Privacy Policy

Short version: we collect only what we need to run VideoFinder, we don’t track you across the web, we don’t sell data, and you can delete your account at any time.

1. Who we are

VideoFinder is operated by Kadrowa Labs sp. z o.o., ul. Złota Wieża 14/3, 00-120 Warszawa, Poland (“we”, “us”). We are the controller of personal data processed through videofinder.link and its subdomains. You can reach us at privacy@videofinder.link.

2. Data we collect

We collect as little as we can to run the service:

• Account data: email address, display name and a salted hash of your password. We never store passwords in plain text.
• Billing data: plan, invoices and billing address. Card details are handled by our payment processor; we only see the last four digits and expiry date.
• Usage data: clips you save, download or upload, and the licences attached to them.
• Technical data: IP address, browser user-agent and request timestamps in server logs, kept for security purposes.
• Messages you send to support.

3. How we use it

We use personal data to provide and secure the service, process payments, pay creators, answer support requests and comply with legal obligations. We improve search using aggregated, de-identified signals (for example, “people who searched X often used clip Y”). We do not build advertising profiles and we do not sell personal data.

4. Legal bases

Under the GDPR we rely on: performance of a contract (Art. 6(1)(b)) to run your account; legal obligation (Art. 6(1)(c)) for tax and accounting records; legitimate interests (Art. 6(1)(f)) for security logging and fraud prevention; and consent (Art. 6(1)(a)) for our newsletter, which you can withdraw at any time.

5. Cookies & local storage

We do not use advertising or analytics cookies, and we do not load any third-party scripts. Your browser stores a few small preferences in local storage — your colour theme, autoplay setting, liked clips and your Watch-later list — which never leave your device unless you sign in and sync them. When you sign in, we set a single, strictly necessary session cookie.

6. Who we share data with

We use a small number of processors under data processing agreements: our hosting provider (EU data centres), our payment processor, and our transactional email provider. We may disclose data where required by law. A current list of sub-processors is available on request.

7. International transfers

Your data is stored in the European Economic Area. Where a processor transfers data outside the EEA, we rely on Standard Contractual Clauses and additional safeguards.

8. Retention

Server logs are kept for 14 days. Account data is kept while your account is active and deleted within 30 days of account deletion. Invoices are kept for the period required by Polish tax law (currently five years from the end of the tax year).

9. Your rights

You have the right to access, rectify, erase, restrict and port your data, and to object to processing based on legitimate interests. Email privacy@videofinder.link and we will respond within 30 days. You may also lodge a complaint with the President of the Personal Data Protection Office (UODO) in Warsaw, or with your local supervisory authority.

10. Security

All traffic is encrypted in transit with TLS. Passwords are hashed with a modern memory-hard algorithm. Access to production systems is limited to a small number of engineers and logged. If you find a vulnerability, please write to security@videofinder.link.

11. Changes to this policy

We will announce material changes by email and on this page at least 14 days before they take effect.