Legal
Privacy Policy
Last updated: 12 April 2026
This policy explains what personal data VidFinder collects, why we collect it, and how you can control it. We've written it in plain English rather than legalese — if anything is unclear, just ask.
1. Who we are
VidFinder is owned and operated by Wyler Marketing Ltd (Company No. 14047902), a company registered in England and Wales. For the purposes of UK data protection law, Wyler Marketing Ltd is the Data Controller for personal information collected through this website.
Wyler Marketing Ltd (Co. No. 14047902)Collingwood Buildings
38 Collingwood Street
Newcastle Upon Tyne
NE1 1JF
United Kingdom
support@vidfinder.io
2. What data we collect
We may collect the following categories of personal data:
- Email address and password hash — when you create an account or sign up for early-access. Passwords are hashed by Supabase and never stored in plain text.
- Billing and payment information — your payment method details are collected directly by Paddle (our payment processor). We do not receive or store card numbers. We do receive order metadata: plan type, amount, currency, and subscription status.
- Usage and analytics data — pages visited, referrer, browser type, device type, and country-level location, collected automatically when you browse the site or use the app.
- Product behaviour data — feature interactions, session length, and in-app events collected via PostHog to help us understand how VidFinder is used.
- Search Console data — aggregate search query and click data associated with vidfinder.io, as reported by Google Search Console. This data is not linked to individual users on our end.
3. How and why we use your data
We use the data we collect for the following purposes:
Early-access interest list
Your email address is added to our mailing list (managed by ConvertKit) so we can notify you when VidFinder launches and send relevant product updates.
Legal basis: Consent (you explicitly opted in by submitting the form).
Account & subscription management
We use your email address and account data to authenticate you, manage your subscription, send transactional emails (receipts, password resets), and enforce our Terms of Service.
Legal basis: Performance of a contract (processing is necessary to provide the service you signed up for).
Website & product analytics
We use Vercel Analytics, PostHog, and Google Search Console to understand how visitors and users interact with VidFinder so we can improve it. Vercel Analytics is privacy-first and does not use cookies or track individuals across sites. PostHog collects in-app behavioural events (e.g. features clicked, searches performed) linked to your account.
Legal basis: Legitimate interests (improving the product in a way that does not override your privacy rights).
4. Third-party processors
We share data with the following third-party services solely to operate VidFinder. Each acts as a data processor on our behalf and is contractually bound to handle your data securely.
| Provider | Purpose | Data transferred |
|---|---|---|
| Supabase | Authentication & database (account storage) | Email address, hashed password, subscription status |
| Paddle | Payment processing & subscription billing | Email address, billing details, order metadata |
| ConvertKit | Email list management & newsletters | Email address |
| PostHog | Product & behavioural analytics | In-app events, session data, account ID |
| Vercel Analytics | Privacy-first website analytics | Page views, referrer, device type (no PII) |
| Google Search Console | Search performance monitoring | Aggregate search & click data (no individual tracking) |
We do not sell, rent, or share your personal data with any other third parties.
5. International data transfers
Some of our third-party processors operate in the United States (ConvertKit, Vercel, Google). Where personal data is transferred outside the UK, we rely on processors who participate in frameworks or standard contractual clauses recognised as providing an adequate level of protection under UK GDPR.
6. How long we keep your data
- Account data — retained in Supabase for the duration of your account. You can request deletion at any time; we will remove your data within 30 days. Note that billing records may be retained longer to meet legal/tax obligations.
- Email address (marketing) — retained in ConvertKit until you unsubscribe or request deletion.
- Product analytics — PostHog retains event data for up to 1 year. We do not store this data independently.
- Website analytics — Vercel Analytics retains aggregated data per their own retention policy (typically 90 days for raw events). We do not store analytics data independently.
- Payment records — Paddle retains transaction records as required by applicable financial regulations. We retain order metadata for up to 7 years for tax and accounting purposes.
7. Your rights
Under UK GDPR you have the right to:
- Access the personal data we hold about you.
- Rectify inaccurate or incomplete data.
- Erase your data ("right to be forgotten").
- Restrict how we process your data.
- Object to processing based on legitimate interests.
- Withdraw consent at any time (this doesn't affect prior processing).
- Data portability — receive your data in a structured, machine-readable format.
To exercise any of these rights, email us at support@vidfinder.io. We will respond within 30 days.
9. Complaints
If you have a concern about how we handle your data, please contact us first at support@vidfinder.io. If you remain unsatisfied, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection.
10. Changes to this policy
We may update this policy from time to time. When we do, the "last updated" date at the top of this page will change. For significant changes, we will notify early-access subscribers by email.