Privacy Policy

Last updated: May 18, 2026

1. Information We Collect

OneCut collects: email, encrypted password, OAuth tokens for connected platforms, uploaded video metadata, and deployment history.

2. How We Use Information

We use collected information only for: service delivery, account management, video deployment automation, customer support, and analytics.

3. Data Storage

User data is securely stored on Supabase. Video files are kept in Supabase Storage with Row-Level Security, accessible only to the owner.

4. Third-Party Sharing

We do not sell or share your information with third parties. Publishing content to connected platforms (YouTube, Instagram, TikTok, Facebook, X (Twitter), Threads, etc.) is performed only within the OAuth scope you have explicitly granted.

5. Data Deletion

You may request account deletion at any time. Upon request, all personal data is deleted within 30 days. OAuth tokens are immediately revoked when you disconnect an account.

6. Cookies

OneCut uses only essential cookies for session management. We do not use marketing tracking cookies.

7. Contact

For privacy-related questions, contact us at getonecut@gmail.com.

Per-platform data handling (incl. TikTok)

OneCut processes only the minimum data needed to publish content and show performance, via the API of each platform you connect: YouTube, Instagram, Facebook, TikTok, X (Twitter), and Threads. For TikTok specifically, the OAuth access token and account identifiers we receive (open_id and profile information) are used solely to upload the video you explicitly choose to publish to your own TikTok account (inbox/post). All tokens are stored encrypted in Supabase (processed by Vercel and Inngest) and are never sold or shared with third parties. When you disconnect a platform the token is immediately discarded, and upon an account-deletion request all data is deleted within 30 days.