at support@videotto.com.
  • Correction: You may request that we correct inaccurate Personal Data at support@videotto.com.
  • Sale and Sharing Opt-Out: We do not sell your Personal Data or the Personal Data of minors under 16 years of age. Sharing identifiers and events with Meta for advertising measurement, as described under "Advertising Measurement" above, may count as "sharing" under the CPRA. You can opt out by emailing support@videotto.com, after which we stop sending your Personal Data to Meta from our servers. The Meta Pixel on our website runs in your browser; you can block it with your browser's cookie or privacy settings.
  • No Discrimination: We will not discriminate against you for exercising your rights under the CPRA.

To exercise your rights, see "Exercising Your Rights under CPRA" below. If you have questions about whether these rights apply to you, contact us at support@videotto.com.

Exercising Your Rights Under CPRA

To make a request under the CPRA, you must send us a notice that:

  1. Provides enough information for us to verify you are the person about whom we collected Personal Data (or their authorized agent).
  2. Clearly describes your request.

You do not need an account with us to submit a request. We will not charge a fee unless your requests are excessive or repetitive, in which case we will let you know in advance. We aim to respond within the timeframe required by applicable law.

  • Email: yaoming@videotto.com
  • Phone: +65 8835 3985

If you authorize an agent to act on your behalf, we may request written proof of this authorization.

Supplemental Terms for International Users

Singapore PDPA

Videotto is based in Singapore and complies with the Personal Data Protection Act (PDPA). If you live outside Singapore or California, please note that your account data and content are stored on AWS servers in Singapore, and any Personal Data you provide will be processed under Singapore law.

EEA, Switzerland, and UK

If you reside in the European Economic Area (EEA), Switzerland, or the UK, certain additional rights may apply, including the right to access, delete, or correct your data, and the right to restrict or object to some processing. Your account data is stored on Amazon Web Services in Singapore. To provide the Services, some providers named in this Policy process data in other countries, including the United States. Where the law requires it, we use appropriate safeguards such as standard contractual clauses.

Other International Users

By using Videotto, you consent to the collection and transfer of your Personal Data in and to Singapore, and to the processing by the providers named in this Policy in the countries where they operate, including the United States. If you have questions about your data rights in your jurisdiction, please contact yaoming@videotto.com.

Contact Information

If you have any questions or comments about this Privacy Policy, how we collect and use your Personal Data, or your choices and rights regarding such collection and use, please do not hesitate to contact us:

  • Website: www.videotto.com
  • Email: yaoming@videotto.com
  • Phone: +65 88353985
  • Address: 39 Woodlands Cl, Singapore 737856
  • Owner: Videotto Pte Ltd, Tay Yao Ming

We reserve the right to update or modify this Privacy Policy at any time. Changes will become effective upon posting to videotto.com, and continued use of the Services after any changes indicates your acceptance of the new policy.