Privacy Policy

Information you give us or create in the Service:

• Account information. Your name, email address and profile picture, provided when you sign up with email or a sign-in provider such as Google. Passwords, if you use one, are handled by our authentication provider and never stored by us.
• Your content. Recordings of your screen, camera, microphone and system audio; uploaded files; thumbnails; titles, descriptions and chapters; edits you make in the editor; comments, replies, reactions and image attachments.
• Workspace information. Workspace and space names and icons, the members you invite (including their email addresses) and their roles.
• Billing information. Your plan, number of seats, billing interval and payment status. Card details are entered on and stored by Stripe, our payment processor — we never see or store your full card number.
• Messages to us. What you send through the contact form, the feedback widget (including any screenshot or video you attach) or by email, and the email address you give when joining our waitlist. When you join the waitlist we also record your approximate country, derived from your IP address at sign-up; we do not store the IP address itself.

Information collected automatically when you use the Service:

• Usage and analytics data. Pages visited, features used (for example, starting a recording or copying a share link), approximate location derived from your IP address, browser, device and operating system, referring website, and page-load performance. See section 7 for how analytics work.
• Session replays. On dashboard pages only, we may record how the page is used (clicks, scrolling, page changes) to find and fix usability problems. Text you type into form fields is masked and never recorded. Replays are never recorded in the video editor, on share pages for anonymous viewers, or on embeds.
• Viewing data. When someone watches a shared video we count the view. If the viewer is signed in, their name may be shown to the people who manage that video. If they are not signed in, we set a random identifier cookie so repeat views are not double-counted; it is not linked to their identity.
• Recording metadata. To power features like automatic zoom, the recorder may capture your cursor position and clicks during a recording, alongside technical details such as duration and which tracks (camera, microphone, system audio) were recorded.
• Logs and diagnostics. IP address, timestamps, error reports and similar technical data that our servers and providers record to keep the Service secure and working.

• To provide the Service: store, process, render and deliver your videos; host share pages and embeds; run workspaces, comments and notifications.
• To send you service emails — for example, sign-in, invitations, comments, "your video is ready", billing notices and important changes. You can turn off non-essential notifications in your settings.
• To process payments and manage subscriptions.
• To understand how the Service is used so we can improve it, and to measure and fix performance problems and errors.
• To keep the Service secure: prevent fraud, spam and abuse, and enforce our Terms of Service.
• To respond to your requests and provide support.
• To comply with legal obligations.

We do not sell your personal information, we do not use it for advertising, and we do not use your videos or other content to train artificial intelligence models.

Where data protection laws such as the GDPR apply, we rely on these legal bases:

• Contract — to provide the Service you signed up for, including storing and sharing your content and processing payments.
• Legitimate interests — to keep the Service secure, prevent abuse, and understand and improve the product through analytics, in ways that respect your rights.
• Consent — where we ask for it, for example optional communications. You can withdraw consent at any time.
• Legal obligation — for example, keeping billing records required by tax law.

Sharing you control. Vlibr is built for sharing. When you share a video link, anyone who has the link can watch it, and an embedded video can be watched on any website where it is placed. Members of a workspace can see the content in the spaces they have access to, and workspace owners and admins can see member details and video viewer lists.

Service providers. We use trusted providers that process data on our behalf, only to operate the Service and under contracts that protect your data:

Legal and safety. We may disclose information if we believe it is required by law, a court order or a valid government request, or necessary to protect the rights, property or safety of our users, the public or us.

Business transfers. If White Whale or Vlibr is involved in a merger, acquisition or sale of assets, information may be transferred as part of that deal. We will tell you before your information becomes subject to a different privacy policy.

White Whale is a company registered in the United States, and some of our providers store data in the United States. Your information may be transferred to, stored in and processed in the United States and other countries whose data protection laws may differ from yours. Where required, these transfers rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or the EU–U.S. Data Privacy Framework, as offered by our providers.

• Account and content — for as long as your account is active. You can delete individual videos at any time.
• When you delete your account — your account, the workspaces you own and their content are deleted immediately; there is no waiting period, and it cannot be undone. Copies in encrypted backups are overwritten on a rolling basis, normally within 30 days.
• Content in someone else's workspace — videos and comments you created in a workspace owned by another person belong to that workspace and may remain there after you leave or delete your account.
• Billing records — kept as long as tax and accounting laws require, typically up to 7 years.
• Analytics data — kept for up to about 12 months.
• Logs — kept for a limited period for security and debugging, then deleted.

We use a small number of cookies and similar browser storage. We do not use advertising or cross-site tracking cookies.

• Essential — keeping you signed in (set by Clerk), remembering your language and interface preferences, and protecting the Service. These are required for the Service to work.
• View counting — a random identifier (vlibr_vid_anon, kept up to 1 year) set on share pages for viewers who are not signed in, so repeat views are not double-counted.
• Analytics — we use PostHog, hosted in the European Union. For visitors who are not signed in, analytics use temporary browser session storage, which is cleared when the tab is closed, and no analytics cookies are set. For signed-in users, analytics remember you across visits. Analytics never run on embedded videos, or on share pages for viewers who are not signed in.

You can block or delete cookies in your browser settings; essential cookies are required for signing in. Many browsers and extensions can also block analytics.

Depending on where you live, you may have the right to:

• access the personal information we hold about you and get a copy of it;
• correct inaccurate information — most of it you can edit yourself in your account settings;
• delete your information — you can delete your account yourself from your account settings;
• object to or restrict certain processing, such as analytics;
• receive your information in a portable format;
• withdraw consent you have given;
• complain to your local data protection authority.

To make a request, use our contact form. We will respond within 30 days and may need to verify your identity first. We will not discriminate against you for exercising your rights.

California residents: we do not sell or "share" personal information as those terms are defined under California law, and we do not use sensitive personal information for purposes that would require an opt-out.

Unsubscribing: waitlist and product-announcement emails contain an unsubscribe option, and you can manage notification emails in your settings.

We protect your information with industry-standard measures, including encryption in transit (HTTPS), encryption at rest by our storage providers, access controls, and authentication handled by a dedicated security provider. Shared video links are hard to guess, but anyone who has a link can open it — share links only with people you trust. No system is perfectly secure; if we learn of a security incident affecting your information, we will notify you as required by law.

The Service is not intended for children under 13, and we do not knowingly collect personal information from them. In the European Economic Area and the UK, users under 16 need permission from a parent or guardian. If you believe a child has given us personal information, contact us through our contact form and we will delete it.

We may update this Privacy Policy from time to time. The "Last updated" date at the top shows when it last changed. If we make material changes, we will notify you by email or in the Service before they take effect.

Questions or requests about privacy? Reach us through our contact form.

White Whale Agency, LLC — operator of Vlibr. Registered in Delaware, United States.