Privacy Policy

VidFinder is owned and operated by Wyler Marketing Ltd (Company No. 14047902), a company registered in England and Wales. For the purposes of UK data protection law, Wyler Marketing Ltd is the Data Controller for personal information collected through this website.

We may collect the following categories of personal data:

• Email address and password hash — when you create an account or sign up for early-access. Passwords are hashed by Supabase and never stored in plain text.
• Billing and payment information — your payment method details are collected directly by Paddle (our payment processor). We do not receive or store card numbers. We do receive order metadata: plan type, amount, currency, and subscription status.
• Usage and analytics data — pages visited, referrer, browser type, device type, and country-level location, collected automatically when you browse the site or use the app.
• Product behaviour data — feature interactions, session length, and in-app events collected via PostHog to help us understand how VidFinder is used.
• Search Console data — aggregate search query and click data associated with vidfinder.io, as reported by Google Search Console. This data is not linked to individual users on our end.
• Advertising measurement data — if you accept analytics cookies, the Meta Pixel sets two first-party cookies (_fbp and _fbc) and captures page views and key conversion actions (e.g. signup button clicks, checkout views). We also send matched, hashed event data (your hashed email, hashed user ID, IP address, and user agent) to Meta server-side via the Conversions API so we can measure the effectiveness of our advertising.

We use the data we collect for the following purposes:

We share data with the following third-party services solely to operate VidFinder. Each acts as a data processor on our behalf and is contractually bound to handle your data securely.

We do not sell, rent, or share your personal data with any other third parties.

Some of our third-party processors operate in the United States (ConvertKit, Vercel, Google, Meta Platforms). Where personal data is transferred outside the UK, we rely on processors who participate in frameworks or standard contractual clauses recognised as providing an adequate level of protection under UK GDPR.

• Account data — retained in Supabase for the duration of your account. You can request deletion at any time; we will remove your data within 30 days. Note that billing records may be retained longer to meet legal/tax obligations.
• Email address (marketing) — retained in ConvertKit until you unsubscribe or request deletion.
• Product analytics — PostHog retains event data for up to 1 year. We do not store this data independently.
• Website analytics — Vercel Analytics retains aggregated data per their own retention policy (typically 90 days for raw events). We do not store analytics data independently.
• Payment records — Paddle retains transaction records as required by applicable financial regulations. We retain order metadata for up to 7 years for tax and accounting purposes.

Under UK GDPR you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Erase your data ("right to be forgotten").
• Restrict how we process your data.
• Object to processing based on legitimate interests.
• Withdraw consent at any time (this doesn't affect prior processing).
• Data portability — receive your data in a structured, machine-readable format.

To exercise any of these rights, email us at support@vidfinder.io. We will respond within 30 days.

When you first visit the site you'll see a cookie banner asking whether to accept analytics and checkout cookies. Nothing in the "Analytics" or "Checkout" categories runs until you click Accept.

• Necessary — sign-in session cookies set by Supabase. Required for the site to work; always on.
• Analytics — PostHog (product analytics and session replay), Vercel Analytics, Speed Insights, and the Meta Pixel for ad measurement (sets the _fbp and _fbccookies). Off by default; only run after you accept. Browser-context server-side events sent to Meta's Conversions API (e.g. Lead on signup) are also gated on this consent.
• Checkout — Paddle, our payment processor. Only loaded when you accept; required to complete a purchase.

You can change your mind any time via the Cookie settings link in the footer.

If you have a concern about how we handle your data, please contact us first at support@vidfinder.io. If you remain unsatisfied, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection.

We may update this policy from time to time. When we do, the "last updated" date at the top of this page will change. For significant changes, we will notify early-access subscribers by email.